Contract analysis

Section 1: Scope and Applicability This Addendum applies to individuals who are "consumers" as defined under the CCPA — that is, natural persons who are residents of the State of California, however identified, including by any unique identifier. Cal. Civ. Code § 1798.140(i). This Addendum does not apply to individuals who are not California residents, and the rights and disclosures described herein are available onl

Section 2: Categories of Personal Information Collected The following table describes the categories of personal information, as enumerated in Cal. Civ. Code § 1798.140(v), that Cascade has collected from or about California consumers during the preceding twelve (12) months, together with examples specific to Cascade's operations. Not all examples listed in each category will have been collected about every consumer;

Section 3: Sources of Personal Information Cascade collects personal information from the following categories of sources: 3.1 Directly from California Consumers. Cascade collects personal information directly from California consumers when they: • Create or update a Cascade online account or Cascade Rewards membership; • Make a purchase through cascade.com, the Cascade mobile application, or at a Cascade retail loca

Section 4: Business and Commercial Purposes for Collection, Use, and Disclosure Cascade collects, uses, and discloses the personal information described in Section 2 above for the following business and commercial purposes: 4.1 Business Purposes As that term is defined in Cal. Civ. Code § 1798.140(e), Cascade uses personal information for the following business purposes: Performing Services. Cascade uses personal inf

Section 5: Categories of Personal Information Sold or Shared in the Preceding 12 Months Disclosure Regarding Sales and Sharing. Cascade "sells" and "shares" personal information as those terms are defined under the CCPA. Specifically, Cascade shares personal information with advertising and analytics partners for the purpose of cross-context behavioral advertising. In some instances, these transfers may also constitu

Section 6: Categories of Personal Information Disclosed for a Business Purpose in the Preceding 12 Months The following table describes the categories of personal information that Cascade has disclosed to service providers or contractors for a business purpose in the preceding twelve (12) months, together with the categories of service providers and contractors that received such personal information: Contractual Saf

Section 7: Retention Periods by Category of Personal Information Cascade retains personal information for the periods described in the table below, or for such longer period as may be necessary to comply with applicable law, resolve disputes, enforce agreements, or fulfill legitimate business purposes. The retention periods set forth below represent the maximum period for which each category of personal information i

Section 8: Sensitive Personal Information — Use and Disclosure 8.1 Categories of Sensitive Personal Information Collected As described in Section 2 above, Cascade collects the following categories of sensitive personal information from California consumers: (a) Precise geolocation data. Cascade collects precise geolocation data (latitude and longitude coordinates) through the Cascade mobile application when a consume

Section 9: California Consumer Rights Under the CCPA, California consumers have the following rights with respect to their personal information. This section describes each right and how it may be exercised. For information on how to submit requests, see Section 11 below. 9.1 Right to Know / Right to Access (Cal. Civ. Code §§ 1798.100, 1798.110, 1798.115) California consumers have the right to request that Cascade di

Section 10: Financial Incentive / Loyalty Program Notice (Cal. Civ. Code § 1798.125(b)) In accordance with Cal. Civ. Code § 1798.125(b), Cascade provides the following notice regarding the financial incentive offered through the Cascade Rewards loyalty program. Program. Cascade Rewards is a loyalty and rewards program administered by Cascade Rewards Corp. (EIN 86-3381729), a wholly owned subsidiary of Cascade Retail

Section 11: How to Submit Requests California consumers may submit requests to exercise any of the rights described in this Addendum using the following methods: Online (DSR Portal). Consumers may submit requests through the DSR portal at [cascade.com/privacy](https://cascade.com/privacy). The DSR portal allows consumers to submit requests to know/access, requests to delete, requests to correct, requests to opt out o

Section 12: Annual DSR Metrics (FY2024) In accordance with the CCPA regulations, Cascade provides the following metrics regarding consumer requests received and processed during the fiscal year ended January 31, 2024 ("FY2024"): Notes: • The average response time across all request types in FY2024 was twenty-seven (27) calendar days. While this performance fell within the forty-five (45) calendar day regulatory requi

Section 13: Do Not Track / Global Privacy Control Global Privacy Control (GPC). Cascade recognizes the Global Privacy Control (GPC) signal as a valid opt-out-of-sale/sharing request under the CCPA. The GPC signal is a browser-level or extension-level setting that communicates a consumer's preference to opt out of the sale and sharing of personal information. When a consumer visits cascade.com or uses the Cascade mobi

Section 14: Third-Party Data-Sharing Practices and Contractual Safeguards Third-Party Advertising and Analytics Partners. Cascade currently engages forty-seven (47) third-party advertising and analytics partners in connection with its digital-advertising, marketing, and analytics operations. These partners include programmatic-advertising platforms, demand-side platforms, supply-side platforms, advertising networks,

Section 15: Children's Personal Information Cascade does not knowingly sell or share the personal information of consumers under sixteen (16) years of age. Cascade is committed to protecting the privacy of children and minors and has implemented the following measures: Age-Gating Mechanisms. Cascade has implemented age-gating mechanisms on cascade.com and the Cascade mobile application that are designed to identify c

Section 16: Changes to This Addendum Cascade reserves the right to amend, modify, or update this Addendum at any time and for any reason. When Cascade makes material changes to this Addendum, the updated Addendum will be posted on cascade.com/privacy with a revised effective date. Where practicable, Cascade will