Effective Date: January 1, 2020
Last Revised on: May 25, 2021
Last Reviewed on: May 25, 2021
Citi Trends, Inc. (“we,” “our,” or “Citi Trends”) respects your privacy and is committed to providing a transparent notice of our Privacy Notice and Disclosure for California Residents. This Privacy Notice and Disclosure for California Residents applies solely to those who reside in the State of California (“consumers” or “you”).
The purpose of this notice and privacy policy is to provide California residents, at or before the time we collect your personal information, with a comprehensive description of our online and offline practices regarding the collection, use, disclosure, and sale of personal information and of the rights of consumers regarding your personal information:
- Notice at Collection:
Notice at or before the point of collection, about the categories of personal information to be collected from you and the purposes for which the personal information will be used.
- Privacy Policy:
A comprehensive description of our online and offline practices regarding the collection, use, disclosure, and sale of personal information and of your rights regarding your personal information, including:
- Your right to know about personal information collected, used, disclosed or sold:
- Categories of personal information we collected in the preceding 12 months
- Categories of sources from which personal information is collected
- Categories of personal information, if any, we disclosed or sold in the preceding 12 months
- For each category identified as disclosed or sold, categories of third parties to whom the information was disclosed or sold
- Your right to opt-out of the sale of personal information and transparency that we sell personal information
- Your right to request deletion of your personal information
- How to submit a verified consumer request for your Right to Know or Right to Delete
- How to use an authorized agent to submit a verified consumer request
- Your right to non-discrimination for the exercise of your privacy rights
- Notice of financial incentive
- Other California privacy rights
- Changes to our privacy notice
- Our contact information
Notice at Collection and Privacy Policy for California Residents
Notice at Collection
The purpose of this Notice at Collection is to provide you with timely notice, at or before the point of collection, about the categories of personal information to be collected from you and the purposes for which the personal information will be used.
Do We collect? | Categories of Personal Information |
☒ | A. Identifiers: For example, a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.
|
☒ | B. Personal Information Categories from Cal. Civ. Code § 1798.80(e): For example, a name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. |
☒ | C. Characteristics of CA or Federal Protected Classifications: For example, race, religion, national origin), age (40 and over), gender, sexual orientation, medical condition, ancestry, pregnancy (includes childbirth, breastfeeding and/or related medical conditions), familial status, disability, veteran status, or genetic information. |
☒ | D. Commercial Information: For example, records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
☐ | E. Biometric Information: For example, physiological, biological or behavioral characteristics, including an individual’s deoxyribonucleic acid (DNA), that can be used, singly or in combination with each other or with other identifying data, to establish individual identity. Biometric information includes, but is not limited to, imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information. |
☒ | F. Internet or Other Similar Network Activity: For example, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement |
☒ | G. Geolocation Data: For example, information that can be used to determine a device’s physical location |
☐ | H. Sensory or Surveillance Data: For example, audio, electronic, visual, thermal, olfactory, or similar information that can be linked or associated with a particular consumer or household |
☒ | I. Professional or Employment-Related Information: For example, compensation, evaluations, performance reviews, personnel files and current and past job history. |
☐ | J. Education Information (defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99)): Education records directly related to a student maintained by an education institution or party acting on its behalf, for example, non-public information that can be used to distinguish or trace an individual’s identity in relation to an educational institution either directly or indirectly through linkages with other information. |
☒ | K. Profile Data: For example, inferences drawn from personal information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
Please note that Personal Information does not include:
- Publicly available information from government records.
- De-identified or aggregated consumer information.
- Information excluded from the CCPA’s scope, like:
- health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
- personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (CalFIPA), and the Driver’s Privacy Protection Act of 1994.
We use the personal information we collect for one or more of the following business purposes:
- To fulfill or meet the reason for which the information is provided
- For our internal operation purposes
- For auditing relating to consumer transactions including ad impressions and compliance with regulations
- Fraud and security detection
- Debugging to identify and repair errors
- Short-term data use for the current interaction that is not used to build a profile
- Servicing transactions and accounts (e.g., customer service, maintaining and servicing accounts, customer verification, payment processing) and providing services on behalf of business or service provider (e.g., financing, advertising or marketing, analytics)
- To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.
- Undertaking internal research for technological development and demonstration
- Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
- To share the personal information with service providers to carry out other business purposes.
We will not collect additional categories of personal information without providing you a new Notice at Collection disclosing those categories.
Please use the following link if you would like to navigate to “Do Not Sell My Personal Information“: https://cititrends.com/do-not-sell-my-personal-information/
Privacy Policy
The purpose of this privacy policy is to provide you with a comprehensive description of our online and offline practices regarding the collection, use, disclosure, and sale of personal information and of your rights regarding your personal information.
Your Right to Know
The purpose of this privacy policy is to provide you with a comprehensive description of our online and offline practices regarding the collection, use, disclosure, and sale of personal information and of your rights regarding your personal information.
What We Sell and Right to Opt-Out
Citi Trends does not sell the personal information of minors under 16 years of age without affirmative authorization. Citi Trends does not sell our users’ personal information in the traditional sense (i.e., get paid to share your information); however, the California Consumer Privacy Act (“CCPA”) defines “sale” very broadly, and it likely includes certain transfers of information by Citi Trends in the sense that Citi Trends sells and has sold personal information to third parties in the preceding 12 months as disclosed in the table below. As a California resident, you have the right to direct Citi Trends to stop selling your personal information, and to refrain from doing so in the future, which is called the “Right to Opt-Out.”
You may exercise your Right to Opt-Out by clicking “Do Not Sell My Personal Information” by submitting a request to privacy@cititrends.com.
We have sold. | What personal information has Citi Trends sold to third parties over the last 12 months? | Categories of third parties to whom this category of personal information has been sold |
☒ | A. Identifiers: For example, a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.
| Lead Generation |
☒ | B. Personal Information Categories from Cal. Civ. Code § 1798.80(e): For example, a name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number | Lead Generation |
☒ | C. Characteristics of CA or Federal Protected Classifications: For example, race, religion, national origin), age (40 and over), gender, sexual orientation, medical condition, ancestry, pregnancy (includes childbirth, breastfeeding and/or related medical conditions), familial status, disability, veteran status, or genetic information. | Lead Generation |
☒ | F. Internet or Other Similar Network Activity: For example, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement | Lead Generation |
☒ | G. Geolocation Data: For example, information that can be used to determine a device’s physical location | Lead Generation |
☒ | K. Profile Data: For example, inferences drawn from personal information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | Lead Generation |
Authorized Agent for Opt-Out: If you use an authorized agent to exercise your right to opt-out of the sale of personal information, please note that Citi Trends requires that the authorized agent submit proof in the form of a written authorization from you that they have been authorized to act on your behalf.
Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize personal information sales.
Your Right to Request Deletion of Your Personal Information
You have the right to request that Citi Trends delete any of your personal information collected or maintained by Citi Trends, subject to certain exceptions. You can do this through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”
We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:
- Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
- Debug products to identify and repair errors that impair existing intended functionality.
- Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
- Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
- Comply with a legal obligation.
- Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
Submitting a Verified Consumer Request
You have the right to submit verified consumer requests to know information or for deletion. The request to know can be for any or all of the following about you:
(1) Specific pieces of personal information that Citi Trends has;
(2) Categories of personal information Citi Trends has collected;
(3) Categories of sources from which the personal information is collected;
(4) Categories of personal information that Citi Trends sold or disclosed for a business purpose;
(5) Categories of third parties to whom the personal information was sold or disclosed for a business purpose; and
(6) The business or commercial purpose for collecting or selling personal information.
The request to delete is to delete any of your personal information collected or maintained by Citi Trends, subject to certain exceptions.
You may only make a verifiable consumer request to know information twice within a 12-month period. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm that the personal information relates to you. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
You can submit requests by emailing us at privacy@cititrends.com or by calling 844.968.1067. Your request will be verified using information you provide. If you call 844.968.1067, you will be asked to provide the same information requested via email for verification purposes.
If you submit a request that is not through one of these designated methods or is deficient in some manner unrelated to verification, we will either treat it as if it had been submitted in accordance with our designated methods or provide you with information on how to submit the request or remedy any deficiencies.
Once we receive your verifiable consumer request, we will send you an acknowledgement letter within 10 days which will describe our verification process. We will respond to your request within 45 days, if we are able to verify your identity. Requests for deletion will require a separate confirmation that you want your information deleted.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
If requests from you are manifestly unfounded or excessive in particular because of their repetitive character, we may either charge a reasonable fee or refuse to act on the request, notifying you of our reason for refusing to act. If we determine that the request warrants a fee, we will notify you of the reason for that determination and provide you with a cost estimate before completing your request.
Please note that, in responding to your request, we are not permitted to disclose or provide you with your Social Security number, driver’s license number or other government-issued identification number, financial account number, any health insurance or medical identification number, an account password, security questions and answers, or unique biometric data generated from measurements or technical analysis of human characteristics. However, we will inform you with sufficient particularity that we have collected the type of information without disclosing the actual data.
Requests to Know or Delete for Child Under the Age of 13: We do not knowingly collect information of minors under the age of 13.
Using an Authorized Agent to Submit a Request
Only you, a person registered with the California Secretary of State, or a person you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. If you use an authorized agent, you may provide a power of attorney executed pursuant to California Probate Code sections 4000 to 4465. If a power of attorney that meets those provisions is not submitted, you will be required to verify your identity directly by submitting a verified consumer request according to the procedures in the section “Submitting a Verified Consumer Request.” If anyone purporting to be an authorized agent for a consumer contacts us, we will require proof that the authorized agent has been authorized to act on the consumer’s behalf.
Requests to Access or Delete Household Information
We will not comply with a request to know specific pieces of information or a request to delete household person information unless all consumer of the household jointly request access to specific pieces of information or deletion, we can individual verify all members of the household and we can verify each is currently a member of the household. If a member of a household is a minor under 13, we must obtain verifiable consent before complying with a request for specific pieces of information for the household or deletion of household personal information.
Your Right to Non-Discrimination for the Exercise of a Privacy Right
You have a right not to receive discriminatory treatment by the business for the exercise of the privacy rights conferred by the CCPA. Unless permitted by the CCPA, we will not:
- Deny you goods or services.
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of goods or services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
Notice of Financial Incentive
We currently offer the following financial incentives:
|
Name of Service with Financial Incentive |
Customer survey sweepstakes (“Giveaway”) |
|
Categories of Information |
Identifiers: Name, e-mail address and phone number (required). Characteristics of protected class: Age, Gender, Ethnicity (optional). |
|
Summary of Financial Incentive |
This financial incentive provides an opportunity to win a prize such as a $100 gift card for providing information in response to an online survey. |
|
Description of the Terms of the Financial Incentive If Applicable. |
The full terms of the customer survey sweepstakes, Giveaway, are found here: https://cititrends.com/csat-sweepstakes-official-rules/ |
|
Explanation of how the financial incentive or price or service difference is reasonably related to the value of the consumer’s data. |
In our good-faith estimation the value of the financial incentive offer reflects the value Citi Trends receives from obtaining the customer’s information provided in response to the survey. The incentive may fluctuate based on a number of variables such as the time of year, upcoming holidays, and the response to the survey. |
Other California Privacy Rights
California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our Website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to privacy@cititrends.com or write us at: Citi Trends, Inc., 104 Coleman Boulevard, Savannah, GA 31408.
Citi Trends responds to Do Not Sell Opt-Out requests as disclosed in the section “What we Sell and Right to Opt-Out.” Otherwise, Company does not respond to Web browser “do not track” signals or other mechanisms.
Other parties may collect personally identifiable information about your activities over time and across different Web sites when a consumer uses our Web site or service.
Changes to Our Privacy Notice
Citi Trends reserves the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on the website and update the notice’s effective date.
Contact for More Information
If you have any questions or comments about this notice, the ways in which Citi Trends collects and uses your information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
Phone: 844.968.1067
Email: privacy@cititrends.com
Postal Address: Citi Trends, Inc., 104 Coleman Boulevard, Savannah, GA 31408
Attn: Privacy
