RH PRIVACY NOTICE

AT A GLANCE: A MESSAGE REGARDING YOUR PRIVACY

At RH, we value you as a customer and take the privacy and security of your information seriously. Whether you are visiting our Galleries, dining in our Restaurants, or exploring our collections online, we want you to understand how we manage your information.

How We Collect Your Information

To provide you with a seamless luxury experience, we collect information in three primary ways:

• Directly from You: When you make a purchase, join our Members Program, or create a gift registry.
• Through Technology: As you navigate our online platforms, we use cookies, pixels, and session replay technology to understand how you interact with our site, so we can refine our digital experience.
• From Physical Locations: For your safety and ours, we utilize CCTV at our Physical Properties (Galleries, Guesthouses, and Outlets).

How We Use and Share Your Data

We use your data to fulfill your orders, send our Sourcebooks, and curate personalized design services. To do this, we share information with:

• Our Affiliates: We may share your information across the various brands and subsidiaries within the RH Group to provide a consistent experience across all of our specialized collections and services.
• Service Providers: Partners who assist with specialized tasks like white-glove delivery, payment processing, and IT security.
• Advertising Partners: We may share identifiers with marketing agencies and data aggregators to show you relevant RH advertisements. Under certain laws, this may be considered the "selling" or "sharing" of data for targeted advertising.

Your Rights and Choices

We believe you should have control over your personal information. Depending on where you live, you may have the following rights:

• Direct Marketing: You may have the right to opt out of our email communications or cancel the delivery of our physical Sourcebooks.
• Data Control: You may have the right to request access to the personal data we hold about you, request corrections, or ask that we delete your information.
• Opt-Out of "Sales": You may be able to specifically request that we do not "sell" or "share" your data for cross-contextual behavioral advertising via our "Do Not Sell" web form.

Our Global Standards

While RH is a US-headquartered business and we centralize our data processing in the United States, we adhere to rigorous standards for our international guests. For those in the UK, EU, and Canada, we utilize a variety of measures to ensure that your information transferred to these countries receives adequate protection consistent with data protection rules.

LAST UPDATED: 12 February 2026

TABLE OF CONTENTS

1. WHEN DOES THIS NOTICE APPLY?
2. UPDATES TO THIS NOTICE
3. PERSONAL DATA WE COLLECT
4. HOW WE COLLECT AND USE YOUR PERSONAL DATA
5. HOW WE DISCLOSE YOUR PERSONAL DATA
6. SECURITY
7. YOUR PRIVACY RIGHTS
8. HOW LONG WE RETAIN YOUR PERSONAL DATA
9. CHILDREN’S DATA
10. LOCATION-SPECIFIC DISCLOSURES
11. CONTACTING US

WHEN DOES THIS NOTICE APPLY?

Restoration Hardware, Inc. ("RH" or "we" or "us" or "our") wants you to understand how we collect, use and disclose your Personal Data (as defined below). This Privacy Notice applies to Personal Data collected through our websites including RH.com, as well as any other RH-branded online platforms that link to this Privacy Notice (collectively, the “RH Online Properties”), including RH, RH Modern, RH Contemporary, RH Outdoor, RH Beach House, RH Ski House, RH Baby & Child, RH TEEN, RH Outlet, RH Contract and RH Trade. Additionally, this Privacy Notice covers Personal Data collected through our physical locations, including RH galleries, outlets, restaurants, cafés, wine vaults, Guesthouse, call centers and distribution centers (collectively, the “RH Physical Properties”). This Notice does not, however, apply to Personal Data that is collected and used in connection with RH Credit Cards. By using the RH Online Properties, visiting RH Physical Properties, and/or providing your Personal Data to us, you acknowledge that your Personal Data will be collected, used and shared as described in this Privacy Notice. Residents of the European Union, United Kingdom, Canada, and California should visit “Location Specific Disclosures” to learn more about our processing of their Personal Data.

Terms used in this Notice shall have the same or the analogous meaning ascribed to them in the applicable data privacy law.

UPDATES TO THIS NOTICE

We may change this Privacy Notice at any time. Please refer to the “Last Updated” date at the top of this page to see when this Privacy Notice was last revised. Any changes to this Privacy Notice will become effective on the "Last Updated" date indicated above. Your continued use of our websites or interactions with us after the posting of any amended Privacy Notice shall constitute your agreement to be bound by such changes.

PERSONAL DATA WE COLLECT

The term “Personal Data” as used in this Privacy Notice refers to any information that identifies, relates to, describes, is reasonably capable of being associated with, or could be reasonably linked, directly or indirectly, to an identifiable individual. We and our service providers may collect and/or process, and may have collected or processed in the 12 months preceding the effective date of this Notice, the following categories of Personal Data about you:

• Identifiers and Contact Information: such as first and last name, postal address (including billing and shipping address), online identifiers, account identifiers and registration information, IP address, phone number, and email address.
• Financial information: such as payment details, including credit or debit card number, and salary information.
• Commercial information: such as records of products or services purchased, exchanged, returned, obtained, or considered, or other purchasing or consuming histories or tendencies. We also maintain a record of your wish lists and gift registries in connection with the RH Online Properties as well as your marketing preferences.
• Content of communications: such as the date and times of any communications with us, and any Personal Data contained in the content of such communications (including any recordings of customer service calls), and our responses. We also maintain information you provide to us related to any customer support requests.
• Other internet or electronic data: such as network activity, browsing history, search history, information regarding your interaction with our sites or advertisements, browser and device information, server log files (e.g., IP address, visit times, pages viewed), data from cookies, pixel tags, and similar tracking technologies, or physical location of your device.
• CCTV footage: such as audio and video recordings via CCTV cameras at RH Physical Properties.
• Inferences: such as preferences, characteristics, and purchasing behavior.
• Events Information: such as Personal Data related to your participation in our events. For example, if you register for and attend an event that we host or sponsor, we may collect information related to your registration for and participation in such event.
• Sensitive or Special Category Personal Data: such as your log-in, financial account, debit card, or credit card number in combination with a required security or access code, password, or credentials allowing access to an account, precise geolocation information, or Personal Data concerning your health. In addition, there may be cases where you voluntarily provide us with information about major events such as weddings, the birth of a child, and/or the purchase of a new home in connection with you or another individual’s gift registry or in other similar circumstances. In such cases, you may be providing us with information concerning or alluding to racial or ethnic origin, religious beliefs, or information concerning sex life or sexual orientation, which may be considered “sensitive” or “special category” Personal Data under applicable privacy laws (collectively, “Sensitive Personal Data”). You may also include Sensitive Personal Data in any communications that you send to us.
  
  We process Sensitive Personal Data with your consent where required by applicable law, to provide you with the products and services you requested or that would be reasonably expected by you, or for purposes allowed under the law. Generally, RH collects Sensitive Personal Data as follows:

  • When included in gift registries, communications, or similar circumstances – with your explicit consent (indicated by you unilaterally deciding to provide us with such Personal Data) and to provide the services you would reasonably expect when engaging RH for such services; 

  • When shared in connection with our cafes, restaurants, or catered events (e.g., any allergies or dietary requirements, which may be data concerning health) – with your explicit consent or as necessary to defend legal claims; and 

  • When shared in relation to events we are hosting (e.g., any accessibility requirements, which may be data concerning health) – with your explicit consent or as necessary to defend legal claims.

  • When you use our store locator or other location-based features we may offer, we may collect your precise geolocation information from your device or browser, including with your permission as made available via your device or browser. You may turn off precise location information sharing through your device settings.

HOW WE COLLECT AND USE YOUR PERSONAL DATA

We collect, and may have collected in the 12-months preceding the effective date of this Notice, Personal Data from multiple sources, including:

• Directly from you, when you interact or transact with RH (including via service providers acting on our behalf), such as providing contact information for marketing purposes or scheduling shipments, sharing your financial information for processing payment, and when you otherwise provide us with information at an RH Physical Property, online at an RH Online Property, or over the phone.
• Indirectly from you, when you interact with RH Online Properties, such as your online interactions with our website, we use cookies, pixels, tags, session replay technologies, and similar technologies (collectively, “Online Tracking Technologies”), subject to your consent where required, to collect your internet or electronic data including browsing or search history and information regarding your interactions with our website, emails, or advertisements.
• Via third parties, such as data brokers, credit reporting agencies, and data aggregators who help us to enhance our customer records to improve our experiences, or to identify potential customers. Third-party products and services may control the information they collect and share about you. For information about how these third parties may use and disclose your information, please consult their respective privacy policies.

We may use the Personal Data set out above for the following purposes, on the following lawful bases.

Note that you may have the right to withdraw consent at any time in certain limited instances where you both reside in a jurisdiction with such rights, such as the European Economic Area, and we are processing information on the basis of your express consent as opposed to another lawful basis. To do so, please contact us at Privacy@RH.com.

You are not required to provide us with any Personal Data. However, if you do not provide us with Personal Data that we need, we may be unable to provide you with our products and services.

Where allowed by applicable law, we may de-identify or anonymize your Personal Data. If we do so, we will maintain and use the de-identified data without attempting to re-identify it. De-identified data will not be subject to this Notice and may be used to the extent permissible under applicable law.

HOW WE DISCLOSE YOUR PERSONAL DATA

For the purposes of this Privacy Notice, disclosure includes transferring, sharing (both verbally and in writing), sending, or otherwise making your Personal Data available or accessible to another person or entity.

We may disclose, and may have disclosed in the 12-months preceding the effective date of this Notice, the categories of Personal Data identified above with the following categories of recipients for the following business purposes:

• Service Providers: Companies that process your Personal Data in accordance with our instructions, in order to provide us with services. For example, those that assist with website hosting, data storage, payment processing, order fulfillment, IT services, customer service, email delivery, credit card processing, auditing, and similar services.
• Affiliates: Our subsidiaries and affiliated entities for business purposes and to perform functions on our behalf. We may also disclose Personal Data to our affiliates and subsidiaries for marketing and commercial activities (with your consent, where required under applicable law).
• Promotional Partners: Selected third parties for their marketing and commercial purposes (with your consent, where required under applicable law).
• Marketing and Advertising Agencies: For advertising and promotional activities.
• Gift Registry Third Parties: In connection with any gift registry where you are a registrant or co-registrant.
• Message Recipients: To identify you to anyone you send messages to through our online properties.
• Business Transactions: In the event of a reorganization, merger, sale, joint venture, or transfer of our business or assets.
• Other Legal and Safety Reasons: As necessary to comply with applicable laws, respond to legal orders, government requests, or non-binding requests (where we determine it to be in our best interest), enforce our terms, protect our operations and rights, assist in fraud prevention or investigation (e.g., counterfeiting), obtain advice from our advisors, and pursue legal remedies.
• Other Purposes: We may also use your Personal Data in other ways, in which case we will provide specific notice at the time of collection and obtain your consent where required by applicable law.

Please also note that information you post on message boards, chat rooms, profile pages, and blogs becomes public and can be accessed by others. Please exercise caution when sharing Personal Data.

We do not sell, rent, or share mobile numbers, text messaging originator opt-in data, or consent with third parties or affiliates for their own direct marketing or promotional purposes. SMS consent and mobile numbers are used solely to send text messages and to operate our messaging programs. We may disclose such information to service providers who assist us in delivering and supporting our messaging programs, subject to contractual limits prohibiting any other use. For more information about our messaging practices, please review our RH Text Messaging Terms of Use.

Cookies and Similar Online Tracking Technologies

We may use Online Tracking Technologies to help us remember you and your preferences when you revisit our website. The information collected by these cookies and similar technologies may include your: IP address; unique cookie identifier and information obtained through cookies; unique device identifier and device type; domain, browser type and language, operating system, system settings, country and time zone; previously visited websites; information about your interaction with our RH Online Properties such as click behavior, purchases and indicated preferences; and access times and referring URLS. Depending on your country of residence, and where allowed by law, these Online Tracking Technologies may be enabled by default with the right to opt-out made available. Where required by law, we will obtain your prior consent before placing non-essential cookies and similar technologies.

We use Online Tracking Technologies to analyze and understand how you access, use, and interact with our RH Online Properties and our customers’ preferences (such as country and language choices), as well as to assess, secure, protect, optimize, and improve the performance of our RH Online Properties. This enables us to provide services to our customers and improve their online experience. We also use cookies and pixel tags to obtain aggregate data about site traffic and interaction, to conduct analytics, identify trends, and obtain statistics so we can improve our RH Online Properties, as well as to target advertising and content across our RH Online Properties and third-party sites and services.

We use the following categories of cookies to provide a personalized luxury experience:

• Strictly Necessary Cookies: These are essential for the core functionality of the RH Online Properties. They enable basic features, such as to secure and protect the performance of our RH Online Properties, and to allow you to add products to your shopping cart.
• Preference and Functionality Cookies: These cookies help enhance your experience by enabling additional functionality on the RH Online Properties. They handle and remember your country, currency and language preferences, and enable functions that improve the shopping experience.
• Analytics Cookies: We use these cookies to obtain aggregate data about site traffic and interaction, to conduct analytics, identify trends, and obtain statistics so we can improve our RH Online Properties.
• Advertising and Personalization Cookies: We use these cookies to allow us to understand how you interact with our RH Online Properties and your interests to deliver tailored marketing and advertising content to you. These cookies also help us measure the effectiveness of our advertising campaigns.

We may allow selected third parties to place cookies on our websites or applications to provide us with better insights into usage to provide relevant advertising to you. These third parties may collect information about your online activities over time and across different websites or online services. We may also permit third party service providers to place cookies through our website or applications to perform analytic or marketing functions. We use Google Analytics and its advertising products, such as Google Ads, that may collect usage data (using cookies, pixel tags and similar tools) about our RH Online Properties to provide us with reports and metrics that help us to evaluate usage of our RH Online Properties, improve performance and user experiences, and serve relevant advertising to you. We also use third-party technologies and services, such as reCAPTCHA, to support the security of our RH Online Properties and protect against fraud and abuse. For information about Google Analytics, see Google’s Privacy & Terms and for reCAPTCHA, see Google’s Privacy Policy. We may combine the data collected by Online Tracking Technologies with other information we maintain about you and use this data for marketing to you, including through other, non-website-based channels.

We also use session replay technology. Session replay tools use cookies and other technologies to collect data about how you interact with our website, including by recording and reconstructing your mouse movements, clicks/taps, and keystrokes. Our third-party service providers collect and store this information on our behalf in a pseudonymized user profile. We configure session replay technologies to avoid capturing sensitive fields, such as payment card data and passwords). Where required by law, we will obtain your consent before enabling session replay technologies. By continuing to use and access our RH Online Properties, you agree to the use of these technologies by us and our third-party service providers.

We make available several ways for you to manage your cookies within our RH Online Properties. Many of these are browser and device specific, which means that you need to set the preference for each browser and device you use to access the RH Online Properties. Additionally, if you delete or block cookies, you may need to reapply these preferences. Opting out of cookies and advertising as discussed below does not mean that you will no longer receive advertising content from us. You may continue to receive generic or contextual ads from us.

• Industry Ad Choice Programs. You may be able to control how participating third-party ad companies use the information that they collect about your visits to our sites, and those of third parties, in order to display more relevant advertising to you. If you are in the U.S., you can obtain more information and opt-out of receiving targeted ads from participating third-party ad networks via the Digital Advertising Alliance at aboutads.info/choices. Please note that opting out of participating ad networks does not opt you out of being served advertising. You may continue to receive generic or ‘contextual’ ads on our RH Online Properties. You may also continue to receive targeted ads on other websites, from companies that do not participate in the above programs.
• Browser Settings. For a comprehensive up-to-date summary of every third-party accessing your web browser (through the RH Online Properties or otherwise), we recommend installing a web browser plug-in built for this purpose. Your browser may offer choices to manage your cookies, including blocking all or third-party cookies. You may do this through your browser settings on each browser and device that you use. If you turn cookies off, you may not have access to many features that make our RH Online Properties more efficient and some of our services will not function properly.

Some web browsers offer a “Do Not Track” (DNT) setting that allows you to express your preference not to be tracked across websites. At this time, we do not respond to DNT signals.

Categories of Third Parties to Whom Personal Data Has Been Sold or Disclosed for a Business Purpose

We share, and in the 12 months preceding the effective date of this Notice may have shared, the following categories of Personal Data for monetary or other valuable consideration, for targeted advertising purposes, or for another business purpose. In certain jurisdictions, disclosures of Personal Data for monetary or other valuable consideration, or disclosures for cross-context behavioral advertising purposes, may constitute “sales” or “sharing” of Personal Data:

• Identifiers
• Internet or other electronic network activity information
• Commercial information
• Inferences

These categories of information have been and may be disclosed to our marketing and advertising partners, including platforms that enable or participate in targeted and cross-contextual behavioral advertising, entities that support our marketing to you through non-website-based channels, and other entities which may include data brokers and third-party cooperative databases.

Notice of Right to Opt-Out of “Sales” and “Sharing” of Personal Data

As described above, our disclosure of your Personal Data through Online Tracking Technologies to third party advertising platforms and analytics providers may be deemed a “sale” or “sharing” of Personal Data under certain privacy laws, and you may have the right to opt-out of such processing. To exercise your right to opt-out of “sales” or “sharing” of your Personal Data, please refer to the section below titled “Your Privacy Rights.” We do not have any actual knowledge that we sell or share Personal Information of consumers under 16 years of age.

Third Parties and Third-Party Sites

When you submit Personal Data to a third party—for example, through a third-party software application, service, or social media platform included in or linked from our website—the collection, use, and disclosure of your information is governed by those third parties’ own privacy notices.

We are not responsible for the data collection, use, or disclosure practices of any third parties, including our affiliates, third-party service providers, social media platforms, or any other website to which our site links. The inclusion of a link on our website does not imply endorsement of the linked site by us or our affiliates. You should review the privacy notice of such third parties before sharing your Personal Data with them.

SECURITY

We seek to use reasonable organizational, technical, and administrative measures to help protect the Personal Data under our control. While no system can guarantee absolute security, we work with reputable third-party cloud service providers that maintain robust security measures to protect your data. A username and password are needed to access certain areas of our website. It is your responsibility to protect your username and password. Personal Data may be accessed by people within our organization, or our third-party service providers, who require such access to carry out the purposes described in this Privacy Notice, or otherwise permitted or required by applicable law.

We use payment card processors during payment processing. Your payment data is delivered directly from the browser to payment card processors, who handle your payment card data subject to industry standards regarding security. It is important for you to protect against unauthorized access to your account, purchase history, and devices.

When accessing our website—especially on public or unsecured networks—please exercise caution when submitting Personal Data. If you suspect that your account or interaction with our website has been compromised, you should notify us immediately. In such cases, we recommend placing orders by telephone or in person. For assistance, please refer to the “Contacting Us” section.

YOUR PRIVACY RIGHTS

Depending on the jurisdiction in which you are located, you may have certain rights regarding your Personal Data, subject to applicable law. We may ask you to verify your identity before fulfilling certain requests, in order to protect your Personal Data. In some jurisdictions, an authorized agent may submit a request on your behalf if they provide proof of authorization.

To exercise your rights, please submit a Privacy Request Form, unless another method is indicated below, or contact us directly at the phone numbers or addresses listed in the Contacting Us section. We will respond as requested by applicable law. We may deny a request if we cannot verify your identity or if the law otherwise permits.

Applicable laws may also give you the right to appeal our decision regarding your Privacy Rights request. To do so, please use our Privacy Request Form or contact us at Privacy@rh.com. Residents of some US jurisdictions may have the right to submit complaints to their state’s attorney general using the online complaint mechanisms on the relevant attorney general’s website.

If you have any questions or would like to submit a complaint regarding RH's collection, use, or disclosure of your Personal Data, please contact us at Privacy@rh.com. You may also contact our Data Protection Officer (“DPO”) responsible for your country or region via DPO@rh.com. In your email header, please indicate the country from which you are contacting us.

We will not retaliate against you for exercising your Privacy Rights under applicable law.

HOW LONG WE RETAIN YOUR PERSONAL DATA

We will keep your Personal Data only for as long as we reasonably require to fulfill the purpose for which we collected it (including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements) and, in any event, only for as long as data protection laws and our internal retention policies permit. 

We may retain your Personal Data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect of our relationship with you.

To determine the appropriate retention period for Personal Data, we consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements. 

For more information, please contact our Privacy Team at Privacy@rh.com.

CHILDREN’S DATA

Individuals under the age of sixteen (16) are not generally permitted to make purchases, subscribe to our marketing communications or otherwise use the RH Online Properties. In some jurisdictions, the age threshold for valid consent may be lower than 16. Where applicable, we will comply with the local age of consent laws for data processing. It is important to us that we do not knowingly process Personal Data of any individuals under the applicable age. Therefore, you must not provide us with any Personal Data relating to any individual under the applicable age in your country, nor permit such individuals to subscribe to our communications, use the RH Online Properties, or provide us with their Personal Data.

LOCATION-SPECIFIC DISCLOSURES

EUROPEAN UNION AND UNITED KINGDOM

Under the General Data Protection Regulation, including as it applies in the UK pursuant to the European Union (Withdrawal) Act 2018 (collectively the “GDPR”), RH London Gallery Limited and RH Geneva Sarl respectively are the Data Controllers of your Personal Data.

We are a US-headquartered business and pride ourselves on providing the best possible global customer experience. We want to make sure that you get the same best-in-class service whenever and wherever you visit us – wherever in the world, virtually or in person. It is core to that customer experience that we centralize your Personal Data, and we underpin that global experience by storing Personal Data in the United States. Some of the data recipients with whom we share your Personal Data may be located in countries other than the country in which your Personal Data was originally collected. The laws in those countries may not provide the same level of data protection as compared to the country in which you initially provided your data. Nevertheless, when we transfer your Personal Data to recipients in other countries, including the US, we will protect that personal data as required by applicable law and as described in this Privacy Notice.

We take measures to comply with applicable legal requirements for transfers of Personal Data to recipients in countries outside of the European Economic Area (EEA), United Kingdom (UK) or Switzerland that do not provide an adequate level of data protection. We use a variety of measures to ensure that your Personal Data transferred to these countries receives adequate protection in accordance with data protection rules; including using EU Standard Contractual Clauses and the UK Addendum to the EU Contractual Clauses.

UNITED STATES

NOTICE OF FINANCIAL INCENTIVE AND NOTICE OF BONA FIDE LOYALTY PROGRAM

The RH Members Program (“Program”) provides customers with the opportunity to obtain exclusive benefits, including discounted member pricing on purchases, complimentary access with respect to certain goods and services, access to preferred financing, and priority mailings of Sourcebook Catalogs. Because our Program involves the collection of Personal Data and offering of certain benefits, it might be interpreted as a “financial incentive” program under California law or a “bona fide loyalty program” under Colorado law.

Opting-In to the Program. You may join the Program online at https://rh.com/us/en/membership. The Program Terms and Conditions are available at: https://rh.com/us/en/our-company/members-program-terms-and-conditions.

Categories of Personal Data We Collect. To enroll you in the program, RH collects the following categories of Personal Data:

• Identifiers, such as name, email address, billing and mailing postal addresses, telephone number, and date of birth
• Commercial Information, such as shopping and purchase history and payment information
• Internet/Network Activity, such as IP address, activity logs, and browsing history
• Geolocation Data

We also collect information you choose to provide in your RH member profile, as well as information about your marketing preferences. This includes how you prefer to be contacted by RH as well as what types of information you are interested in hearing about.

Because your Personal Data is necessary for you to participate in the Program, you understand that you will be unable to participate in the Program in the event you submit to use a Request to Delete all your Personal Data.

Because the sale of Personal Data or the processing of your Personal Data for targeted advertising is not needed to participate in the Program, we will continue to provide you the benefits of the Program if you exercise your right to opt out of the sale of Personal Data or the processing of Personal Data for targeted advertising.

Value of Consumer’s Data. Under California law, the value of your Personal Data is related to the value of the free or discounted products or services, or other benefits that you obtain or receive as a Program participant, less the expenses related to offering those products, services, and benefits to Program participants.

Withdrawing from the Program. You may withdraw from participating in the Program at any time by cancelling your membership. You may cancel your membership by logging into your RH account, selecting “My Account” and adjusting the relevant settings, or by calling 888.889.4739.

CALIFORNIA

Under California law, California residents may opt-out of or request information about our sharing their Personal Data with other parties for their direct marketing purposes. If you are a California resident and would like to exercise your rights under California’s Shine the Light law, please submit your request to Privacy@rh.com.

Categories of Personal Data We Collect from California Residents

We may collect, and may have collected in the 12 months preceding the effective date of this Notice, the information described above in “Personal Data We Collect,” which includes:

• Identifiers, including online identifiers
• Characteristics of protected classifications under California or federal law
• Categories of personal information described in Cal. Civ. Code § 1798.80
• Commercial information (e.g., products or services purchased or other purchasing or consuming histories or tendencies)
• Internet and other electronic activity information
• Inferences drawn from your activity
• Geolocation data
• Sensory data, including audio, electronic, and visual information
• Professional or employment-related information
• Other categories described in California law
• Sensitive personal information
• Inferences drawn from any of the categories of information above to create a profile about an individual reflecting their preferences, characteristics, or predispositions

CANADA

This portion of the Privacy Notice applies to our customers, clients, sub-contractors, and others residing in Canada, and is intended to comply with the Personal Information Protection and Electronic Documents Act SC 2000 c-5 (“PIPEDA”) and relevant provincial laws: British Columbia's Personal Information Protection Act SBC 2003, 63 (“BC PIPA”) and Alberta's Personal Information Protection Act SA 2003, c P-6.5, (“Alberta PIPA”), collectively referred to as PIPA. Special provisions specific to residents of Quebec that are intended to ensure compliance with Quebec's Act Respecting the Protection of Personal Information in the Private Sector, CQLR c P-39.1 (the “Quebec Act”) can be found below. Except where specified, terms used in this section have the same definitions as in applicable Canadian law. If there is a conflict between this section and the Privacy Notice generally, this addendum takes precedence.

BY SUBMITTING PERSONAL DATA TO THE COMPANY, AND/OR BY ACCESSING AND USING THE WEBSITE, YOU CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF SUCH PERSONAL DATA IN ACCORDANCE WITH THIS PRIVACY NOTICE, EXCEPT IN LIMITED CIRCUMSTANCES AS PERMITTED OR REQUIRED BY LAW. UNLESS WE HEAR OTHERWISE, YOUR RECEIPT OF OUR PRIVACY NOTICE INDICATES YOUR CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR PERSONAL DATA AS DESCRIBED.

Transfers of Personal Data

If you are a resident of Quebec, we may transfer your Personal Data with our subsidiaries and affiliates, service providers, and other third parties who may be located outside of Quebec, including in the United States, for the purposes identified in “How We Disclose Your Personal Data.”

Data Storage, Cross-Border Transfers, and Protection

We may store your Personal Data on servers and systems under our control or on servers and system that we license. To carry out the purposes described in our Privacy Notice, your Personal Data may be transferred and stored outside of Canada, including in the United States. If you are a resident of Quebec, please note that your Personal Data may be transferred and stored outside of Quebec, including in the United States, for these purposes. This means your data may be subject to the laws of other jurisdictions, which may not provide the same level of protection as in your province or in Canada generally. U.S. government or law enforcement agencies may access your data in accordance with U.S. law.

When we transfer Personal Data across borders to a third party, we will take reasonable steps to protect the data from unauthorized use and disclosure. We will only engage third-party processors that have adequate security measures, policies, and staff training in place to safeguard Personal Data. We will proceed with a Privacy Impact Assessment as defined in the Quebec Privacy Act when required to ensure the safety of your Personal Data. We may audit and inspect the third party’s data handling and storage practices when necessary to ensure compliance with these protective measures.

CONTACTING US

If you have any questions about this Privacy Notice, please contact us at Privacy@RH.com.

You may also contact our Data Protection Officer (“DPO”) responsible for your country or region via DPO@rh.com. In your email header, please indicate the country from which you are contacting us.

Please note that email communications are not always secure, so we request that you not include credit card information or other sensitive information in your email messages to us.

You may also contact us by phone or postal mail using the information below.

EUROPEAN UNION

You may write to us at:

Atten: RH Privacy
RH Geneva Sarl
C/O Intertrust (Suisse) SA
Place de Alpes 4
Geneva 1201

UNITED KINGDOM

You may write to us at:

Attn: RH Privacy
RH London Gallery Limited
Aynho Park
Aynho
Banbury
Oxfordshire OX17 3BQ
United Kingdom

NORTH AMERICA

You may call our Client Service team at 1-844-910-1289, or write to us at:

Attn: RH Privacy
RH
2900 North MacArthur Drive
Suite 100
Tracy, CA 95376