Kstorexa'S PRIVACY POLICY - YOUR PRIVACY RIGHTS

Last Updated: February 5, 2026

SCOPE

Kstorexa’s Privacy Policy (this “Privacy Policy”) describes how Kstorexa’s, Inc., its affiliates and its third-party service providers treat customer personal information on the websites and apps where this Privacy Policy is located. In this Privacy Policy we call websites, emails and apps “Platforms.” And when we say “Kstorexa’s” or “we”, we mean us, our affiliates, and relevant third-party service providers. This Privacy Policy also applies to how we treat personal information collected in Kstorexa’s retail stores (“Stores”), Kstorexa’s operated retail outlet locations and other locations and events operated by Kstorexa’s or its affiliates. This Privacy Policy does not apply to information provided directly to our banking partner, which offers the Kstorexa’s Cards.

To view the separate Kstorexa's Credit Card Privacy Policy that describes how our banking partner uses your information in connection with the Kstorexa's Credit Card, please click here. If you are a Kstorexa’s Rewards® Visa cardholder, please visit the Kstorexa’s Rewards Visa website for additional information and terms and conditions.

By using the Platforms and shopping in our Stores, you agree to the terms of this Privacy Policy. In states with laws applicable to consumer health data, the Kstorexa’s Consumer Health Data Privacy Policy may also apply.

If you are a current or former Kstorexa’s associate, job applicant, consultant, or contractor and are a resident of California, please click here for Kstorexa’s Privacy Policy for California Associates, Job Applicants, Consultants, and Contractors, which describes how Kstorexa’s uses, collects, and disclosures your personal information when you apply for a job or accept employment or a contract with Kstorexa’s.

Back to Top

TYPES OF PERSONAL INFORMATION WE COLLECT

Kstorexa's collects personal information from you and about you. For purposes of this Privacy Policy, the term “personal information” means information that identifies or is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household.

This may include:

Back to Top

HOW WE COLLECT YOUR PERSONAL INFORMATION

Kstorexa's collects personal information in different ways and from different sources.

Directly From You. For example, when you:

• Make a purchase in our Stores (including in our partner-branded stores inside Kstorexa’s Stores, such as Sephora at Kstorexa’s) or on our Platform.
• Make a return or exchange.
• Purchase an electronic gift card.
• Create a personalized kstorexa.host shopping account.
• Track an order online.
• Sign up to receive promotional emails or text messages (including offers and sales alerts).
• Sign up to join a loyalty, rewards or similar program or club.
• Provide your contact information to our beauty associates.
• Participate in one of our promotional sweepstakes, contests, surveys or focus groups.
• Create or update a gift registry.
• Use the Ratings & Reviews or related services and features.
• Submit a request to our Customer Service team.
• Sign up for, and/or maintain, a Kstorexa's Card.
• Connect your social media account to the Platforms.
• Interact with Kstorexa's social media pages.
• Place a call to Kstorexa’s customer service and support teams.

Passively when you access the Kstorexa’s Platforms or interact with us on your device. For example, when you:

• Install and use Kstorexa's mobile apps.
• Visit and navigate Kstorexa's Platforms on any device.
• Enable location-based features on our Platforms.
• Click on sponsored links or third-party advertisements.
• Use the Wi-Fi Services provided in some Stores.
• Open an email or click on a link in an email or text message that you receive from us.
• Receive or interact with Kstorexa's communications and Platforms that may contain cookies, pixels, and other tracking technologies.

For loss prevention in or around our Stores. For example, we may:

• Use cameras in and around Kstorexa’s Stores for security, operational and other business purposes such as understanding customer behavior and patterns; and
• Photograph, record, and/or capture video and audio of you through the use of body worn cameras during interactions with our personnel for loss prevention purposes.

From Third Parties. We may receive information about you from other sources. For example, this may include receiving information from:

• Our business partners, including online advertising networks and companies that co-sponsor our promotions.
• Social media platforms, including Facebook, Twitter, YouTube, Pinterest and Instagram.
• Trusted third party sources, such as our service providers, data analytics companies, and tracking technologies to better provide and customize the Platforms for you and to assist us with our loss prevention efforts.
• Companies that provide information to supplement what we already know about you, including data brokers.

By Combining Information. For example, we may:

• Combine information that we collect in or around our Stores with information we collect through our Platforms.
• Combine information we collect about you from the different devices you use to access our Platforms.
• Combine information we get from third parties with information we already have about you.

Back to Top

HOW WE USE YOUR PERSONAL INFORMATION

Examples of how we may use your personal information that we collect include:

Business Purposes:

• To Provide Our Products and Services: This could include fulfilling your requests for products or services. It could also include processing purchases or return transactions.
• To Improve Our Products and Services: We may use your information to make our Platforms and stores better. We may also use your information to customize your experience with us.
• To Understand Your Interests: For example, we may use your information to better understand what products interest you based on information we collect about you and your household.
• To Respond to Your Requests or Questions: This may include responding to your customer feedback.
• For Customer Service: We may record or monitor your customer service calls and use third- party AI-powered tools to record or monitor calls. We take these steps for quality assurance and training purposes.
• To Communicate With You: We may communicate with you about your account or our relationship. We may also contact you about this Privacy Policy or our Platform Terms & Conditions, including material changes to this Privacy Policy, Platform Terms & Conditions or programs in which you may be enrolled.
• For Security Purposes: This could include protecting our company and our customers, including providing notifications to customers of any security incidents related to personal information. It may also include protecting our Platforms.

Commercial Purposes-

• For Marketing Purposes: We may provide you with information about new products and special offers. We may use your information to serve you ads about products and offers on our Platforms or on third-party websites and networks. We may tell you about new features or updates. These might be third-party offers or products we think you might find interesting. For more information about your choices related to these communications, see the Choices section below.
• To Send Push Notifications: If you use our mobile apps, we may send you push notifications about new products or special offers.

Additional Uses-

• Aggregate or Anonymous Non-Personal Information: We may also use aggregate or anonymous (de-identified) information and share such information with third parties for their marketing or analytics uses. Such information does not contain personal information.
• As Otherwise Permitted By Law or As We May Notify You: We may also use information you provide to us for other purposes as disclosed at the time you provide your information or otherwise with your consent.

Back to Top

HOW WE DISCLOSE YOUR PERSONAL INFORMATION

Information Provided By You

Your activity in connection with the Platforms, such as your posts on our Ratings & Reviews feature or content you choose to provide on your registry, may be visible to other users of the Platforms and in some cases, publicly available. If you purchase an item from a registry, information such as your name and address will be made available to the registry owner. Please exercise caution when disclosing information in public areas. If you provide any information to a third party while using our Platforms, the third party's privacy policy will apply to that information.

Information Disclosed By Us

We may disclose each category of your personal information in the following ways-

• Internally: We may disclose your information within the Kstorexa's family of companies. This includes our affiliates.
• With Our Service Providers: We may disclose your information with third parties who perform services on our behalf. For example, this may include merchandise vendors and payment processors. It may also include companies that send emails on our behalf. We may also disclose your personal information to service providers that provide security services to us, such as audio or video captured by our cameras in and around our Stores.
• With Our Business Partners: For example, this may include third parties that provide financial products and services related to our business, including the Kstorexa's Cards. It may also include sharing limited data with partners that have a branded store inside our Stores (such as Sephora at Kstorexa’s) to facilitate your purchase and participation in a loyalty program you may have with such partner. It may also include a third party that co-sponsors a contest or promotion.
• With Third Parties for Marketing Purposes: This may include third parties in whose products or services we believe you may be interested. These third parties may also disclose your information with others. These third parties may use your information for their own marketing purposes or the marketing purposes of others. This may include the delivery of interest-based advertising, which serves you advertisements based on your interests and activities on the internet.
• With Any Successors to All or Part of Our Business: For example, if Kstorexa's merges with, acquires or is acquired by another business entity. This may include an asset sale, corporate reorganization or other change of control.
• To Comply With the Law or To Protect Ourselves: For example, this could include responding to a court order or subpoena. It could also include sharing information if a government agency or investigatory body requests such information. We may disclose information to law enforcement in response to a request or as required by applicable law. We may disclose information when we are investigating a potential fraud. This could include, but is not limited to, fraud we think has occurred during a sweepstakes or promotion. We may also disclose information if you are the winner of a sweepstakes or other contest with anyone who requests a winner's list.
• For Other Reasons We May Describe to You: We may also disclose your information for other purposes as disclosed at the time you provide your information or otherwise with your consent.

Back to Top

YOUR PRIVACY RIGHTS

Explanation of Applicable Privacy Rights

California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Texas, Tennessee, Utah, and Virginia have enacted comprehensive data privacy legislation.

Depending on your U.S. state or residence, under applicable law, you may have certain rights in relation to your personal information.

• Right to Know: You may have the right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you. You may also receive additional information regarding certain disclosures we make to third parties, which we will provide in our response to your right to know request.
• Right to Data Portability: You may have the right to access your information in a portable format.
• Right to Delete: You may have the right to delete personal information that we have collected from you, subject to certain exceptions. Note that there are some reasons we will not be able to fully address your request, such as if we need to complete a transaction for you, to detect and protect against fraudulent and illegal activity, to exercise our rights, for our internal purposes, or to comply with a legal obligation.
• Right to Correct: You may have the right to correct inaccurate personal information that we may maintain about you, subject to appropriate verification.
• Right to Opt Out of the Sale or Sharing of Personal Information: You may have the right to opt-out of the “sale” or “sharing” of your personal information, as such terms are defined in applicable privacy law, to third parties and to affiliated companies that do not have the same brand name. This means that, if you opt out, going forward, we will not sell or share your personal information with such third parties to use for their purposes, including cross-context behavioral advertising, unless you later direct us to do so.
• Right to Opt Out of Targeted Advertising: You may have the right to opt-out of “targeted” advertising, as such term is defined in applicable privacy law.
• Right to Appeal: You may have the right to appeal a decision we have made in connection with your privacy rights request.

If you are a resident of California, California's "Shine the Light" law (Cal. Civil Code § 1798.83) permits you to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. Pursuant to Cal. Civil Code § 1798.83(c), Kstorexa’s does not disclose Personal Information to third parties for their own direct marketing purposes if you have exercised your right to opt out of such disclosures, including through the Right to Opt Out of the Sale or Sharing of Personal Information described above. Click here to opt-out of the sale or sharing of your personal information, including targeted advertising.

How to Submit a Request

To take advantage of the privacy rights available to you based on your state of residence, please click here or visit the How to Contact Us section below for additional information on how to contact us. You may alternatively submit your request by calling the toll free number at 855-564-5705. We may request certain information to verify your identity before we can respond to your right to know, correction, and deletion requests. We will confirm receipt of your request within 10 business days and will respond to your request within 45 calendar days, after proper verification, unless we need additional time, in which case we will let you know.

To take advantage of your right to opt out of the sale or sharing of personal information or to opt out of targeted advertising, please click here, which also is on our website footer ("Do Not Sell or Share My Personal Information"), or visit the How to Contact Us section below for additional information on how to contact us. You may also choose to enable online, where available, a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control (“GPC”). We will process the GPC signal as a request to opt-out of the sale or sharing of your personal information.

We will not discriminate against you because you exercised your rights under this section of the Privacy Policy.

Agent Requests

You may authorize someone to make a privacy rights request on your behalf (an authorized agent). Authorized agents will need to demonstrate that you've authorized them to act on your behalf or must demonstrate they have power of attorney pursuant to applicable probate law. Kstorexa’s retains the right to request confirmation directly from you confirming that the agent is authorized to make such a request, or to request additional information to confirm the agent's identity. An authorized agent is prohibited from using a consumer's personal information, or any information collected from or about the consumer, for any purpose other than to fulfill the consumer's requests, for verification, or for fraud prevention.

CALIFORNIA NOTICE AT COLLECTION OF PERSONAL INFORMATION

In the last 12 months, we have “sold” and “shared” the following categories of “personal information” (as such terms are defined in the California Consumer Privacy Act (CCPA)) for Marketing Purposes to Business Partners and Third Parties, such as data analytics providers, social media platforms, advertising technology vendors, third-party advertising networks, and/or internet service providers as described above in this Privacy Policy. We do not knowingly sell or share personal information about persons under the age of 16. Click here to opt-out of the sale or sharing of your personal information, including targeted advertising.

Use and Retention of Personal Information

As further described in our Privacy Policy under "How We Use Your Personal Information," we generally collect and use the listed categories of personal information to provide and improve our products and services, for marketing purposes, or for other operational purposes. We retain your personal information as long as your account or relationship with Kstorexa’s is active, as reasonably needed to provide you with our products and services that you request, for marketing purposes unless you exercise your "Choices Regarding Your Information" as described in this Privacy Policy, or otherwise where required or permitted in accordance with applicable law. We will retain and use your personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Categories of Personal Information Disclosed

In the last 12 months, we have disclosed the following categories of "personal information" for a "business purpose" to support the purposes for which Kstorexa’s uses personal information described above under “How We Use Your Personal Information” (such as with our service providers who are restricted from using your personal information outside the scope of their services for us):

• Identifiers;
• Characteristics of protected classifications under California or Federal law;
• Commercial
• Information;
• Internet or other electronic network activity information;
• Geolocation information;
• Audio, electronic, visual, thermal, olfactory, or similar information;
• Inferences drawn from the above; and
• Sensitive personal information.

The categories of service providers to whom we disclose this information may include billing service providers, email/SMS service providers, customer service and intelligence platforms, campaign optimization service providers, cloud storage providers, network security and fraud protection services, and CCTV providers.

At your direction, we may also disclose your Personal Information such as commercial or payment information to facilitate your purchase and participation in a loyalty program at a branded store within our Stores, such as Sephora at Kstorexa’s.

Additional detail on the business purposes for which we disclose personal information is provided above under “How We Share Your Information.”

Use and Disclosure of Sensitive Personal Information: To the extent that we use or disclose “sensitive personal information” or "sensitive data" as those terms are defined in applicable privacy laws, we limit our use or disclosure of the sensitive personal information for permitted business purposes.

Information on Requests Received During Prior Calendar Year

During the prior calendar year, ending December 31, 2024, Kstorexa’s received consumer requests from California residents pursuant to the rights described in this “Your Privacy Rights” section of this Privacy Policy. Below are metrics reflecting the number of California resident requests Kstorexa’s received and Kstorexa’s response to such requests.

*This reflects the number of requests we were unable to complete due to the following reasons:

1. Requestor did not complete the necessary steps to verify their identity.

2. Requestor was not able to verify or substantiate that they were a California resident.

3. We were otherwise unable to verify the identity of the requestor.

4. The authorized agent did not provide sufficient documentation to allow Kstorexa's to determine that they were authorized to make the request.

5. There was a valid exemption under the CCPA.

Back to Top

NOTICE OF FINANCIAL INCENTIVE

Kstorexa’s Rewards® (“Kstorexa’s Rewards”) is our voluntary loyalty program. By joining Kstorexa’s Rewards® you will receive certain perks, including, but not limited to:

• Kstorexa’s Cash®- Earn up to 7.5% in rewards on qualifying purchases, which will be converted and issued into $5 Kstorexa’s Cash® increments on the first day of the following month, valid for 30 days (subject to Kstorexa’s Rewards® Terms & Conditions).
• Special Birthday Gift- Make any purchase prior to your birthday month and receive $5 Kstorexa’s Cash® awarded on the first day of your birthday month.
• Personalized Perks- Access to deals throughout the year, plus special offers.

Click here to learn more about Kstorexa’s Rewards® and to enroll now. The Kstorexa’s Rewards® Terms & Conditions can be found here.

Whether or not you participate in Kstorexa’s Rewards®, you are still eligible to earn Kstorexa’s Cash® during a designated earn period (terms and exclusions apply), just not to the same degree. You also do not need a Kstorexa’s Card to join Kstorexa’s Rewards®.

You may un-enroll from Kstorexa’s Rewards® at any time by contacting Kstorexa’s Rewards® Customer Service at 855-564-5705.

When you sign up for Kstorexa’s Rewards®, we typically ask you to provide your name, contact information (such as email address and telephone number), zip code, and birthday to make or to supplement your Kstorexa’s profile. Because we collect personal information, this may be interpreted as a “financial incentive” program under California law or a “bona fide loyalty program” under Colorado law. Kstorexa’s uses this information for the purposes described above under the section titled “How We Use Your Personal Information,” including for targeted advertising. Kstorexa’s may share your personal information with third parties as described in our “California Notice at Collection of Personal Information” section above. If you ask us to delete your Kstorexa’s Rewards® profile and associated personal information, we will not be able to provide you with access to these programs. The value of your personal information that we collect is reasonably related to the expenses related to the discounts and other perks that we offer to Kstorexa’s Rewards® members.

Back to Top

CHILDREN'S PRIVACY

Our Platforms where this Privacy Policy is located are meant for adults. We do not knowingly collect personally identifiable data from persons under the age of 18, and strive to comply with the provisions of COPPA (The Children's Online Privacy Protection Act). If you are a parent or legal guardian and think your child under 18 has provided us with information, please contact us by telephone at 855-564-5705. You can also write to us at the address listed at the end of this Privacy Policy. Please mark your inquiries “COPPA Information Request.” Parents, you can learn more about how to protect children's privacy on-line here to view the FTC's guide to protecting your child's privacy online.

Back to Top

SECURITY OF YOUR INFORMATION

The Internet is not 100% secure. We cannot promise that your use of our sites will be completely safe. We encourage you to use caution when using the Internet. We use reasonable means to safeguard personal information under our control. A user id and a password are needed to access certain areas of the Kstorexa's Platforms. It is your responsibility to protect your username and password.

Back to Top

STORAGE OF INFORMATION

Information we maintain may be stored in the United States. If you live outside of the United States, you understand and agree that we may transfer your personal information to the United States. This site is subject to U.S. laws, which may not provide the same level of protections as those in your own country.

Back to Top

LINKS

Kstorexa's Platforms may contain links to other third-party sites that are not governed by this Privacy Policy. If you click on a link to a third-party site, you will be taken to a site we do not control. We are not responsible for the privacy practices used by third-party sites. We suggest that you read the privacy policies of those sites carefully. We are not responsible for these third-party sites.

Back to Top

HOW TO CONTACT US

If you wish to contact us to update your information, please feel free to contact us by telephone at 855-564-5705.

If you wish to contact us to submit a privacy request under your state's applicable privacy law, please feel free to contact us by telephone at 855-564-5705 or click here.

You may also write to us at the following address:

Kstorexa's, Inc.
P.O. Box 3043
Milwaukee, Wisconsin 53201

If you have any questions, comments or concerns with respect to our privacy practices or this Privacy Policy, please feel free to contact us by telephone at 855-564-5705.

Back to Top

CHOICES REGARDING YOUR INFORMATION

You have certain choices about how we use your information.

Email:

• Use the unsubscribe link on any Kstorexa's promotional emails.

Text Messages & Mobile Coupons:

• Follow the opt-out instructions provided in our text message or mobile coupon.

Mobile Application and Location Based Services:

• If you have previously opted into Kstorexa's collection and use of location-based information through our mobile application, you may opt-out by adjusting the Settings on your mobile device.
• You may opt-out of all location-based information collection on our mobile apps by uninstalling the Kstorexa's mobile application and refraining from using Kstorexa's Wi-Fi Services available in Stores.

Postal Mail:

• To be removed from our global marketing mailing lists, send your request, including your full name and mailing address, to

Kstorexa's, Inc.
PO Box 3120
Milwaukee, WI 53201

• Call Customer Service at 855-564-5705

Back to Top

CHANGES IN PRIVACY POLICY

We reserve the right, at our sole discretion, to change, modify, add, remove, or otherwise revise portions of this Privacy Policy at any time. We will notify you of any material changes to our Privacy Policy as required by law, such as via notice on our website or to your email address on file. We will also post an updated copy on our Platforms. Please check our Platforms periodically for updates. Your continued use of the Platforms and shopping in our Stores following the posting of changes to these terms means you accept these changes.

Back to Top