PRIVACY & COOKIE POLICY

Thank you for shopping at Tillys!!

At Tillys, our relationship with our customers is very important to us. That is why we work hard to protect your privacy and security. We prepared this Privacy Policy to explain how we collect, use, protect, and disclose information and data when you use the Tillys website, the RSQ Skate website, and the Tillys mobile applications (“App”) (collectively, the “Sites”) and when you shop at our stores or otherwise interact with Tillys. We collect customer specific information in an effort to communicate details about our products, services, contests, and promotions and for other reasons described below.

This Privacy Policy applies to personal information, defined as information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

WHAT PERSONAL INFORMATION WE COLLECT AND HOW IT IS USED AND SHARED:

For the 12-month period prior to the date of this Privacy Policy, we explain here what categories of personal information we have collected, where we got it from, and with whom we have shared it:

Category of Personal Information Collected	Source of Information	Purpose for Collection	Categories of Recipients
Contact information: such as your name, billing address, shipping address, email address, telephone numbers, or other contact information	From you; the decision to provide this information is typically optional, however, if you choose not to provide the requested information, you may not be able to use some or all of the features of our Sites or App.	To communicate with you, to send you a catalogs, information, newsletters, promotional materials and other offerings from Tillys or on behalf of our partners and affiliates, to offer a sweepstakes, contest or other promotion, when you contact us, when you request customer service or support, to complete your registration on our Sites, to administer your account(s) with us, and to provide you with offers that may be of interest to you	Our co-marketing partners, including select partners and affiliates that we believe may have offers or be of interest to you; service providers, including service providers who help authorize or deny returns to protect against fraud, abuse or otherwise not permitted returns
Login information, such as your username and password used to access your account	From you	To enable you to access our services	Our service providers who provide our Sites
Purchase and order information: contact information, together with purchase details online and in store through e-receipts, delivery details, payment details, purchase history, and any communications we have received about your order or purchase	From you	To validate, confirm, verify, deliver, install, and track your order, including to arrange for shipping, handle returns and refunds, maintain a record of the purchases you make, to service products you purchased from us, and to provide you offers that may be of interest to you	Our service providers who process, fulfill and ship orders or help authorize or deny returns to protect against fraud, abuse or otherwise not permitted returns
Other delivery information: name and address of recipient for delivery, if different from customer’s	From you	To deliver to the person at the address which you have requested	Our service providers who process, fulfill and ship orders
Payment information: name, card issuer and card type, credit or debit card number, expiration date, CVV code and billing address	From you and your payment card issuer	To check that the right person is using the right card or account, meet the requirements of the card brands or account issuers, and to make sure we are paid for what you buy	Our service providers who process payments for us; these third-party service providers are prohibited from using personal information for any other purpose and are contractually required to comply with all applicable laws and requirements, which may include Payment Card Industry Data Security Standards if they are processing payments for Tillys
Rewards information: your rewards account number, birthday, gender, age, purchase history and information on rewards or other benefits	From you when you sign up for our rewards program and from our rewards service provider	To administer your rewards account and provide you with offers that may be of interest to you	Our service providers who administer our rewards program and our co-marketing partners
Information you provide about a third party: if you send someone else a communication from the Services (such as sending a gift or virtual gift card), we may collect information such as that person's name, telephone number, email, and/or shipping address.	From you	To deliver to or communicate with the person at the address which you have requested	Our service providers and our co-marketing partners
Social media: information about you, including Usage Data and personal information such as your profile photo or avatar, your social media handle, lists of your friends, "likes", comments you have shared, including photos or videos you have shared, group, and location	From third parties, particularly social media platforms	To enhance your online shopping experience, including as a way to recognize you and welcome you to the Sites, to provide you with customized Sites content, targeted offers, promotions and advertising on the Sites, through other third party sites or apps, via email, text messages, or App push notifications that are offered by Tillys or other marketing partners that might be of interest to you.	Our service providers and our co-marketing partners
Legal information: fraud checks or flags raised about your transactions, the payment card you want to use, payment card refusals, suspected crimes, complaints, claims and accidents	From you, the police, crime and fraud prevention agencies, payment card providers, the public, regulators, your and our professional advisors and representatives	To protect you, other customers and our business against criminal activities and risks, make sure we understand and can meet our legal obligations to you and others and can defend ourselves	Our service providers who help us with fraud protection and credit risk reduction, law enforcement and other governmental authorities in accordance with applicable law.
Preference information: your marketing preferences, your account settings including any default preferences, any preferences you have indicated, the types of services/offers that interest you, reviews or ratings you provide, including photos or videos you provide along with such reviews or ratings, your search history within the Sites, and the areas of our Sites that you visit	From you, from our Sites technology interaction with your browser/devices and cookies and other similar technologies tracking the pages you visit, the marketing messages you open and the links you follow, including your interactions with social media	To enhance your online shopping experience, including as a way to recognize you and welcome you to the Sites, to provide you with customized Sites content, targeted offers, promotions and advertising on the Sites, through other third party sites or apps, via email, text messages, or App push notifications that are offered by Tillys or other marketing partners that might be of interest to you.	Third party vendors and other service providers that perform website analytic services for us
Communications: communications we have with you, including any photos or videos you send us. Please note that we record calls to our customer service team as well as conversations in the chat feature on the Sites	From you	To handle your requests, to contact you when necessary or requested, including responding to your questions and comments and providing customer support, and to obtain customer feedback and improve our customer service and customer shopping experience	Our service providers who assist us with customer service
In-store privacy: CCTV images of you in and around entrances and exits to our stores and offices, and your customer journey around our store	From you, our CCTV	To keep you, other customers, our staff, buildings, systems and data safe and secure, to investigate potential theft, fraud or misconduct	Our service providers who help us with fraud protection, law enforcement and other governmental authorities in accordance with applicable law.
Device information: IP address, internet provider, operating system and browser used, type of device, such as laptop or smart phone, mobile device ID, device cookie settings and other device details, such as MAC address and geolocation, if you use our Sites and permit them to obtain your precise geolocation, and diagnostic information, such as crash data and performance data	From you and from our Sites technology’s interaction with your browser or devices	To make sure our Sites, including app technology, work properly with your device and make sure you can see and use our intended website and apps on the device you are using, and for analytical and demographic purposes and to provide offers that may be of interest to you We also will use this information to protect the security or integrity of the Sites and our business, such as by protecting against and preventing fraud, unauthorized transactions, and managing risk exposure, including by identifying potential hackers and other unauthorized users.	Our service providers who help us with fraud protection, and third party vendors and other service providers that perform website analytic services for us
Usage data: when you use the Sites, some data is automatically transferred from your browser to our server, including your browser type, operating system type or mobile device model, viewed webpages, links that are clicked, IP address, mobile device identifier or other unique identifier, preferred language, geolocation, sites or apps visited before coming to our Sites, the amount of time you spend viewing or using the Sites, the number of times you return, or other click-stream or site usage data, emails we send that you open, forward, or click through to our Sites	From you and from Sites technology’s interaction with your browser or devices, for more information see “Cookies,” below	We will use this information for analytical and demographic purposes, including through the use of session replay technology. We also will use this information to protect the security or integrity of the Sites and our business, such as by protecting against and preventing fraud, unauthorized transactions, and managing risk exposure, including by identifying potential hackers and other unauthorized users	Third party vendors and other service providers that perform website analytic services for us
Accident information: details about any accident or injury on our premises, or health incident	From you, witnesses or observed about you	To get you the help you need, deal with the emergency services, insurance and claims	Law enforcement and other governmental authorities in accordance with applicable law, and our professional advisors.
Suspected crime information: details of your identity, image, name and address, suspected or alleged thefts, fraud, assault or other criminal behavior	From crime and fraud prevention agencies, from you, witnesses, and from the police	To protect customers, the public and our business against risks and crime	Law enforcement and other governmental authorities in accordance with applicable law, and our professional advisors.

Category of Personal Information Collected	Source of information	Purpose for Collection	Categories of recipients
Contact information: such as your name, billing address, shipping address, email address, telephone numbers, or other contact information	From you; the decision to provide this information is typically optional, however, if you choose not to provide the requested information, you may not be able to use some or all of the features of our Sites or App.	To communicate with you, to send you a catalogs, information, newsletters, promotional materials and other offerings from Tillys or on behalf of our partners and affiliates, to offer a sweepstakes, contest or other promotion, when you contact us, when you request customer service or support, to complete your registration on our Sites, to administer your account(s) with us, and to provide you with offers that may be of interest to you	Our co-marketing partners, including select partners and affiliates that we believe may have offers or be of interest to you; service providers, including service providers who help authorize or deny returns to protect against fraud, abuse or otherwise not permitted returns
Login information, such as your username and password used to access your account	From you	To enable you to access our services	Our service providers who provide our Sites
Purchase and order information: contact information, together with purchase details online and in store through e-receipts, delivery details, payment details, purchase history, and any communications we have received about your order or purchase	From you	To validate, confirm, verify, deliver, install, and track your order, including to arrange for shipping, handle returns and refunds, maintain a record of the purchases you make, to service products you purchased from us, and to provide you offers that may be of interest to you	Our service providers who process, fulfill and ship orders or help authorize or deny returns to protect against fraud, abuse or otherwise not permitted returns
Other delivery information: name and address of recipient for delivery, if different from customer’s	From you	To deliver to the person at the address which you have requested	Our service providers who process, fulfill and ship orders
Payment information: name, card issuer and card type, credit or debit card number, expiration date, CVV code and billing address	From you and your payment card issuer	To check that the right person is using the right card or account, meet the requirements of the card brands or account issuers, and to make sure we are paid for what you buy	Our service providers who process payments for us; these third-party service providers are prohibited from using personal information for any other purpose and are contractually required to comply with all applicable laws and requirements, which may include Payment Card Industry Data Security Standards if they are processing payments for Tillys
Rewards information: your rewards account number, birthday, gender, age, purchase history and information on rewards or other benefits	From you when you sign up for our rewards program and from our rewards service provider	To administer your rewards account and provide you with offers that may be of interest to you	Our service providers who administer our rewards program and our co-marketing partners
Information you provide about a third party: if you send someone else a communication from the Services (such as sending a gift or virtual gift card), we may collect information such as that person's name, telephone number, email, and/or shipping address.	From you	To deliver to or communicate with the person at the address which you have requested	Our service providers and our co-marketing partners
Social Media: information about you, including Usage Data and personal information such as lists of your friends, "likes", comments you have shared, groups and location	From third parties, particularly social media platforms	To enhance your online shopping experience, including as a way to recognize you and welcome you to the Sites, to provide you with customized Sites content, targeted offers, promotions and advertising on the Sites, through other third party sites or apps, via email, text messages, or app push notifications that are offered by Tillys or other marketing partners that might be of interest to you.	Our service providers and our co-marketing partners
Legal information: fraud checks or flags raised about your transactions, the payment card you want to use, payment card refusals, suspected crimes, complaints, claims and accidents	From you, the police, crime and fraud prevention agencies, payment card providers, the public, regulators, your and our professional advisors and representatives	To protect you, other customers and our business against criminal activities and risks, make sure we understand and can meet our legal obligations to you and others and can defend ourselves	Our service providers who help us with fraud protection and credit risk reduction, law enforcement and other governmental authorities in accordance with applicable law.
Preference information: your marketing preferences, your account settings including any default preferences, any preferences you have indicated, the types of services/offers that interest you, reviews or ratings you provide, your search history within the Sites, and the areas of our Sites that you visit	From you, from our Sites technology interaction with your browser/devices and cookies and other similar technologies tracking the pages you visit, the marketing messages you open and the links you follow, including your interactions with social media	To enhance your online shopping experience, including as a way to recognize you and welcome you to the Sites, to provide you with customized Sites content, targeted offers, promotions and advertising on the Sites, through other third party sites or app, via email, text messages, or App push notifications that are offered by Tillys or other marketing partners that might be of interest to you.	Third party vendors and other service providers that perform website analytic services for us
Communications: communications we have with you. Please note that we record calls to our customer service team as well as conversations in the chat feature on the Sites	From you	To handle your requests, to contact you when necessary or requested, including responding to your questions and comments and providing customer support, and to obtain customer feedback and improve our customer service and customer shopping experience	Our service providers who assist us with customer service
In-store privacy: CCTV images of you in and around entrances and exits to our stores and offices, and your customer journey around our store	From you, our CCTV	To keep you, other customers, our staff, buildings, systems and data safe and secure, to investigate potential theft, fraud or misconduct	Our service providers who help us with fraud protection, law enforcement and other governmental authorities in accordance with applicable law.
Device information: IP address, internet provider, operating system and browser used, type of device, such as laptop or smart phone, mobile device ID, device cookie settings and other device details, such as MAC address and geolocation, if you use our Sites and permit them to obtain your precise geolocation, and diagnostic information, such as crash data and performance data	From you and from our Sites technology’s interaction with your browser or devices	To make sure our Sites, including app technology, works properly with your device and make sure you can see and use our intended website and apps on the device you are using, and for analytical and demographic purposes and to provide offers that may be of interest to you We also will use this information to protect the security or integrity of the Sites and our business, such as by protecting against and preventing fraud, unauthorized transactions, and managing risk exposure, including by identifying potential hackers and other unauthorized users.	Our service providers who help us with fraud protection, and third party vendors and other service providers that perform website analytic services for us
Usage Data: when you use the Sites, some data is automatically transferred from your browser to our server, including your browser type, operating system type or mobile device model, viewed webpages, links that are clicked, IP address, mobile device identifier or other unique identifier, sites or apps visited before coming to our Sites, the amount of time you spend viewing or using the Sites, the number of times you return, or other click-stream or site usage data, emails we send that you open, forward, or click through to our Sites	From you and from Sites technology’s interaction with your browser or devices, for more information see “Cookies,” below	We will use this information for analytical and demographic purposes, including through the use of session replay technology. We also will use this information to protect the security or integrity of the Sites and our business, such as by protecting against and preventing fraud, unauthorized transactions, and managing risk exposure, including by identifying potential hackers and other unauthorized users	Third party vendors and other service providers that perform website analytic services for us
Accident information: details about any accident or injury on our premises, or health incident	From you, witnesses or observed about you	To get you the help you need, deal with the emergency services, insurance and claims	Law enforcement and other governmental authorities in accordance with applicable law, and our professional advisors.
Suspected crime information: details of your identity, image, name and address, suspected or alleged thefts, fraud, assault or other criminal behavior	From crime and fraud prevention agencies, from you, witnesses, and from the police	To protect customers, the public and our business against risks and crime	Law enforcement and other governmental authorities in accordance with applicable law, and our professional advisors.

COMBINED INFORMATION

We may combine your information, including Usage Data, with information from third parties in order to enhance our ability to communicate with you and provide you opportunities to purchase products or services that we believe may be of interest to you. In addition, from time to time, we may establish relationships with other people or entities whom we believe to be trustworthy and whom we have asked to confirm that their privacy practices are consistent with ours. In this context, we may disclose to third parties your Usage Data and other personal information that you provide to us, so long as combined and used in aggregate form and in a manner that does not identify you.

COOKIES & OTHER TECHNOLOGY

Cookies are small files saved to your computer. Cookies can be used for several important purposes. For example, they allow us to distinguish you from other users on our website which help us to provide you with a great online experience as well as improve our website.

"Clear gifs" (also sometimes called pixels or web beacons) are tiny graphics with a unique identifier, similar in function to cookies, that are used to track the online movements of website users.

Tillys uses these technologies, either directly or indirectly, to assist us with your requests and make your browsing experience easier (i.e. by remembering which language you prefer) this way you enjoy a seamless experience. They allow us to gauge where our visitors come from (e.g., Google search), recognize and count the number of visits to our Sites, as well as how visitors move around the Sites. Cookies help us to improve not only the way our website works, but to ensure you find what you’re looking for easily as well. They assist us with understanding how you use our website. They also allow us to target you with specifically tailored advertising based on your visit(s) along with carry out business analytics, other statistic activities and traffic.

If you would like to learn more about Cookies and clear GIFs you can do so by visiting www.allaboutcookies.org or https://thenai.org/about-online-advertising/what-are-my-options/, which include additional useful information on cookies and can show you how to block these tools using different types of browsers. For more information on how you can control cookies and other tools used for advertising, please see the below section “Online Advertising & Preferences”

Please be aware that if you disable or reject cookies, some features and Services may not work properly. For example, if you disable or reject cookies, we may not be able to recognize and associate you with your purchase,

MOBILE APPLICATION

This Privacy Policy describes how our App collects, uses, and discloses your personal information.

In addition, by using the App you may be asked for permission to access data on your mobile device, such as photos. We will only access this data with your consent. Please note that some functions of the App are only available if you allow access to requested content. You can typically change your permissions through your mobile device settings. For specific instructions, please refer to the instructions provided for your mobile device.

You have the right to request deletion of your Tillys account within the App. In order to delete your account, you should log-on to your account on the App and should navigate to the Account Tab and select “Manage Account.” From the Manage Account screen, follow the instructions on how to delete your account.

DATA SECURITY AND CREDIT CARD SAFETY

Protecting the safety of your credit card information is important to us. We use Secure Sockets Layer (SSL) technology to help protect the security of your credit card information as it is transmitted to us. SSL is a highly sophisticated method of scrambling data as it travels from your computer to our Sites' servers.

To make sure you are accessing our secure server before you submit personal financial information, look at the lower left-hand corner of your Web browser. If you see an unbroken key or a closed lock (depending upon your browser), then SSL is active. To double-check for security, look at the URL or “Address” line of your Web browser. If you have accessed a secure server, the first characters of the address in that line should change from "http" to "https".

We use industry-standard security techniques on the Sites to help protect against the loss, misuse or alteration of information collected from you on the Sites. When you access your account information or transmit personally identifiable data to the Sites, that information is stored on servers that the Sites has attempted to secure from unauthorized access or intrusion. That said, no data transmission over the Internet or other network can be guaranteed to be 100% secure. As a result, while we strive to protect information transmitted on or through the Sites, we cannot and do not guarantee the security of any information you transmit on or through the Sites, and you do so at your own risk.

YOUR INFORMATION CHOICES - EMAIL AND TEXT MESSAGE

We will occasionally send members of our distribution list information and valuable offers by mail or e-mail, or text message if you have expressly agreed to receiving text messages. For more information, please see our Tillys Messaging Terms & Conditions You may unsubscribe from our marketing lists at any time. To unsubscribe from receiving marketing e-mails, please click on the appropriate link at the bottom of any marketing e-mail from Tillys or by signing into your account on the Sites and changing your e-mail preferences. If you have opted in to receive text messages from us, you can unsubscribe from receiving text messages at any time by: (1) replying to the text message with the word "STOP"; (2) sending the text message "STOP" to (944)491-4740; or (3) contacting us. You can also contact us directly to unsubscribe from mail, e-mail, or text communications by e-mailing us at [email protected].

PERSONAL INFORMATION YOU MAKE AVAILABLE TO OTHERS

By using the Sites, you may make certain of your personal information available to others. For example, when you post a comment or a photo on the Sites other users may see your name, the city you live in and other information that you choose to make available to others.

SERVICE PROVIDERS

From time to time, we may contract with other businesses whom we believe to be trustworthy and who have confirmed that their privacy practices provide the same or stronger protection for personal information to perform services for or on behalf of Tillys (“Service Providers”). For example, we may contract with Service Providers to provide certain services, such as hosting and maintenance, data storage and management, and marketing and promotions. Some of our Service Providers may use their own cookies or other tracking technology in connection with the services they perform on our behalf. We only provide our Service Providers with the information necessary for them to perform these services on our behalf. Each Service Provider must agree to use reasonable security procedures and practices, appropriate to the nature of the information involved, in order to protect your personal information from unauthorized access, use, or disclosure. Service Providers are prohibited from using personal information other than as specified by Tillys.

Zoom External Messaging Service: We may use Zoom to message with our partners and their employees. When you provide us with a mobile phone number for that purpose, no mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

ContentSquare: We use ContentSquare on our website(s) and app(s) to create a better digital experience for our visitors and to optimize this service and our interactions with them. ContentSquare is a Digital Experience Analytics and Insights tool that helps us better understand these visitors’ online experiences (e.g. how much time the visitor spends on which pages, which links they choose to click, the visitors’ click rates (to measure things like hesitation or frustration), etc.). To provide these analytics and insights, ContentSquare uses first-party cookies and other technologies to process data of our visitors’ behavior and their devices on our behalf. This may include data like the device’s IP address, Online ID (like a Cookie ID number), device type and screen size, browser information, geographic location (only down to the city-level), e-commerce data, the preferred language used to display our website, and the behavior of users with accessibility needs. To improve its tool and services to us, ContentSquare may reuse this data for their internal development purposes. For more information about ContentSquare and its privacy practices, please visit ContentSquare’s Privacy Center that contains its privacy policies, and read its “10 Things To Know” privacy one-pager.

ONLINE ADVERTISING & PREFERENCES

We may allow third-party companies to serve ads or collect certain information about you when you visit the Sites. These companies may use browsing information (e.g., click stream information, Web browser type, time and date, subject of advertisements clicked or scrolled over) during your visits to the Sites and other web sites in order to provide advertisements about products and services likely to be of interest to you. These companies typically use a cookie or other technology to collect this information.

You have several options to control and opt-out of these tools:

You can go to the Tillys Preference Center by clicking “Manage Preferences” at the top of this Privacy Policy to learn about the different types of cookies and other tools used on our Sites and, if you reside in certain states, you can change the settings to opt-out of collection of information used for behavioral or targeted advertising.

You can learn more about targeted and behavioral advertising practices from participating third parties’ providers, by visiting http://www.networkadvertising.org. You can also opt-out of this type of advertising by visiting http://optout.networkadvertising.org or http://www.aboutads.info/choices.

You can also use the Global Privacy Control (“GPC”) to signal your opt-out preference. To learn more about the GPC, please visit https://globalprivacycontrol.org. If you delete cookies or reset your device, you may need to set your preference again to ensure we continue to honor your preferred choice.

Tillys works with RTB House to provide certain kinds of interest-based advertising. For instructions on how to specifically opt-out of RTB House advertising services, please view the RTB House Services Privacy Policy at  https://www.rtbhouse.com/privacy-center

Third-party vendors, including Google and Microsoft, may use cookies and/or other tools to collect information about your visits to and use of the Sites and to serve ads based on your past visits to our Sites. If you would like to opt out of Google advertising, please visit Google’s Ads Settings. Google’s privacy policy is available here:https://policies.google.com/privacy?hl=en-US. Microsoft’s privacy policy is available here:https://privacy.microsoft.com/en-us/privacystatement.

OTHER TRANSFERS

We may share personal information and Usage Data with businesses controlling, controlled by, or under common control with Tillys. If Tillys is merged, acquired, or sold, or in the event of a transfer of some or all of our assets, we may disclose or transfer personal information and Usage Data in connection with such transaction.

COMPLIANCE WITH LAWS AND LAW ENFORCEMENT

Tillys cooperates with government and law enforcement officials to enforce and comply with the law. We may disclose personal information and any other information about you if we believe it is reasonably necessary to respond to legal requests (including court orders and subpoenas), to protect the safety, property, or rights of Tillys, to prevent or stop any illegal, unethical, or legally actionable activity, or to comply with the law.

BE CAREFUL SHARING INFORMATION WITH OTHERS

Please remember that when you share information with third parties or on any public area of the Sites, that information may be passed along or made public by others. This means that anyone with access to such information can potentially use it for any purpose, including sending unsolicited communications. You are solely responsible for keeping your login credentials and any other account numbers or access codes secure.

LINKS TO OTHER WEB SITES

Our Sites may contain links to other web sites, or allow others to send you such links. A link to a third party’s web site does not mean that we endorse it or that we are affiliated with it. We do not exercise control over third-party web sites. You access such third-party web sites or content at your own risk. You should always read the Privacy Policy of a third-party web site before providing any information to the web site.

CHILDREN’S PRIVACY

Our Sites and communications are intended for those who are at least 16 years old and older. Tillys will not knowingly accept personal information from anyone under 16 without appropriate consent. If we become aware that we have inadvertently received personal information from a child under the age of 16 in violation of applicable law, we will make reasonable efforts to delete such information from our records. If a parent, guardian, or anyone else becomes aware of personal information we have collected from an individual under the age of 16 without authorization, please contact us at (866)484-5597 or via email at [email protected].

Minors in California may remove, or request and obtain removal of content or information that they have publicly posted on the Sites by e-mailing us at [email protected]. Please note that most of the user content that appears on the Sites is stored and controlled by third party providers. As a result, complete or comprehensive removal of the content or information may not be possible.

YOUR CALIFORNIA AND OTHER STATE PRIVACY RIGHTS

If you are a resident of California or other states when applicable (such as Colorado, Connecticut, Oregon, Texas, Utah, or Virginia), you have the following rights with respect to your personal information:

The right to know what personal information we have collected, used, disclosed and sold about you. To submit a request to know, you may call us at 866-277-3301. or visit this page. You also may designate an authorized agent to make a request for access on your behalf.

The right to correct inaccurate personal information we have collected about you. To submit a request for correction, you may call us at 866-277-3301 or visit this page. You also may designate an authorized agent to make a request for correction on your behalf.

The right to request that we delete any personal information we have collected about you. To submit a request for deletion, you may call us at 866-277-3301 or visit this page. You also may designate an authorized agent to make a request for deletion on your behalf.

You have the right to opt-out of the sale of your personal information or sharing of your personal information for targeted or cross-contextual advertising. Tillys does not sell and has not sold customers’ personal information for money. However, in providing services to our customers, we may disclose personal information to third parties in ways that may be considered a sale under California law—specifically, where we share certain information with third parties for use in online advertising or third-party data sources that help us better understand our customers. To submit a request to opt-out of sale/sharing for online advertising, please visit the Tillys Preference Center by clicking “Manage Preferences” at the top of this Privacy Policy. For more information, see above section “Online Advertising & Preferences.” In addition, separate from cookies and other online tracking, to opt-out of disclosure of your information to data sources in a way that might be considered a “sale” or result in targeted ads, you can visit this page or you may call us at 866-277-3301. You also may designate an authorized agent to make these requests.

When you exercise these rights and submit a request to us, we may verify your identity by asking for information about your relationship with Tillys, such as email address on file, loyalty/customer number, recent order number, or the last four digits of your credit or debit card.

Your exercise of these rights will have no adverse effect on the price and quality of our goods or services.

If you have concerns about Tillys response to your rights request, including any decision regarding your rights, you have the right to appeal by contacting us via email at [email protected]

CALIFORNIA SHINE THE LIGHT DISCLOSURE

This Policy describes how we may share your information for marketing purposes. You may contact us with any questions and, to the extent applicable, to request once a calendar year a list of third parties to whom we may disclose information for their own marketing purposes and the categories of information we may disclose. Please contact us at (866) 484-5597 or via email at [email protected].

YOUR NEVADA PRIVACY RIGHTS

Nevada residents have the right to submit a request to opt-out of sale of their personal information for money. Tillys does not sell personal information for money. For further questions about your Nevada privacy rights, please contact us at [email protected].

USE OF THE SITES OUTSIDE OF THE UNITED STATES

The Sites are operated in the United States under the laws of the United States. We do not intentionally offer goods and services to individuals residing outside of the United States. If you reside in another country, please be aware that your Personal Information and communications may be transferred to and maintained on servers or databases located outside your state, province, or country. We process and store information in the United States. The laws in the United States may not be as protective of your privacy as those in your location. By using the Sites, you agree that the collection, use, transfer, and disclosure of your personal information and communications will be governed by the applicable laws in the United States.

CONTACT US

If you have any questions about this Privacy Policy, your dealings with Tillys, wish to unsubscribe from any of our marketing lists, or want to update your information, you can contact us at:

Customer Service

Tillys
10 Whatney Irvine, CA 92618
[email protected]
1-866-484-5597
Monday – Friday: 6am-7pm PST
Saturday-Sunday: 8am-5pm PST

PRIVACY POLICY CHANGES

We may change this Privacy Policy from time to time. If we decide to change this Privacy Policy, we will inform you by posting the revised Privacy Policy on the Sites or in another manner as appropriate. Those changes will go into effect on the “Revised” date shown in the revised Privacy Policy. By continuing to access or use the Sites, you consent to the revised Privacy Policy. We recommend that you frequently check the website for recent changes.

Revised: August 14, 2024