YOUR CHOICES AND LEGAL RIGHTS

We respect your privacy and provide you with information about our processing of your personal information and the ability to exercise control over our use of your information.

Your Choices

We provide you with the ability to make certain choices about how we use your personal information, as described below.

Marketing and Promotional Communications: You can opt out of receiving marketing and promotional communications from us at any time by using the contact information below or following the instructions included in any marketing or promotional communications that you receive from us. Note that even if you opt out of receiving marketing and promotional communications from us, you will still receive non-marketing or transactional messages from us, including messages about your account and responses to your inquiries/requests.

Cookies: As noted above, we (and our partners and providers) use cookies on the Sites for various purposes, including for analytics and advertising purposes. To learn more about the cookies in use on our Sites or to adjust your preferences with respect to the cookies deployed on the Sites, use our cookie preference tool found by clicking “Manage Cookie Preferences” in the footer of the Sites.
Location-Based Services: If you use the Apps, you may control our collection and use of location-based information by adjusting the settings on your mobile device. You can also stop our collection of location information from your device(s) by uninstalling the Apps.

Your Legal Rights

Depending on where you reside or were located when we collected your personal information, you may have certain rights in relation to your personal information, as described below.

Right of Access:
- You may ask us to confirm whether we are processing your personal information and, if so, details regarding our processing of the personal information.
- You may also request that we provide your personal information, in a portable and, to the extent technically feasible, readily usable format.
- You may request information about our disclosure of your personal information to third parties, including a list of any third parties to whom we disclosed your personal information for direct marketing purposes
Right to Delete: Subject to certain exceptions, you may request that we delete your personal information. There are some reasons we will not be able to fully address your request, such as if we need to complete a transaction for you, to detect and protect against fraudulent and illegal activity, to exercise our rights, or to comply with a legal obligation.
Right to Correct: Subject to certain exceptions, you may request that we correct inaccuracies in your personal information. We will take commercially reasonable efforts to make the corrections that you request.
Right to Opt Out of Certain Types of Information Uses and Disclosures: As described above, we use and disclose to third parties personal information for analytics and advertising purposes. If you are interested in exercising your right to opt out of the “sale” of your personal information or the processing of your personal information for “targeted advertising” (as these terms are defined in applicable law), you may submit a request at any time by submitting the Consumer Privacy Rights Request linked at the bottom of our Sites (where available based on user location and applicable law) and/or visiting the “Cookie Preferences” tool in the footer of the Sites and toggling the “Performance & Functionality” and/or “Advertising" Cookies off.
Right to Revoke Consent: We may seek your affirmative consent to process your personal information for certain purposes. Where applicable, you may revoke your consent at any time.
Right to Limit Certain Processing Activities or to Object to Certain Processing Activities: Where we have not sought your affirmative consent to process your personal information, you may have the right to limit or object to our continued processing of that personal information.

If you exercise any of the foregoing rights, we will not discriminate against you.

To make a request, please submit the Consumer Privacy Rights Request linked at the bottom of our Sites (where available based on user location and applicable law) or here (EEA, UK, and Switzerland residents). You can also contact us by email at privacy@outsideinc.com, or by phone at 1-855-OUT-0567 to submit a request. If you send a request via email, please put the statement “Privacy Rights Request” in the subject field. When we receive your request, we will provide additional information about the timing of our response, any additional information we may need from you, and if we are unable to fully comply with your request. We will endeavor to respond to your requests within the timeframe established by the applicable law. If we need additional time to respond to your request, we will inform you of the reasons why. If we decide not to take action on your request, we will explain the reasons why. We may place reasonable limits on responding to repeated requests, where allowable by law.

Alternatively, where available, you can use certain preference signals to exercise your sale and sharing opt-out right automatically with all businesses that you interact with online, including Outside. If you enable a browser-based opt-out preference signal that complies with the CCPA, such as Global Privacy Control (GPC), in certain territories, upon receipt or detection, we will make reasonable efforts to treat the signal as a valid request to opt out of the sale or sharing of personal information linked to that browser as required by applicable law.

In order to protect your privacy, we may require proof of your identity before we can act on your request. Where applicable, we will use the requested information for verification purposes only. We may decline certain requests if we cannot verify your identity and confirm the personal information we maintain relates to you.

You may authorize someone to submit a privacy rights request on your behalf (an “authorized agent”) using the submission methods outlined above. An authorized agent will need to demonstrate that you have authorized them to act on your behalf. Depending on the evidence provided, we may also contact you to verify your identity directly with us or request confirmation from you that the agent is authorized to make the request.

If we decide not to take action in response to your request, you may submit an appeal by email at privacy@outsideinc.com, or by phone at 1-855-OUT-0567. If you send an appeal via email, you must put the statement “Privacy Rights Appeal” in the subject field and provide enough information for us to understand the request you made and the rationale for the appeal. We will resolve your appeal within the timeframes established by applicable law. If your appeal is denied, we will explain why. If you continue to dispute our decision or would like to lodge a complaint regarding our handling of your personal information, you may contact the regulator in your jurisdiction that handles privacy complaints. See below for a list of contact information for the relevant regulatory bodies in select jurisdictions.

European Union: https://edpb.europa.eu/about-edpb/about-edpb/members_en

Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html
United Kingdom: https://ico.org.uk/make-a-complaint/data-protection-complaints/data-protection-complaints/
Colorado: https://coag.gov/file-complaint/
Connecticut: https://portal.ct.gov/AG/Common/Complaint-Form-Landing-page
Virginia: https://www.oag.state.va.us/consumer-protection/index.php/file-a-complaint

Additional California Privacy Disclosures

Pursuant to the CCPA, we are providing the following additional details regarding the categories of personal information that we collect, use, and disclose. Please see the “Your Legal Rights” section immediately above for the rights available to you in relation to your personal information and how you can exercise them.

Personal Information Collection and Disclosure

The following chart details which categories of personal information we have collected from and about California residents in the past twelve (12) months, the source(s) of each category of information, the categories of third parties to whom we have disclosed each category of information for a business purpose, and the categories of third parties to whom we have “sold” or with whom we have “shared” each category of information (as such terms are defined in the CCPA) (where applicable). Please note that the first column in the chart lists by category the types of information described in the “Information We Collect” section above, as required by the CCPA.

Category of Personal Information	Categories of Sources	Disclosures of Personal Information for a Business Purpose	Sale or Sharing of Personal Information
Identifiers, including names, physical addresses, email addresses, online identifiers, IP addresses, account names, and other similar identifiers.	Directly from individuals Through automated means Third-party sources	We have disclosed this category of information for a business purpose in the past 12 months to the following categories of third parties: Our Service Providers Our Analytics Providers	We have sold or shared this category of information in the past 12 months to or with the following categories of third parties: Our Advertising and Analytics Partners and Providers (including social media platforms)
Personal information categories listed in the California Customer Records statute, including telephone numbers and credit and debit card information.	Directly from individuals	We have disclosed this category of information for a business purpose in the past 12 months to the following categories of third parties: Our Service Providers
Protected classification characteristics under California or federal law, including sex/gender expression.	Directly from individuals	We have disclosed this category of information for a business purpose in the past 12 months to the following categories of third parties: Our Service Providers
Commercial information, including items purchased, obtained, or considered.	Directly from individuals Through automated means	We have disclosed this category of information for a business purpose in the past 12 months to the following categories of third parties: Our Service Providers Our Analytics Providers	We have sold or shared this category of information in the past 12 months to or with the following categories of third parties: Our Advertising and Analytics Partners and Providers (including social media platforms)
Biometric information, including images that are used for the purpose of uniquely identifying individuals.	Directly from individuals	We have disclosed this category of information for a business purpose in the past 12 months to the following categories of third parties: Our Service Providers
Internet or other electronic network activity information, including internet browsing history, search history, and interactions with the Digital Services and advertisements.	Through automated means Third-party sources	We have disclosed this category of information for a business purpose in the past 12 months to the following categories of third parties: Our Service Providers Our Analytics Providers	We have sold or shared this category of information in the past 12 months to or with the following categories of third parties: Our Advertising and Analytics Partners and Providers (including social media platforms)
Geolocation data, such as IP location.	Through automated means	We have disclosed this category of information for a business purpose in the past 12 months to the following categories of third parties: Our Service Providers
Audio, electronic, visual, thermal, olfactory, or similar information, including photographs and other recordings.	Directly from individuals Third-party sources	We have disclosed this category of information for a business purpose in the past 12 months to the following categories of third parties: Our Service Providers
Inferences, meaning inferences drawn from any of the information in the above-listed categories of information.	Through automated means Third-party sources	We have disclosed this category of information for a business purpose in the past 12 months to the following categories of third parties: Our Service Providers
Sensitive personal information, including account log-in information in combination with passwords and individuals’ precise geolocation information.	Directly from individuals Through automated means	We have disclosed this category of information for a business purpose in the past 12 months to the following categories of third parties: Our Service Providers

Purposes for Collecting Personal Information

As described in more detail in the “Information Use” section above, we collect personal information to provide and manage the Services, fulfill our contractual obligations to you, and achieve a variety of legitimate business or commercial purposes.

Disclosures of Personal Information

As detailed in the “Information Disclosure” section above, we disclose personal information to fulfill the purposes described above. We will also disclose certain categories of personal information to competent governmental and public authorities and other third parties as necessary or appropriate, including when we have a legal or contractual obligation to disclose the information.

Sale and Sharing of Personal Information

As detailed in the chart above, we “sell” and “share” (as such terms are defined in the CCPA) certain categories of personal information to and with third parties and have “sold” and “shared” certain categories of personal information in the past twelve (12) months for analytics and advertising purposes. Please refer to the chart above for additional details. Our business model is not focused on selling data; however, in certain cases our marketing partners may receive information when they run digital advertising on our platform that enables them to access certain data about your use of our site. Under CCPA, our use of these services may constitute a “sale” of personal information.

We do not "sell" or "share" the personal information of individuals we know to be under 16 years of age.\

Use and Disclosure of Sensitive Personal Information

As detailed in the chart above, we collect certain “sensitive personal information” (as defined in the CCPA). However, we do not use or disclose such information for any purpose outside of the limited permissible purposes set forth in the regulations implementing the CCPA. Such purposes including providing the Services and verifying, maintaining the quality of, and improving the Services.

We retain each category of personal information that we collect for as long as necessary to fulfill the purposes described in this Privacy Policy, including to satisfy legal or reporting requirements.