California Annual Privacy Policy
Effective as of: September 23, 2026
This ANNUAL PRIVACY POLICY FOR CALIFORNIA RESIDENTS (“California Notice”) supplements the information contained in the main Privacy Policy applicable to the bookoutlet.com and bookoutlet.ca websites (“Sites”) of Book Depot Inc. (“Book Depot,” “we,” “us,” or “our”), and applies solely to visitors, users, and others who reside in the State of California (“consumers” or “you”). This California Notice sets out how we collect, use, and protect any personal information obtained through your use of our Sites, by computer or mobile device, social media, by phone via text message, in writing or otherwise (collectively with the Sites, the “Services”).
California has enacted consumer privacy laws that grant its residents certain rights and require additional disclosures. The following provisions are designed to address those state-specific requirements and supplements the general disclosures in the broader Privacy Policy. In the event of a conflict between any other Book Depot policy, notice, or statement and this California Notice, this California Notice will prevail unless otherwise explicitly stated herein.
This California Notice explains how Book Depot collects, uses, shares, and stores your “personal information” (as such term is defined under applicable law) and certain other data when you use the Services, and how you may exercise certain rights you have in connection with your privacy and personal information. Personal information is generally defined under California law as information that, by itself or in combination with other information, identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked with a particular consumer or household (“Personal Information”). Any Personal Information that Book Depot may collect will be handled in accordance with the practices set forth below and/or in Book Depot’s main Privacy Policy.
For ease of reference, you may click on any of the following links to jump to one of the sections addressed below:
- Scope of this California Notice
- Contact Information
- Personal Information Collection and Disclosures
- Your Rights and Choices
- Other California Privacy Laws
Scope of this California Notice
This California Notice covers only the Services identified above and is only applicable to consumers who reside in California. This California Notice does not apply to visitors, users, and others who provide information to us through our Services but do not reside in California, and this California Notice does not apply to information which you may send us by means other than through the Services. Other Book Depot websites, locations and certain products or services, whether online or offline, may have their own specific privacy policies or notices which apply instead of this California Notice, and you should consult those accordingly. Furthermore, the Sites may contain links to external websites and other online locations, including those embedded in third-party advertisements or sponsor information that are not controlled by Book Depot. Book Depot is not responsible for the privacy practices and data collection policies for such third-party services. You should consult the privacy policies or notices of those third-party services for details about how they handle your Personal Information.
Contact Information
If you have questions, concerns, or would otherwise like to contact us regarding our privacy practices, this California Notice, or any rights you may have hereunder, please contact us using the contact details below:
EMAIL:
PHONE:
MAIL:
Book Depot Inc.,
Attention: Compliance
67 Front Street North
Thorold, Ontario, Canada L2V 1X3
Personal Information Collection and Disclosures
A requirement under California law is to provide California residents with information on our data collection, use, disclosure, and retention (“processing”) activities related to Personal Information in the preceding 12 months.
Categories of Personal Information Collected and Their Sources
Please see the chart, below, which describes the categories of Personal Information we collected over the past 12 months, including the sources from which we obtained the Personal Information. Please note that not all categories or specific types of Personal Information described below will be collected or processed for every individual and our data collection practices may vary based on the nature of your relationship with us and what information you choose to provide to us.
| Category | Examples | Do we Collect? | Information Source |
| Identifiers | A name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account username, screen name, password, or other similar identifiers | YES | From you directly or through your interaction with us and our Services |
|
|
A name, signature, address, telephone number, education or employment history, bank account number, credit card number, debit card number, or any other financial information | YES | From you directly when you sign up to recent content from us, register an account with us, purchase goods from our Sites, or apply for an open position on our Sites |
| Protected classification characteristics under California/federal law | Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status | NO | We do not collect |
| Commercial information | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies | NO | We do not collect |
| Internet or other similar network activity | Browsing history, search history, information on a consumer’s interaction with a websites, video, application, or advertisement, including user generated content | YES | From your interaction with us and our Services |
| Geolocation data | Physical location or movements | NO | We do not collect |
| Sensory data | Audio, electronic, visual, thermal, olfactory, or similar information | NO | We do not collect |
| Non-public education information | Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records | NO | We do not collect |
| Inferences drawn from other Personal Information | Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes | YES | From your interaction with us and our Services |
| Sensitive Personal Information |
(1) social security, driver’s license, state ID card, or passport number
(2) account log-in, financial account, debit card/credit card number in combination with any required security or access code, password, or credentials allowing account access
(3) precise geolocation (within a radius of 1,850 feet)
(4) racial or ethnic origin, religious or philosophical beliefs, or union membership
(5) contents of mail, email, and text messages (unless we are the intended recipient)
(6) genetic and health data
(7) biometric information for identification purposes
(8) sex life or sexual orientation
|
NO | We do not collect |
Our Use of Your Personal Information
Over the last 12 months, we may have used your Personal Information for the following purposes:
| Category | Purpose |
| Identifiers & Personal Information categories listed in the California Customer Records statute |
- Register, administer, and secure your account on our Sites
- Maintain proper business records and other relevant records
- Respond to your questions, comments, or other messages
- Send you Book Depot emails and other updates with transactional information (i.e., order updates) or advertising relating to our products or other Services when you create an account with us and/or subscribe to our marketing emails
- Process payment method and other order information when you order a product or anything else through the Services
- Contact you if there are issues with information or content that you uploaded or posted through the Services (e.g., contacting you regarding any inappropriate user generated content on our social pages)
- Provide ongoing technical support related to the Services
- Communicate with you and/or obtain your consent regarding additional uses of your Personal Information beyond the scope of this list and Policy
- Deliver products ordered through the Services
- Improve the content and general administration of the Services
- Perform internal operations related to the Services (e.g., fraud prevention)
- Troubleshoot software issues and operational problems with the Services
- Conduct data analyses and testing based on your activity on our Site or through your use of the Services
- Monitor your usage of the Services for internal compliance and advertising/marketing purposes
- Provide you with targeted advertising or marketing communications that may be of interest to you
- Run our day-to-day business and facilitate corporate or other business transactions
|
| Internet or other similar network activity |
- Maintain proper business records and other relevant records
- Communicate with you and/or obtain your consent regarding additional uses of your Personal Information beyond the scope of this California Notice
- Improve the content and general administration of the Services
- Perform internal operations related to the Services (e.g., fraud prevention)
- Troubleshoot software issues and operational problems with the Service.
- Conduct data analyses and testing based on your activity on our Site or through your use of the Services.
- Monitor your usage of the Services for internal compliance and advertising/ marketing purpose.
- Provide you with targeted advertising or marketing communications that may be of interest to you
|
| Professional/ employment-related information | Determine your eligibility when you apply for an open position on our “Careers” webpage |
| Inferences drawn from other Personal Information |
- Improve the content and general administration of the Sites or our other Services
- Market and provide Book Depot-related advertising to you
- Understand and analyze aggregate demographic information about our customers to find better ways
- To cater to our customers
|
|
Commercial information
&
Geolocation data
&
Sensory data
&
Protected classification characteristics under California/ federal law
&
Non-public education information (per FERPA)
&
Sensitive Personal Information
|
Not applicable, we do not collect |
Sharing Your Personal Information
Over the last 12 months, we have shared your Personal Information with the following categories of third parties for the following purposes:
| Category | Types of Recipients and Our Purpose for Sharing the Information |
|
Identifiers
&
Personal Information categories listed in the California Customer Records statute
|
- Book Depot customer service, marketing, and mailing services vendors
- Book Depot will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.
- Book Depot subsidiaries, business partners and/or marketing affiliates to assist with a particular Book Depot promotional activity or to help us improve our products to better serve your needs
- Book Depot vendors who provide data storage and hosting, customer service, marketing, and mailing services
- See the “General Third Parties” section below
|
|
Internet or other similar network activity
&
Inferences drawn from other Personal Information
|
- Analytics, advertising, and social media providers
- See the “General Third Parties” section below
|
| Professional/ employment-related information. |
- Background check providers and HR related service providers
- See the “General Third Parties” section below
|
|
Commercial information
&
Geolocation data
&
Sensory data
&
Protected classification characteristics under California/ federal law
&
Non-public education information (per FERPA)
&
Sensitive Personal Information
|
Not applicable, we do not collect |
General Third Parties
The following third parties may receive any of the categories of Personal Information described above, depending on the circumstances:
Vendors who provide data storage and hosting;
- Governmental authorities and law enforcement (in response to legal requirements); and/or
- Third parties involved in a potential or actual merger, acquisition, consolidation, bankruptcy, or similar proceedings
Data Retention Period
Over the past 12 months we have retained your Personal Information in accordance with the retention timeframes noted in our main policy.
Selling and/or Sharing Your Personal Information
Over the past 12 months, we did not engage in any direct sale of your Personal Information as a way to generate monetary revenue.
However, as described in our main Privacy Policy and further below in this California Notice, we have used certain third-party online analytics and advertising providers which may have access to your IP address, online ID, and online activity information. Such third-party access may cause you to receive targeted advertising based on your browsing behavior on our Sites and elsewhere online.
As a California resident, such access for targeted advertising purposes may be considered “Selling” or “Sharing” your Personal Information under the applicable law. You also have the right to opt-out of any such “Sale” or “Sharing” of Personal Information for targeted advertising purposes by using our interactive request form, which is available through the “Do Not Sell or Share My Personal Information” toggle within the cookies widget.
Selling and/or Sharing Personal Information of Minors
Over the past 12 months, we did not knowingly Sell or Share the Personal Information of minors under the age of 16 years old.
Sensitive Personal Information Processing Activities
Over the past 12 months, we did not knowingly collect or use your Sensitive Personal Information (as such term is defined under applicable law).
Profiling / Automated Decision-making Activities
Over the past 12 months, other than as described above, we did not conduct profiling activities or make automated decisions about you based on your Personal Information.
California Notice of Financial Incentive
Over the past 12 months, we did provide financial incentives with respect to the collection of your Personal Information, which is further described below.
In the past 12 months, we provided a $5 dollar coupon following a $25 or more purchase on our Sites if an individual signs up for our marketing emails.. We also provided loyalty points to individuals who have signed up for our loyalty program when they refer to their friends to our Sites and/or if the friend purchases a product from our Sites. The loyalty points are allocated as follows: loyalty points users receive 100 Points and their friend receives $5 off their first purchase of $25 or more at our Sites and earn 100 points ($5 in Rewards) when they make their first purchase. The loyalty program is limited to 5 successful referrals per week. Our good-faith estimate of the value of your personal information is the value of the benefit we offer to you through the loyalty program. We have calculated such value by using the expense of offering the program in proportion to the benefit that is offered to you through the program.
Effective September 8, 2026, our loyalty program has changed, including the ways in which customers may earn and redeem loyalty points and rewards. The loyalty program terms described above apply to the program offered prior to September 8, 2026. For information regarding our current loyalty program, including applicable earning methods, rewards, eligibility requirements, and other terms and conditions, please refer to our updated Loyalty Program Terms and Conditions available here.
Individuals can opt-in to our loyalty program on our Site. If you signed up for our loyalty program you can opt-out at any time by clicking the “opt-out” feature in the Shelf-Made Rewards section in your account.
Your Rights and Choices
The California law provides California consumers with specific rights regarding their Personal Information. More specifically, you have the following rights regarding Book Depot’s collection, use, and sharing of your Personal Information:
- The right to request that we disclose what Personal Information we collect, use, disclose or sell about you;
- The right to request the deletion of Personal Information we have collected or maintain about you;
- The right to opt-out of the sale of your Personal Information or the sharing of your Personal Information for cross contextual behavioral advertising purposes (targeted advertising);
- The right to limit any processing of your sensitive Personal Information for purposes of inferring characteristics about you (to the extent applicable);
- The right to opt-out of any profiling or automated decision-making activities that may be made with respect to your Personal Information;
- The right not to receive discriminatory treatment by us, in terms of the services and prices offered on or through our Services, because you exercised these rights regarding the collection, use and sharing of your Personal Information;
- The right to correct inaccurate Personal Information;
- The right to data portability; and
- The right to appeal a denied request.
If you would like to exercise any of the above rights, please contact us or visit the “Manage Cookies Preferences” widget to exercise your opt-out rights under applicable law, including for example, the disclosure of your Personal Information for targeted advertising purposes.
For further information on how to exercise your privacy rights, including any necessary verification procedures and/or how an authorized agent may submit a request on your behalf, please go to the “Your Rights and Choices” section of our main Privacy Policy. Please note that in certain instances we may be able to reject your request if permitted under applicable law. We will provide you with the reason if we reject your request, subject to certain exceptions and limitations under applicable law. If the request relates to information that we need to make the Services function properly for you, you may no longer be able to use the Services.
As mentioned in the main Privacy Policy, the Sites may use cookies, pixel tags and related third-party tracking technologies and analytics services that are operated by third party service providers and/or social media platforms among other third parties (“Third-Party Services”) which may collect information pertaining to your device and how you may interact with our Sites. You may have the ability to exercise your rights under California law with respect to how your information is shared with or collected by these Third-Party Services on or through the Sites by communicating your choices directly with the Third-Party Services. Please see the below chart for further details on how to exercise your rights directly with such Third-Party Services.
| Third Party Pixel Source | Third Party Pixel Source | More Information |
|
Facebook and Instagram
(Meta)
|
Go to interest based ads settings for Facebook or Meta’s privacy center | Meta’s Privacy Policy and Cookie Policy for Facebook |
|
Instagram
(Meta)
|
Go to privacy settings for Instagram or Meta’s privacy center | Meta’s Privacy Policy and Cookie Policy for Instagram |
|
Google
(Analytics and DoubleClick personalized ads)
|
Download and install the Google Analytics Opt-out Browser Add-on to opt out of certain data sharing that occurs through Google Analytics
|
Google’s Privacy Policy |
|
Microsoft
(BING)
|
Go to: https://about.ads.microsoft.com/en-us/resources/policies/personalized-ads |
Microsoft’s Advertising Privacy Policy
|
You can also generally opt-out of receiving targeted ads from third party advertisers and ad networks who are members of the Network Advertising Initiative (NAI) by visiting the Network Advertising Initiative (NAI) opt out page. You may opt-out of receiving targeted advertisements from other companies that perform interest-based or targeted advertising services, including some that we may work with, via the Digital Advertising Alliance (DAA) opt out page. Please note that when using the ad industry opt-out tools described above, you may need to execute opt-outs for each browser or device that you use, and that other companies’ opt-outs may function differently than our opt-out.
Other California Privacy Laws
Shine the Light
Pursuant to California law, residents of California have the right to request from a business, with whom the California resident has an established business relationship, certain information with respect to the types of Personal Information the business shares with third parties for those third parties’ direct marketing purposes and the identities of the third parties with whom the business has shared such information during the immediately preceding calendar year. To exercise your rights, you may make one request each year by contacting us.
Do Not Track
Some browsers also have a “do not track” feature that lets you tell websites that you do not want to have your online activities tracked. We do not honor “do not track” signals.