"Aggregate Data" means information that we reasonably believe has been "de-identified" or "anonymized" such that (a) it is not PI, (b) it was PI but no longer is, or (c) it reasonably would only be viewed as PI by use of special knowledge or resources that we and others ordinarily don't have in the ordinary course of their business.
"Common Uses" Another way to describe common uses of PI is to think of uses that should be apparent or relevant in context, i.e., given the circumstances, for what purposes might a business like Zumiez collect, use and otherwise disclose PI from time to time? For example, we make disclosures:
• To meet our obligations and enforce our rights, to make disclosures to third parties who help us (e.g., service providers, information technology providers, mailing and other business process providers, outsourcing providers and so on), and to operate and improve our business;
• For security, fraud prevention, authentication, verification purposes and so on, including (without limitation) searching public records or publicly available information (such as information on the Internet) and participating in industry or private initiatives (such as sharing data to help decrease fraud);
• To communicate with you, such as responding to questions or requests or contacting you for lawful purposes, including surveys;
• To vendors and their service providers needing data to do their jobs;
• To deal with an activity or a contract, or to obtain additional PI from you or others. For example:
⁃ If we collect payment card information we will disclose it to third parties throughout the processing system (e.g., banks, networks, card organizations etc.) and to protect ourselves or others, including to law enforcement; and
⁃ We might try to follow up with you such as to help determine who you are or your authority, including doing things like checking records of ours or others, keeping copies, and making disclosures in disputes like, lawsuits or investigations.
• To persons appearing to have a lawful interest in the PI (e.g., an insurance company dealing with a claim involving you);
• To comply with applicable law, including keeping records for as long as required or that we believe is advisable;
• For the kinds of purposes appearing in laws or regulations as exceptions to any privacy rights you may have or to your ability to "opt-out" of disclosures, even if those exceptions do not actually apply to us. An example is the Federal Trade Commission's regulation implementing privacy rules for financial institutions. It lists many typical reasons that those institutions may make disclosures or not offer an "opt-out" choice and you can see them at 16 C.F.R. § 313.14 and § 313.15;
• To exercise or preserve our legal rights, such as to attempt to protect or prevent harm (including economic harm) to us, our interests, property (of every nature, including intangible property rights) and business. Without undertaking any duty to do so, we may do the same for someone else such as any third party, including our affiliates or you; and
• To make additional disclosures that are consistent with the context or relationship of our transactions with you (or your principal) or that are required or allowed by law, regulation or other relevant guidance.
"Extraordinary Uses" We may disclose PI in out-of-the-ordinary circumstances or emergencies, subject to applicable law. There is no clear line between ordinary and extraordinary purposes, but here are some examples of what we view as more in the nature of extraordinary:
• We may disclose PI to third parties with whom we might explore or engage in an extraordinary transaction, such as (without limitation) mergers or acquisitions, reorganizations, sales of all or part of our stock or assets, spinoffs, bankruptcies, dissolutions or anything else. We reserve the right to continue to use and disclose for our own purposes, all PI that we had before we engaged in such a transaction until it is clear that there is no longer a business or legal reason to do so; and
• We might hold PI until you or a related person cure a violation of obligations to us (e.g., if you are involved in a breach of a contract relating to us).
"Legal Process" By "legal process" we mean things that we might have to do to comply with laws or what appears to be a law in the United States and other countries that that have or claim to have jurisdiction over us or information that we own, possess or control. Most countries have laws that allow governments or non-governments, including private persons in litigation, to use laws allowing them to obtain information. Examples include things like subpoenas (private, grand jury or other), warrants, identity theft requests, requests for information about an anonymous speaker, investigative demands (from law enforcement, regulators or others), national or international security letters or demands or the like, and so on. We may be required to comply and we reserve the right voluntarily to comply or cooperate with the requesting party, such as if we think that may help protect someone (including you, us or others) or some property (of ours, yours, or others). We also reserve the right to object to the legal process or to tell you about it so that you can object and obtain an appropriate order permitting us not to comply with the original request.
Sometimes the law will preclude us from telling you about the legal process. In other circumstances we might be allowed to tell you but it might not be practical or advisable to do so. We will determine in our sole discretion whether to contact you (e.g., we might contact you to so that you can object as noted above, or we might not make contact if there is concern that such might facilitate potential harm). You agree that we may do any or all of the above.
"Personal Information," "personal information" or "PI" means information we're required by law to protect and: (a) that personally identifies you, or (b) that does not personally identify you but reasonably may be used to identify you or your computer or other device that you use (e.g., mobile phone, tablet, or other consumer or electronic product or device) and a law requires us to treat it as personally identifying you. PI does not include Aggregate Data or information that is publicly available, including in our Channels (e.g., if you include PI in a comment posted in a publicly accessible area of a Channel, that PI will become public information upon its posting and will cease to be PI). If you are a resident of California, “personal information” has the meaning set forth in the CCPA.
• Facebook (e.g., //www.facebook.com/full_data_use_policy & //www.facebook.com/help/www/443483272359009 & //developers.facebook.com/policy)
• Twitter (e.g., https://twitter.com/en/privacy)
• YouTube (e.g., //www.google.com/intl/en/policies/privacy/ & //www.youtube.com/t/terms)
• Instagram (e.g., https://help.instagram.com/402411646841720)
• Pinterest (e.g., https://policy.pinterest.com/en/privacy-policy)
• SnapChat (e.g., https://snap.com/en-US/privacy/privacy-policy)
We would recommend that you not use social network technologies if you are not comfortable with their policies and rules.