Privacy Policy

LAST UPDATED: August 26, 2024

Vestis

Vestis U.S. Privacy Policy Scope

Vestis™ (also "we," "us," or "our") offers a broad range of services designed to suit the diverse and ever-changing needs of our clients. In order to perform and tailor our services, we collect certain personal information. We take privacy very seriously, and we want you to know how we collect, use, share, and protect information about you and how you can exercise your privacy rights. By interacting with Vestis through our websites, technologies, products, and services, you consent to the use of information that is collected or submitted as described in this "Privacy Policy."

This Privacy Policy applies to our businesses within the United States of America and provides an overview of our practices across all of our U.S. service offerings. Vestis may also provide supplemental privacy notices to you at specific points where we collect information about you in order to provide additional details about our practices that are applicable to specific products, services, and locations. You should read this Privacy Policy in conjunction with such additional privacy notices. Vestis also maintains some additional privacy policies that are specific to lines of business or to address specific legal requirements. In all cases, this Privacy Policy is subject to applicable law.

This Privacy Policy only applies to personal information that Vestis collects. Please be aware that, in connection with your interactions with Vestis, you may at times share information directly with third parties. For example, you may access a third-party website through a link from Vestis, you may interact with one of our clients or partners in conjunction with our services, or you may communicate with us through a third-party platform. In these circumstances, Vestis does not have control over what information such third party may collect about you or how that information is used or shared. To learn about how a third party collects, uses, and shares your information, and how to exercise your privacy rights with respect to such third-party processing, please review such third party's privacy notice.

Also, generally speaking, please be assured that Vestis does not sell or rent your information to data brokers or to third parties purely for our profit, or disclose it in any way other than those disclosed in this Privacy Policy. There are instances where Vestis has disclosed personal information in order to provide our customers with personalized services or customized offers to improve your online experiences, and to improve our products and services. As explained more fully below, we do this in ways that are intended to extend the Vestis experience to our customers in a variety of environments.

For California residents, please scroll down for more information about your California privacy rights.

Types of Information We Collect

When you interact with Vestis, we may collect certain information about you. Please see the list below to understand what information we collect, the sources of that information, how and why we will use that information, and the potential other recipients of that information. As noted above, we may provide additional details to you about how we collect, use, and share your information at the time of collection (for example, at the time you choose to take a consumer survey that we administer).

Category of Personal Information Collected

• "Identifying Information", such as your name, mailing address, email address, day and month of birth, and telephone number.

Source of Information

• We may collect Identifying Information from you when you visit and use our websites and other technology, order our products or services, communicate with us by mail, phone, email, via our chat box, and/or fill out requests for information through our advertisements, surveys, or promotions. We also may receive Identifying Information from third parties that are authorized to provide us with such information.

Purpose for Collection

• We use Identifying Information to better serve our customers by making their interactions with us more relevant and enjoyable. We do so by responding to and fulfilling your requests, improving our services, customizing your interactions with us, and communicating with you for marketing and other purposes. For example, we may use Identifying Information to provide you with special offers, notify you of new products, provide customer service, and follow up with you regarding your needs and requests. See the "How to opt-out" section below for more information about how to opt-out of promotional and marketing materials.

Categories of Recipients

• We may disclose Identifying Information with service providers to help us achieve the purposes outlined above. Identifying Information may be disclosed to or combined between affiliates, partners, or other related entities of Vestis for internal business and marketing/promotional purposes. Identifying information, including mailing lists, may also be disclosed by Vestis with other third parties for their marketing/promotional purposes. See the "Additional Ways We May Share Information About You" section below for more information.

Category of Personal Information Collected

• "Sensitive Personal Information", such as your driver's license number, state identification card, precise geolocation (if you permit us to obtain your precise geolocation), your race, your ethnic origin, and biometric data; combination of email address, financial account, debit card, or credit card with security or access code, password, or other credentials allowing access to your account.

Source of Information

• We may collect Sensitive Personal Information from you when you visit and use our websites and other technology, order our products or services, communicate with us by mail, phone, email, or via our chat box. We also may receive Sensitive Personal Information from third parties that are authorized to provide us with such information.

Purpose for Collection

• We use Sensitive Personal Information to deliver products and services that you have requested. to respond to and/or fulfill your requests, to provide offers that may be of interest to you, for analytical and demographic purposes, and to protect the security or integrity of the Sites and our business, such as by protecting against and preventing fraud, unauthorized transactions, and managing risk exposure, including by identifying potential hackers and other unauthorized users. Your sensitive personal information will not be used for any additional purposes that are incompatible with these purposes unless we provide you with notice of those additional purposes.

Categories of Recipients

• We may share Sensitive Personal Information with service providers to help us achieve the purposes outlined above and as permitted by law.

Category of Personal Information Collected

• "Payment and Order Information", such as shipping and billing addresses, together with purchase details (products, color, size, quantity, price), card issuer and card type, credit or debit card number, expiration date, CVV code, and/or any communications we have received about your order or purchase, including information you provide about a third party, such as name, address and contact details of a recipient for delivery of goods or services, if different from yours.

Source of Information

• We may collect Payment and Order Information when you make a purchase from us or one of our partners through our websites or other technology, or at the physical locations where we operate.

Purpose for Collection

• We use the Payment and Order Information to fulfill your purchases, specifically for shipping and billing. Categories of Recipients
• We may disclose Payment and Order Information with services providers to help us achieve the purposes outlined above.

Category of Personal Information Collected

• "Device Information", related to your interactions with us, such as device information, geo-location, browser type and operating system, Internet Protocol (IP) address (a unique number that identifies your internet access), cookie information, pages viewed and accessed (including those viewed before and after interacting with our websites), how long you accessed our websites and other technology in any given session, and the date and time of access.

Source of Information

• We may collect Device Information automatically when you visit our websites or other technology, or otherwise interact with us, including communicating with us via our chat box. See below for more information on cookies and other technologies used by Vestis.

Purpose for Collection

• We use Device Information to ensure that our technology works properly, that you can see and use our intended functionality, and that our technology is secure. We also may use Device Information for analytics and marketing purposes.

Categories of Recipients

• We may disclose Device Information with service providers to help us achieve the purposes outlined above. See the "The Use of Web Technology" section below for more information.

Category of Personal Information Collected

• "Demographic Information", such as age, gender, geography, etc.

Source of Information

• We may collect Demographic Information that you choose to provide to us when you create profiles, participate in promotions, surveys, and otherwise interact with us through our site, including via our chat box. We also may receive Demographic Information from third parties that are authorized to provide us with such information.

Purpose for Collection

• We use Demographic Information to improve our services and offer our customers a more customized experience. When we use Demographic Information, it is generally aggregated and anonymized.

Categories of Recipients

• We may disclose Demographic Information with service providers to help us achieve the purposes outlined above. When we share Demographic Information, it is generally aggregated and anonymized.

Category of Personal Information Collected

• "User Preferences", such as food preferences, dietary restrictions, and related information, purchasing preferences, sizes, favorite locations, and preferred hours to receive services.

Source of Information

• We may collect User Preferences when you make purchases through us, interact with our websites and other technology, and you choose to provide it to us through surveys or other interactions or communications with us. We also may receive User Preferences from third parties that are authorized to provide us with such information.

Purpose for Collection

• We use User Preferences to improve our services, address customer requests, and offer customers a more customized experience. For example, we may use this information to determine the most desirable hours of operation or our locations, to suggest products to you that we think you may like, and to understand what products and services to offer. When we use Demographic Information, it is generally aggregated and anonymized.

Categories of Recipients

• We may disclose User Preferences with service providers to help us achieve the purposes outlined above. When we share User Preferences it is generally aggregated and anonymized.

Category of Personal Information Collected

• "Visitor Past Purchases"

Source of Information

• We collect Visitor Past Purchase information from the purchases made from us and third parties providing services on our behalf. We also may receive such information from third parties that are authorized to provide us with such information.

Purpose for Collection

• We may use Visitor Past Purchase information to improve our services, address customer requests, and offer customers a more customized experience. For example, we may use this information to be certain that we are offering the right products at the right time, and to understand ordering trends by region of the country, what products are the most popular, and generally how our business is doing. We also use Visitor Past Purchase information to offer our customers more customized offerings, for marketing purposes. When we use this information, it is generally aggregated and anonymized.

Categories of Recipients

• We may disclose Visitor Past Purchase information with service providers to help us achieve the purposes outlined above. When we share Visitor Past Purchases information it is generally aggregated and anonymized.

Category of Personal Information Collected

• "Survey, Marketing and Promotional Information", such as contact information- including name, email address, mailing address-and other information you provide in response to surveys, marketing and promotional surveys and campaigns.

Source of Information

• Provided by you, at your choice, via electronic or print surveys, questionnaires, or other means.

Purpose for Collection

• Survey, Marketing and Promotional Information is used to request more information in relation to the survey or as otherwise permitted under this Privacy Policy. We may also use Survey, Marketing and Promotional Information to improve our services and provide a better experience for you.

Categories of Recipients

• We may disclose Survey, Marketing and Promotional Information with service providers to help us achieve the purposes outlined above.

Additional Ways We May Disclose Information About You:

In addition to the disclosing of your personal information as described above, we also may disclose personal information we collect as follows:

In Connection with Business Transfers:

In the event that all or part of Vestis (such as a line of business or a division) is bought by, sold to or otherwise transferred or distributed to one or more third parties, or is in the process of a potential transaction, customer information will likely be shared for evaluation purposes and included among the transferred business assets.

To Comply with Laws:

Vestis may also disclose information about you when such disclosure appears necessary to comply with the law, a subpoena or other litigation process or to protect the interests or safety of Vestis's employees, clients, customers, or others.

The Use of Web Technology

When you visit our websites and other platforms, we use various web technologies to collect information about how and when you interact with such websites and platforms, including when you interact with us via our chat box. The web technologies we use may include cookies, web beacons, and third-party analytics.

Cookies

Cookies are small data files that our websites will generate which will include information you provide to us and information about how you use our websites. This data file will then be retained by your web browser or device to help us better tailor your experience on our sites each time you visit. These cookies will contain different information about you depending upon the types of cookies that are in use.

Types of Cookies We Use

Strictly Necessary-These cookies are used for the essential functions of our websites. For example, they allow us to keep any products or services you plan to purchase in a virtual shopping cart until you are ready to check-out.

Performance Cookies-These cookies allow us to view broad categories of information regarding who comes to our websites. This information is used to improve our website functionality and does not contain identifying information about you.

Functionality Cookies-These cookies allow us to customize your experience on our websites by storing your preferences and other information you provide to us. These are cookies designed to remember information you provide such as your preferred language, region, and, if you choose, your log-in information so that you can be automatically logged-in.

Advertising Cookies-These cookies are used to customize what ads you might see on our websites or ads from us on other websites. This information allows us to better tailor our offerings to you either through ads more appropriate to your needs, or to prevent repeated ads that you may not want.

If you do not want cookies, you can set your computer or other device to warn you each time a cookie is being set or turn off all cookies through your browser (e.g., Internet Explorer or Mozilla Firefox). Check your browser HELP menu to learn the way to change or update your cookies. However, it is possible that some parts of our websites will not operate correctly if you disable cookies; therefore, by doing so, you may not be able to take advantage of some of the website features. Note that browser-management tools for cookies are outside of our control and we cannot guarantee their effectiveness. Certain websites may have automated tools to allow you to turn off or update your cookies, and in such instance, you could use such automated tools to manage your cookie preferences.

Although cookies are not necessary to view Vestis's websites or receive advertisements from us, cookies may be required to place an online order. Should you wish to not accept cookies in your web browser, you may place an order by calling the phone numbers listed on the applicable Contact Us pages on our websites.

Web Beacons

In addition to cookies, we may include web beacons on our websites. Web beacons are small transparent images (sometimes called "clear gifs") that will let us know when you visit our websites and which links on our websites you visit. This information is helpful to know which sites are accessed so that we can improve your experience each time you visit. The web beacons we use do not collect any personally identifiable information. We can use this anonymous information to make it easier to understand what you are looking for.

Third-Party Analytics

We may also use third-party analytics software such as Google Analytics for our own internal purposes including evaluating how you use our websites. The third-party services may use cookies and similar technologies to collect and analyze information about your use and to report on activities and trends. Such services may also collect information regarding your use of other websites, applications, and online resources. For more information about Google Analytics, please go to www.google.com/policies/privacy/partners/. You may download the Google Analytics opt out browser add-on at https://tools.google.com/dlpage/gaoptout.

Offers and Promotions

At times, we may conduct offers and marketing campaigns (collectively "Customer Events"). Some of these Customer Events may involve mailing catalogs, coupons, SMS texts, or other forms of communication from us to you. These Customer Events will be directed toward visitors of our websites, individuals from lists we receive from third parties, or individuals that opt-in to a Customer Event. Some Customer Events may require you to opt-in in a manner that meets all legal requirements. Please see the "How Can I Opt-Out" section for more information about how to opt-out of Customer Events.

Sweepstakes and Other Promotions

In addition to Customer Events we provide, there may be times where you can opt into one of our sweepstakes, contests, or other promotions (collectively "Sweepstakes"). These Sweepstakes may ask for personal information such as contact information (name, email address, mailing address, etc.). Participation in our Sweepstakes is optional. If you choose to participate in our Sweepstakes, we may use and share the information you provide with our affiliates to administer the sweepstakes.

Affiliate Programs

At times, Vestis may affiliate with a third party to provide offers, promotions, or operate a rewards program (collectively "Affiliate Programs"). These Affiliate Programs may be offered on our websites, technology, or at any of our physical locations. When you provide information in connection with these Affiliate Programs, you may be providing it directly to one or more third-party affiliates and its usage will be subject to that third party's privacy notice. While our use, collection, storage, and sharing of your information will be governed by this Privacy Policy, for information on how the third-party affiliates collect, use, store, and share your data please see their individual privacy policies. In addition, for any data collected in our physical locations please see the available privacy policies at the respective points of collection for more information.

How Your Information Is Stored and Retained

At Vestis, we take the security, confidentiality, and integrity of your information very seriously. We utilize technical, physical, and administrative safeguards that are designed to protect your information from unauthorized access, retrieval, disclosure, use, and modification. If we transmit, share, or use your information we take appropriate methods to prevent from any interception or unauthorized access to that data.

We will retain your information for as long as needed to provide you products and services, comply with our legal obligations, resolve disputes, and enforce our agreements.

How Can I Opt-Out?

If you would like to opt-out of any of our promotional offerings or marketing campaigns, please email us at [email protected]. After verifying your identity, we will take appropriate measures to remove you from our marketing lists in compliance with applicable law. In addition, you may opt-out of such promotional and marketing campaigns by clicking the opt-out link at the bottom of the applicable digital marketing or advertising communications. As described further below, residents of certain states may have additional opt-out rights based on state law.

How this Privacy Policy May Change

From time to time, we may update this notice to accommodate changes in how you interact with us, address changes in the law, or for any other purpose. We will maintain a "LAST UPDATED" date at the top of this notice to show when any changes are made. Any changes we make to this notice will be effective as of the date at the top of this notice.

Information about Minors

Vestis does not target its websites or any of its services or products to children and does not knowingly collect personal information from children under thirteen (13) years of age. If Vestis learns that a child under the age of thirteen (13) has submitted personal information on Vestis's websites without parental consent, Vestis will take all reasonable measures to delete such information from our databases and to not use such information for any purpose (except where necessary to protect the safety of the child or others as required or allowed by law). If you become aware of any personal information, we have collected from children under thirteen (13), please contact us using at [email protected].

Minors under eighteen (18) years of age may email us at [email protected] to have the personal information they have provided to us deleted, subject to applicable law. Please note that, while we make reasonable efforts to comply with such requests, deletion of your personal information does not ensure complete and comprehensive removal of that data from all systems.

We do not have actual knowledge about selling or sharing personal information of consumers under the age of 16.

Notice of Financial Incentive

We may offer our customers limited-time promotions and opportunities to participate in surveys. In exchange for participating in our promotions or surveys, and providing us with your personal information, we may offer you financial incentives and/or price or service differences such as a bonus card, discount, or a coupon. We may collect personal information such as your name, email address, preferences, experiences, and engagement with Vestis ("Customer Data"). You can terminate participation at any time as explained in the applicable promotion or survey terms. We estimate that the value of the Customer Data is the value of the benefit we offer to you in connection with the promotion or survey, which is reasonably related to the costs associated with offering such benefit.

Information for California Residents - Your California Privacy Rights

The California Consumer Privacy Act of 2018, the as amended by the California Privacy Rights Act (collectively, "California Law"), grants certain rights to California residents to know about, collect, or delete the personal information that we have collected about them, to opt-out of the sale or sharing of their personal information by us to a third party, and not to be discriminated against for exercising these rights. Know

California residents have the right to know what personal information we collected, used, disclosed, and shared, and sold about them, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom Vestis discloses personal information, and the specific pieces of personal information Vestis has collected about you, within the preceding 12 months. Once we receive your request and confirm your identity and California resident status, we will disclose to you the information that we have collected about you, as required by California Law. Please note that we are only required to honor requests to know twice in a 12-month period.

Deletion

California residents have the right to request the deletion of their personal information that we collect or maintain. Once we receive your request and confirm your identity and California resident status, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. Such exceptions include, but are not limited to, when the personal information is necessary to complete a transaction or provide goods or services to you, detect security incidents, comply with the law, and for internal uses reasonably aligned with your expectations.

Correction

California residents have the right to request the correction of inaccuracies in their personal information, taking into account the nature of the personal information and the purposes for which Vestis processes it. Once we receive your request and confirm your identity and California resident status, we will use commercially reasonable efforts to correct inaccurate personal information in our records.

Opt-Out

California residents have the right to opt-out of the selling or sharing of their personal information, which can be done by following the directions below. California law requires us to identify, for the 12-month period prior to the date of this Privacy Policy, what information Vestis has "sold" or "shared" about you, and you have a right to opt-out of such sale or sharing.

In addition, and as set forth below, California Law requires us to identify, for the 12-month period prior to the date of this Privacy Policy, what information we may have "sold" or "shared" about you. For the 12-month period prior to the date of this Privacy Policy, Vestis has not sold any personal information about its customers. For the 12-month period prior to the date of this Privacy Policy, Vestis has only shared personal information about its customers as described above.

Vestis does not use or disclose Sensitive Personal Information, as defined in applicable laws, for any purpose other than those permitted by applicable law.

Non-Discrimination

California Residents have the right to not receive discriminatory treatment if and when they exercise their rights to know, delete, correct, or opt-out under California Law.

This means we cannot, for example:

• Deny goods or services to you;
• Charge different prices or rates for goods or services, including through the use of discounts or other benefits or by imposing penalties;
• Provide a different level or quality of goods or services to you; or
• Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

Please note that we may charge a different price or rate or provide a different level or quality of goods and/or services to you, if that difference is reasonably related to the value provided to you by your personal information.

Exercising Your Rights

In order to exercise your "knowledge", "deletion", "correction", and/or "opt-out" rights, you may submit a request through a web form here or call us at 1-866-837-8471 (1-866-VESTIS1). You may also authorize another person (your "agent") to submit a request on your behalf, and in the same manner.

When you exercise these rights and submit a request to us, we will verify your identity by asking you to provide us with additional information such as your email address, order numbers of previous orders of our products and services, or the last four digits of a credit or debit card used to make a purchase. We also may use a third-party verification provider to verify your identity. We will endeavor to honor such requests unless such a request conflicts with certain lawful exemptions under California's consumer privacy law. We may also verify your status as a California resident.

We aim to respond to a verifiable request within 45 days of its receipt. If we need more time to respond to your request (up to 45 additional days), we will inform you in writing.

Retention Period

We will retain your information for no longer than is reasonably necessary to provide your services, comply with our legal obligations, resolve disputes, and enforce our agreements. We retain your personal information for the period you are actively using our services plus six (6) years.

California- Direct Marketing Information

Under California Civil Code Section 1798.83 (the "Shine The Light" law), customers who are California residents and have a relationship with Vestis primarily for personal, family, or household purposes are entitled to receive, upon request and free of charge, information about the personal information (if any) we disclosed to third parties for their direct marketing purposes in the prior calendar year. This information may be requested once a year. If applicable, this information will include a list of the categories of personal information that was shared and the names and addresses of the third parties that received the information. If you are a California resident and want to make a request for this information, please submit your request in writing to: [email protected] or Vestis, 115 N. First Street, Burbank, CA 91502Attn: Assistant General Counsel Privacy (please reference the "Shine The Light Law" in your email or letter).

Privacy Policy for California Residents

Under California Civil Code Section 1789.3, California users are entitled to the following consumer notice: If you have a question or complaint regarding the websites, please send an email to [email protected]. You may also contact us by writing to Vestis, 115 N. First Street, Burbank, CA 91502 Attn: Privacy Team or by calling us at 1-866-837-8471 (1-866-VESTIS1). California residents may reach the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs by mail at 1625 North Market Blvd., Sacramento, CA 95834, or by telephone at (916) 445-1254 or (800) 952-5210.

Do Not Track Signals

Do Not Track is a standard that is currently under development. As it is not yet finalized, we adhere to the standards set out in this Privacy Policy and do not respond to Do Not Track (DNT) signals except as may be required by law.

How You Can Contact Vestis

If you have any questions or concerns about this Privacy Policy, or to request a copy of this Privacy Policy in another format, please contact us at the following:

Mail: 115 N. First Street

Burbank, CA 91502

1-866-837-8471 (1-866-VESTIS1)

Attn: Privacy Team

Email: [email protected]