Privacy Policy

Effective as of September 3, 2024

ACCESSIBILITY -- IF YOU ARE HAVING ANY TROUBLE ACCESSING THIS PRIVACY NOTICE OR THE WEBSITE, PLEASE CONTACT FAN SERVICES TOLL FREE AT 1-855-288-8842, 24 HOURS A DAY, 7 DAYS A WEEK OR VIA OUR CONTACT US PAGE AT contact us page.

Privacy Policy Applicability

The privacy policy on this page (“Privacy Policy”) describes how Fanatics, LLC, a Delaware limited liability company, together with its subsidiaries or affiliates(collectively, "Fanatics,” “we,” “our,” or “us”) uses, discloses, and otherwise processes your personal information collected (1) through its websites, social media accounts, mobile applications, and digital platforms (collectively, the “Properties”), (2) in person (such as in retail stores), and (3) through other online and offline interactions, such as email, messaging and phone interactions (collectively, the “Services”). The Services are intended for use by residents of the United States (“U.S.”) in accordance with U.S. laws, the Terms of Use and this Privacy Policy.

Fanatics operates this website pursuant to agreements with NFL Properties LLC ("NFLP"; NFLP and the other NFL Entities (National Football League, its member professional football clubs, NFL Properties LLC, NFL Ventures, Inc., NFL Ventures, L.P. and its direct and indirect subsidiaries..) shall hereinafter be referred to as the "NFL"). Both the NFL and Fanatics (collectively "we," “our,” or "us") recognize that you care how information about you is used and shared. When you interact with the Website, you are providing your information to both us and the NFL.

This Privacy Policy does not apply to:

a. Information about our own employees, contractors, agents, and job applicants in their capacity as such; or

b. The privacy practices of our business partners, including companies whose branded apparel, merchandise, and collectibles we sell (“Partner Entities”) through the Properties. Fanatics does not control and is not responsible for our Business Partners’ privacy or security practices and this policy does not apply to any other website, social media account, mobile application, or other digital platform operated by our Partners (collectively “the Partner’s Sites”), to the full extent permitted by law. For more information about how the Partner Entities process your personal information, or to exercise your privacy rights with respect to personal information held by the Partner Entities, please visit the Partner’s Sites.

1. Sources of Personal Information

We collect personal information about you from the following sources:

a. Directly From You . We may collect personal information during your access or use of the Services, such as when you sign up for marketing, make purchases, enter contests, create or verify an account, contact us for customer service, assistance, or for other engagement, interact with us at in-person events, browse or interact with our Properties, engage with our Fanatics Family of Companies , leave a review, post or submit content, and participate in promotions.

b. From Your Friends . If you consent, your friends and contacts may provide personal information about you in connection with our “friend” referral program and for other purposes. You may only provide us with information about another person if you have that person’s consent.

c. Cookies and Other Tracking Technologies . When you access or use the Services, we may collect data using cookies and other tracking technologies, such as information about your device, internet usage, cookie identifiers, location, website activity, and other details about your use of the Services. For further information on how we use such technologies to collect personal information, see Section 6 – “Cookies and Other Tracking Technologies.”

d. Service Providers . We may collect personal information from service providers who are assisting us in the supply of our products and carrying out our business, such as from identity providers you consent to use with us, to fulfill orders, and provide customer assistance.

e. Other Third Parties and Publicly Available Information . We may collect personal information from other third parties that provide information to us, such as Business Partners (see Section 4), advertising networks, data brokers, government and other public sources, and social media platforms and networks.

We may obtain information that we receive from the various sources described in this Privacy Policy, including third-party sources, and combine, use or disclose it for the purposes identified below.

2. Types of Personal Information Collected

Depending on which Services you use, we may collect the following types of personal information about you:

a. Identifiers , such as your contact information (including your name, email address, postal address, and telephone number), alias, unique personal identifier, social media and/or messaging identifiers (including social sign-on credentials when you consent to and provide them to us), authentication information you create (such as account password), and device identifiers (such as advertising IDs, pixel and cookie IDs, and Internet Protocol (“IP”) address).

b. Customer Records , such as:

i. Financial information, including financial account number

ii. Signatures, and

iii. Your physical characteristics or a description of you.

c. Demographic information , such as age and gender.

d. Internet and other electronic activity that is gathered automatically when you interact with our Services or with our advertisements, such as browsing and search history, browser information, device type, Operating System (OS) version, and other information about your interactions with our Services. For example, we use session replay tools to record your interactions with the Properties, such as how you move throughout the Properties and engage with our webforms.

e. Geolocation information , including: (a) non-precise geolocation for some Services, such as IP-based geolocation; and (b) precise geolocation for other Services. This may be collected automatically (such as through our tracking technologies) or based on information you provide.

f. Commercial information and preferences , such as purchase information (including payment method and payment information) and related records (such as information about returns, shipping, customer service interactions). We also collect information about your preferences, such as your favorite teams and players.

g. Audio, visual, electronic, and similar information , such as call recordings when you call us, chat with us, pictures that you may provide (including of ID cards), video footage from events or that you submit, chats, posts, reviews or other comment you provide, or other similar information. For example, i f you contact us using chat, messaging apps, or social media, the content of the conversation may be monitored or recorded by us or our service providers. If you participate in our mobile messaging program, we may also collect your mobile phone number, your carrier’s name, and the date, time and content of your messages, and other information you provide as part of that program.

h. Biometric information , such as a scan of your facial geometry used to verify your identity.

i. Inferences drawn from any of the information we collect to create a profile about you reflecting your preferences and characteristics.

j. Sensitive personal information , which may include the following in some jurisdictions:

i. Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.

ii. Precise geolocation.

iii. Racial or ethnic information.

k. Other information related to specific services , such as information we collect in connection with the sale of Digital Assets and NFTs.

3. How We Use Your Personal Information

We may use your personal information for the following purposes:

a. To provide you with products and services, such as to:

i. Communicate with you, including to:

A. respond to your inquiries;

B. give you updates on your orders;

C. support returns, exchanges, recalls, warranties, and similar issues; and

D. notify you of important administrative or legal issues, such as changes to our terms or practices.

ii. Facilitate your interactions with us, including to:

A. allow you to access our Properties;

B. create and maintain accounts for you;

C. personalize your interactions with us and our Properties and Services;

D. verify your eligibility for and enroll you in certain programs, benefits, or contests, transactions, or other programs ; and

E. authenticate your identity (such as to allow you to access your account or to process a privacy rights request)

iii. Facilitate transactions , payments and other similar interactions

iv. Otherwise facilitate your relationship with us.

b. For marketing , such as to market Fanatics goods and services or those of our Fanatics Family of Companies , Business Partners, and other third parties; in connection with contests and promotions; and in other ways described in Section 6 – “Cookies and Other Tracking Technologies.”

c. For insights , such as to identify trends and make inferences about you and your interactions with us, our Fanatics Family of Companies , and Business Partners, such as to analyze your behavior and preferences, how you use and engage with our Properties, and to evaluate and improve our products and services and those of our Fanatics Family of Companies and Business Partners.

d. To comply with legal obligations and defend ourselves and others , such as to comply with legal requirements (including maintaining compliance-related records); to cooperate with law enforcement and other lawful requests; to enforce our Terms of Use, policies, and contracts; establish, exercise, or defend against legal claims that we have may have or pursue; and to protect ours, our customers’, and other parties’ safety, property, or rights.

e. For other internal business and operational purposes , such as:

i. For our internal business administration, such as to manage customer accounts, including keeping general records of customers, sales, customer care, and other interactions;

ii. Auditing related to our interactions with you;

iii. For security purposes, such as to respond to security incidents or to protect genuine customers and our business from fraud, to minimize the risk of false details being used, to avoid abuse by fraudsters, and to protect against other malicious, deceptive, fraudulent, infringing, or illegal activity;

iv. To manage competitions or other promotions that you have chosen to participate in;

v. To comply with contractual obligations;

vi. To improve or develop our products and services (including our marketing activity more generally), including operating our Services and improving or personalizing your experience (such as building profiles about you or how you interact with us), by analyzing our interactions with you; assessing how our products and services are used; and evaluating the effectiveness of marketing activities; and

vii. For internal research and quality assurance, such as conducting surveys and questionnaires to gain feedback on our products and services and measuring analytics to improve our products and services.

f. Third party applications and identity providers. If you optionally decide to connect Google (or, if available, another third party) as a sign-on provider for the Properties, we will use your data as required to verify and authenticate your account with Google. If you connect your account to a third-party provider, we, our service providers, and Business Partners may share information about you with them based on your consents to each party and as set forth in our and their privacy policies. Each third-party site or service has its own terms of use and privacy policies that govern your use of their services.

g. In connection with a corporate transaction , including in connection with a sale, acquisition, merger, change of control, bankruptcy, or similar transaction involving some or all of our assets, or due diligence related to such transactions.

h. For any purpose for which you provide consent .

We may use de-identified, anonymized, or aggregated versions of your personal information for any purpose.

4. How We Disclose Your Personal Information

We may disclose your personal information in the ways that are described in this Privacy Policy, such as to:

a. Fanatics Family of Companies : We may disclose your personal information to our Fanatics Family of Companies , such as affiliates, parents, and subsidiaries for the purposes described above, including marketing. For example, our companies may exchange information about your interactions with our Services, your preferences, and inferences we may have drawn about in or customize our offerings and market our services to you.

b. The public or third parties when you choose to, direct us to, or otherwise intentionally interact with such third parties through our Services , such as:

i. Information you provide in response to offers from third parties through our Services.

ii. Information in product reviews, including your name or username, pictures you upload, and any other information you choose to include. Reviews that you submit to our Properties will be viewable to other users.

iii. Content that you choose to post or otherwise make available to other users or the public in connection with the Services or on third party sites.

c. Service providers : We may permit our vendors and subcontractors to access your personal information in connection with performing services for us, such as IT providers, internet service providers, and data analytics providers. We may also engage other companies to provide certain services, such as identity verification, email distribution, market research, fraud prevention, security, and, if you contact us using chat, messaging apps, or social media, monitoring and recording the content of any conversations.

d. Professional consultants , such as accountants, lawyers, and financial advisors.

e. Vendors that process your transactions , including your credit card issuer, a third-party credit verification company, the product handler, the delivery service, and vendors who may ship product to you directly from their warehouse (including drop-ship and print-on-demand vendors).

f. Entities that provide you with services or benefits : We may disclose your information to entities to provide you with services or benefits. For example, when you opt to use a feature independently controlled by a Business Partner, such as a pay-over-time payment system or single-sign in system, we may share your personal information to them with your consent. Similarly, when you participate in our FanCash program, we may disclose your personal information to Business Partners and other third parties to operate the program and allow you to acquire and redeem points.

g. Law enforcement, government agencies, and other recipients for legal, security, or safety purposes : We may disclose your personal information: (a) as required by law or legal process; (b) to anticipate, prevent, detect, and investigate suspected fraud, harassment, or other violations of any law, rule, or regulation; (c) to investigate suspected violations of any terms or policies applicable to the Services provided by us or our third party providers or our Fanatics Family of Companie; (d) to protect our, our users’, and other third parties’ rights, property, and safety; and (e) to otherwise establish, exercise, and defend against legal claims.

h. Other entities in connection with a corporate transaction : We also may transfer your personal information in connection with a sale, acquisition, merger, change of control, bankruptcy, joint venture, or similar transaction involving some or all of our assets. If required by law, we will take commercially reasonable efforts to notify you via email (sent to the email address specified in your account) or by posting an updated Privacy Policy on our website(s) if such a transaction results in the transfer of control of your personal information to a non-affiliate.

i. Business Partners for their own purposes : We may disclose your personal information to third parties for their own purposes (“Business Partners”) or their service providers in several situations such as:

i. Advertisers, ad platforms and networks, and social media platforms;

ii. Leagues, teams, and other partners whose branded apparel, merchandise, and collectibles we sell or promote through the Properties;

iii. Commercial data partners to whom we make information available for their own marketing purposes; and

iv. Partners who work with us on promotional or sponsorship opportunities available through our Services, including co-branded products and services.

You may contact us to opt out of such disclosures in some cases (See “Your Choices” below). However, we do not control how Business Partners use and share your information once they receive it. You will need to contact such Business Partners directly for information about their privacy practices or to exercise rights you may have.

j. Other entities with your consent .

5. Wholesale & Business-to-Business Transactions

Fanatics also engages in business-to-business interactions, such as when Fanatics interacts with the personnel of our business partners, including vendors and business customers. We collect limited information about such individuals, primarily consisting of name, demographic information, basic contact information and professional or employment-related information (such as your job title, employer, credentials, professional affiliations, skills, and other professional information). We use such information to facilitate our relationship with our business partners, including marketing.

6. Cookies and Other Tracking Technologies

Our Properties (and authorized third parties) use cookies and other tracking technologies to collect information about you, your device, and how you interact with our Properties. This section contains additional information about:

• The types of tracking technologies we use and the purposes for which we use them
• The types of information we collect using these technologies
• How we disclose or make information available to others
• Choices you may have regarding these technologies
• Types of Cookies and Tracking Technologies We Use

Our Properties and the third parties that we authorize may use the following tracking technologies:

i. Cookies , which are a type of technology that install a small amount of information on a user's computer or other device when they visit a website. Some cookies exist only during a single session and some are persistent over multiple sessions over time. These may be traditional client-side or server-side cookies, local stored objects (LSOs), or part of backend server-to-server integrations.

ii. Pixels, web beacons, and tags , which are types of code or transparent graphics that contain a unique identifier. In addition to the uses described below, these technologies provide analytical information about the user experience and help us customize our marketing activities. In contrast to cookies, which are stored on a user's computer hard drive, pixels, web beacons, and tags are embedded invisibly on web pages.

iii. Session replay tools , which record your interactions with our Properties, such as how you move throughout our Properties and engage with our webforms. In addition to the uses described below, this information helps us improve our Properties and identify and fix technical issues visitors may be having with our Properties.

iv. Embedded scripts, custom links and SDKs , which allow us to build and integrate custom apps and experiences, some of which may be developed by a third party.

a. Purposes for Using These Technologies

We and authorized third parties use these technologies for purposes including:

i. Personalization , such as remembering user preferences, authentication, login details and browsing behavior; tracking your activity across online properties and platforms over time to better understand your preferences and interests; and personalizing online content;

ii. Improving performance , such as maintaining and improving the performance of our Properties and Services;

iii. Analytics , such as analyzing how our websites are used. For example, we use Google Analytics to help us improve our Properties, performance and user experiences. Google Analytics may use cookies and other tracking technologies to perform their services. To learn how Google Analytics collects and processes data, please visit www.google.com/policies/privacy/partners ; and

iv. Advertising , such as providing you with offers that may be of interest to you; conducting targeted advertising to you on our Properties and those of third parties; and measuring the effectiveness of our communications with you and advertising campaigns, including identifying how and when you engage with our communications.

b. Information Collected

These tracking technologies collect data about you and your device, such as your IP address, location (both approximate and precise), cookie ID, device ID, AdID, operating system, browser used, browser history and referrers, search history, and information about how you interact with our Properties (such as pages on our Properties that you have viewed).

c. Disclosures of Your Information

We may disclose information to third parties or allow third parties to directly collect information using these technologies on our Properties, such as social media companies, advertising networks, companies that provide analytics including ad tracking and reporting, security providers, infrastructure service providers (such as to reduce delays and increase efficiency of the Properties based on your location), and others that help us operate our business and Properties.

d. Your Choices

Some of the third parties we work with participate with the Digital Advertising Alliance (“DAA”) and Network Advertising Initiative (“NAI”). The DAA and NAI provide mechanisms for you to opt out of interest-based advertising performed by participating members at http://www.aboutads.info/choices/ and https://optout.networkadvertising.org/ . You may also click on the AboutAds icon on advertisements and follow the instructions on how to opt out.

You can also refuse or delete cookies using your browser settings. If you refuse or delete cookies, some of our Properties’ functionality may be impaired. Please refer to your browser’s Help instructions to learn more about how to manage cookies and the use of other tracking technologies. If you change computers, devices, or browsers; use multiple computers, devices, or browsers; or delete your cookies, you may need to repeat this process for each computer, device, or browser. Opting out of interest-based advertising will not opt you out of all advertising, but rather only interest-based advertising from us or our agents or representatives.

Some browsers have incorporated Do Not Track (“DNT”) preferences. At this time, we do not honor Do Not Track signals. Some browsers have incorporated Global Privacy Controls (“GPC.”) When a compliant signal is detected by the Properties, we honor GPC controls.

7. Data Retention

We will retain your personal information for as long as necessary to fulfill the purposes we have outlined above unless we are required to do otherwise by applicable law. This includes retaining your personal information to provide you with the products or services you have requested and interact with you; maintain our business relationship with you; improve our business over time; ensure the ongoing legality, safety and security of our Services and relationships; or otherwise in accordance with our internal retention procedures. Once you have terminated your relationship with us, we may retain your personal information in our systems and records in order to ensure adequate fulfillment of surviving provisions in terminated contracts, or for other legitimate business purposes, such as to enable easier future user onboarding, demonstrate our business practices and contractual obligations, or provide you with information about our products and services in case of interest.

8. Third-Party Websites and Social Media Services

a. Third-Party Websites. The Services may contain links to other websites or Internet resources. When you click on one of those links, you are contacting another website or Internet resource. We have no responsibility or liability for, or control over, those other websites or resources or their collection, use and disclosure of your information, and this Privacy Policy does not apply to personal information collected through those websites or resources. We suggest that you read the privacy policy and terms of use of each such website.

b. Social Media, Widgets and Open Forums. Our Services may allow you to engage with social media services, such as Facebook, Twitter, Pinterest and Instagram ("Social Networks"), and widgets such as the "Share this" button, or interactive mini-programs that run on our Services or which link from Social Networks to our Services ("Social Functions"), potentially including identity and messaging functions run by these networks. These Social Functions may access, collect, and integrate with your Social Network accounts and information. For example, these Social Functions may collect your IP address, identify which page you are visiting on our Services, or set a cookie. Social Functions may also be used to register you as a Services user. If you choose to use these Social Functions, you may be sharing certain Social Network profile elements with us, including your name, birthday (month/day), comments, contacts, email address, photos, or favorite teams.

This sharing is subject to each Social Network's own privacy policy and terms of use. We do not control those Social Networks or your profiles on those services, nor do we modify your privacy settings on those services or establish rules about how your personal information on those services will be used. Please refer to the privacy settings in your Social Network account to manage the data that is shared with us through your account.

Information you include and transmit online in a publicly accessible blog, chat room, or Social Network, or that you share in an open forum such as an in-person panel or survey, may be viewed and used by others without any restrictions. We do not control such uses of your personal information, and by using such services you assume the risk and acknowledge that the personal information provided by you may be viewed and used by us and/or third parties for any number of purposes and that the usage restrictions set forth in this Privacy Policy do not apply to such services. To request removal of your personal information from a blog, community forum or other publicly accessible part of the Services, contact us using the information in the Contact Us section. In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so.

9. Your Choices

We strive to offer you with choices about how your personal information is used and disclosed. Some of the ways in which you may exercise these choices are described below.

a. Opting Out of Our Services.

i. Email: you can unsubscribe from commercial emails using the unsubscribe link, typically at the bottom of the e-mail. If you have an account with us, you may opt-out of some or all future unsolicited commercial communications by updating your account’s personal information settings (where available).

ii. SMS: If you have provided your mobile phone number and we have separately obtained your consent to participate in our SMS marketing campaigns on behalf of our ourselves or our affiliated entities, you may opt out by responding to a message with the keyword STOP.

iii. Referral: If you participate in our referral program, the friend you referred may contact us using the information in the Contact Us section of this policy to opt out of future communications from us.

iv. Mobile: On most devices, mobile application users may opt out of mobile communications from us via their device settings (mobile browser cookies require a separate opt-out, as explained below).

In addition, you may request that we delete your personal information by emailing your request to the email address in the Contact Us section, and we will process your request within a reasonable time after receipt, subject to our rights under the Data Retention section above. To exercise your privacy rights with respect to personal information held by Business Partners, please visit the Business Partners’ website(s).

b. Direct Marketing Opt-Out. If you do not want your personal information disclosed to any third party who may use such information for direct marketing purposes, then you may opt-out of such disclosures by sending an email to the email address in the Contact Us section. However, we are not responsible for removing your personal information from the lists of any third party who has previously been provided with your information in accordance with this Privacy Policy, and any elections or privacy choices you may make with respect to receipt of certain types of e-mails or marketing communications from us will not apply to any such third parties. You should contact any third parties that send you communications directly with respect to choices that they may make available to you with respect to such communications.

c. Setting Cookie Preferences. Most web browsers can be set to detect or reject cookies. Each browser is different, so check the “Help” or “Settings” menu of your browser settings to learn how to change your cookie preferences. If you reject cookies, some features on our websites may not work properly. Cookie-based opt-outs must be performed on each device and browser that you wish to have opted-out.

d. Opting out of Interest-Based Advertising. To provide you with more relevant and interesting experience, we may work with third party companies to display ads or customize the content on the website and on other websites. Some of these third parties may participate in DAA NAI programs, which provide mechanisms for you to opt out of interest-based advertising performed by participating members at www.aboutads.info and optout.networkadvertising.org. Opting out of interest-based advertising will not opt you out of all advertising, but rather only interest-based advertising from us or our agents or representatives.

e. Location Data Opt-Out. In some cases, you may also adjust the settings on your personal device or mobile device to allow or restrict the sharing of location information. For example, the "location" permissions on your personal device or mobile device may allow you to elect whether to never share location information with us, to share location information only while you are using the Services or always share location information even if you are not using the Services. If you elect to not share your location information, you may be unable to access some features of our Services that are designed for mobile devices or that require us to confirm your location. Also, in the event that you prevent the sharing of location information, we may still estimate your general location based on the IP address you use to access our Services.

f. Account Modification : If you have a Fanatics account, you may be able access, update, delete, or correct your personal information by logging into your account.

g. Push Notifications . We also may enable our mobile application to offer automatic (or “push”) notifications. We will provide push notifications only to those users who permit such notifications. If you would like to opt-out of push notifications, you can do so using your mobile device settings.

10. Security of Your Personal Information

We use reasonable security measures to protect the confidentiality of the personal information submitted to us both during transmission and after we receive it.

11. Children’s Privacy

We are committed to the preservation of online privacy for all of our visitors, including children. We provide products and provide services intended for adults (i.e., those age 18 or older, or 21 in some jurisdictions). If you make a purchase on our Services, you are representing that you are an adult. We will not knowingly collect any personal information from children under the age of 18 without the consent of that child's parent or guardian. If you are not 18 or older, you are not authorized to use the Services. If we become aware that personal information from a child under 18 has been collected, we will use all reasonable efforts to delete such information from our database. If any parent, guardian or other responsible adult becomes aware that we have collected personal information from a child under the age of 18, please contact us using the information in the Contact Us section.

12. Other Notices and Important Information

a. Privacy Policy Changes. We have the sole discretion to change, modify, add, or remove portions of this Privacy Notice from time to time. New versions of this Privacy Notice will be posted here. Our collection, use and disclosure of your personal information will be governed by the version of this Privacy Notice in effect at the time of such collection, use or disclosure. If we materially change the way that we collect, use or disclose your personal information, we will notify you through a notice, updated Privacy Notice on the Services, or by email (sent to the email address specified in your account), prior to or upon the change(s) becoming effective. Accordingly, when you access or use the Services, you should check the date of this Privacy Notice and be aware of any changes since the last version. Your continued use of the Services following the posting of any changes to this Privacy Notice means that you accept such changes.

b. Notice to International Users. The Services are intended for use by residents of the U.S. in accordance with U.S. laws, the Terms of Use and this Privacy Policy. Information we collect about you may be transferred to the United States, which may have laws less protective than those in your country. You also understand that data stored in the U.S. may be subject to lawful requests by the courts or law enforcement authorities in the U.S.

c. Terms and Conditions. Use of the Services is governed by, and subject to, the Terms of Use . Your use or accessing of the Services constitutes your agreement to be bound by the Terms of Use .

d. Metrics. Fanatics discloses yearly metrics around our compliance with California Data Subject Rights requests. The latest disclosure can be found on the CCPA Metrics page.

e. Contact Us. For questions relating to this Privacy Policy or if wish to exercise your rights, we can be contacted at:

C/O Fanatics
Attention: Privacy Legal Department
8100 Nations Way, Jacksonville, FL 32256
privacy@fanatics.com
1-855-438-0679

13. Additional U.S. States Privacy Disclosures

a. Data Subject Rights

This section pertains specifically to the exercising of your individual rights with Fanatics. In order to exercise your rights with Business Partners, please contact them directly.

If you live in California, Colorado, or certain other states that have adopted generally applicable privacy laws, you may have certain rights, subject to legal limitations, regarding your personal information:

• Right to Know . You may have the right to confirm that we process your personal information and to request information about the categories of personal information we have collected about you, the categories of sources from which we collected the personal information, the purposes for collecting the personal information, the categories of third parties to whom we have disclosed your personal information, and the purpose for which we sold or shared your personal information. You may also have the right to obtain copies of the specific pieces of personal information we have collected about you in a portable format.
• Right to Delete . You may have the right to request that we delete your personal information.
• Right to Correct. You may have the right to request that we correct inaccurate personal information that we maintain about you.
• Right to Opt Out of Sale/Sharing/Targeted Advertising. You may have the right to opt out of the sale or sharing of your personal information and processing of your personal information for targeted advertising.
• Right to Opt-Into Sensitive Data Processing . You may have the right to have sensitive data processed only upon your opt-in consent.
• Right to Object to Automated Decision Making or Profiling . You may have the right to object to the use of your personal information in automated (non-human based) decisions or to profile/evaluate personal aspects relating to you such as your preferences, interests, behavior, or locations.

You may exercise the Right to Know, Right to Delete, and Right to Correct, if you have these rights, via our webform or by calling Fanatics at 855.438.0679.

In order to fully exercise the Right to Opt-Out of Sale/Sharing/Targeted Advertising, you must c omplete the webform from each browser, on each device, and on each Fanatics-run website that you use . These steps are necessary so that we can place a site-specific cookie signaling that you have opted out on each browser and each device you use. Please note:

• If you block cookies, we will be unable to fully comply with your request to opt out with respect to information automatically collected online through tracking technologies.
• If you clear cookies, you will need to complete the webform again on each browser on each device where you have cleared cookies

If you are a Nevada resident, please contact us using the information in the Contact Us section above to exercise your opt-out rights under Nevada Revised Statutes §603A et seq.

We will not discriminate against you, in any manner prohibited by applicable law, for exercising these rights.

• Verification : In order to process your requests, we may need to obtain information to locate you in our records or verify your identity, depending on the nature of the request. In most cases, we will collect some or all of the following data elements: first and last name, email address, telephone number, and postal address. In some cases, we may request different or additional information, including a signed declaration that you are who you say you are , and will inform you if we need such information . If you submit a request, you will also need to verify your identity by clicking a link in an email sent to your email account.
• Authorized Agents : Authorized agents may exercise rights on behalf of consumers. We may require the agent to demonstrate authority to act on behalf of you by providing signed permission from you . We may also require you to verify your own identity directly with us or to directly confirm with us that you provided the authorized agent permission to submit the request. To make a request as an authorized agent, please submit a request through our webform.
• Appeal: If we deny your rights request, you may have the right to appeal our decision. To submit an appeal, you can email us at privacy@fanatics.com . We will inform you of our response.
• Notice of Financial Incentive . For information about any current financial incentives click here .

b. Additional Data Processing Disclosures

In addition to the disclosures above, this section provides supplemental information about how we process personal information.

• Types of Personal Information

We have collected the following types of personal information in the preceding 12 months: (a) identifiers, (b) personal information subject to the California Customer Records Act, (c) characteristics of protected classifications under California or federal law, (d) internet and other electronic network activity information, (e) geolocation data, (f) commercial information, (g) audio, electronic, visual, thermal, olfactory or similar information, (h) biometric information, (i) professional and employment-related information, (j) inferences, and (k) sensitive personal information.

• Sources of Your Personal Information

We collect your personal information from the following categories of sources: (a) directly from you, (b) from your friends, (c) cookies and other tracking technologies, (d) service providers, and (e) other third parties and publicly available information.

• Use of Your Personal Information

We collect personal information for the following business and/or commercial purposes: (a) to provide you with products and services, (b) for marketing, (c) for insights, (d) to comply with legal obligations and defend ourselves and others, (e) for internal business and operational purposes; (f) in connection with a corporate transaction; and (g) for any other purpose for which you provide consent.

We use and disclose Sensitive Personal Information only for (i) performing services or providing goods reasonably expected by an average consumer; (ii) detecting security incidents; (iii) resisting malicious, deceptive, or illegal actions; (iv) ensuring the physical safety of individuals; (v) short-term, transient use, including nonpersonalized advertising; (vi) performing or providing internal business services; (vii) verifying or maintaining the quality or safety of a service or device; or (viii) purposes that do not infer characteristics about you.

• Disclosure of Personal Information

The categories of Third Parties to which we disclose personal information for a business purpose or to whom we sell or share personal information, including for targeted advertising, are summarized in the chart below. We do not knowingly sell or share the personal information of minors under the age of 16.

Our data disclosure practices are detailed in the chart below: