Effective Date: 20 October 2022

This Privacy Policy describes the information we collect about you when you interact with us in our stores, our events (such as pop-ups), through customer service, our member/loyalty program, on the Dockers® and Levi’s® retail websites, our mobile app (where available) or our corporate website (levistrauss.com) (collectively our “Platforms”).

By submitting information through, or otherwise using, our Platforms, you acknowledge that we may collect, use and disclose information in accordance with this Privacy Policy, the privacy preferences you have made known to us, and as permitted or required by law. As used in this Privacy Policy, “LS&Co.”, “our”, “us”, and “we” means Levi Strauss & Company, a corporation headquartered in the United States of America, (unless a different legal entity is applicable to your location as described in the "SUPPLEMENTAL NOTICES" section below). LS&Co. is the parent company for the Levi’s® and Dockers® family of brands. Beyond Yoga is a subsidiary of LS&Co. but their Privacy Notice at https://beyondyoga.com/pages/privacy-policy applies when you are doing business with them.

We are deeply committed to the relationship and trust we have with you, and we take our data protection responsibilities seriously. For more than 160 years, we have been creating authentic products by leading with our values. As we continue to innovate in how we bring products and services to life, we’ll match progressive technology and practices with your privacy interests.

YOUR PERSONAL INFORMATION

How We Collect, Use, and Share Your Personal Information

We collect data when you interact with us at different touchpoints, including information that can directly or indirectly identify you (your “Personal Information”). As a consumer goods company, we use Personal Information for a variety of business purposes including sharing it and combining it with other information we might receive from our wholesale partners, technologies, and other third parties. This section details the kinds of information we collect, how we use it, and describes the third parties with whom we share information. See "OTHER SUPPLEMENTAL NOTICES" below for additional information that may apply to you based on your location.

BUSINESS PURPOSE AND SHARING FOR ALL DATA TYPES

In addition to the above, we may use any or all of the Personal Information described in this Privacy Policy for the following business purposes. Additionally, our business operations require that we share Personal Information with certain categories of third parties as are identified below.

We may use the Personal Information that we collect to:

• Maintain the safety, security, functionality, and integrity of our Platforms and other assets or business
• Prevent investigate, or take action regarding unlawful activity including but not limited to engaging third parties to screen transactions for suspected fraud or identity theft
• Perform testing, research, analytics, and product development
• Administer, support, and improve our online presence, whether on our website or mobile app, including troubleshooting technical problems when they arise
• Understand, improve, and provide customized and streamlined experiences with our Platforms, including by offering member (loyalty) program, personalized recommendations, fit suggestions, and the like
• Provide services in-store, on the website or mobile app, including processing requested purchases, returns and exchanges, payments, orders, shipping products, and providing Customer Service
• Evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us is among the assets transferred
• Conduct other business initiatives as described to you when collecting your Personal Information, with your consent or as otherwise permitted by law
• Comply with law or a legally binding process, such as pursuant to subpoenas, court orders, to enforce our legal rights, or to protect you, us, or others against injury or harm including for security and loss prevention
• To administer surveys and questionnaires, such as for consumer satisfaction purposes

We share your Personal Information with:

• Service Providers, including operations outsourcing, such as for unique services or points of presence in a country, cloud service and technology providers, credit card processing, marketing and advertising, shipping and logistics, dispute resolution, fraud detection and prevention providers, data management, analytics providers and other third parties with whom we have contractual relationships,
• Within our family of brands and with businesses controlling, controlled by, or under common control with LS&Co. (“Affiliates”),
• Auditors, consultants, lawyers, and other entities who use the data to provide us with professional services,
• Government agencies, law enforcement, regulators, and courts where we are required to comply with applicable laws, regulations or rules, requests of law enforcement, regulators and other government agencies or a legally binding process, such as pursuant to subpoenas, court orders, to enforce our legal rights, or to protect you, us, or others against injury or harm
• Business Transfers, if (i) we or our Affiliates are or may be acquired by, merged with, or invested in by another company, or (ii) if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may disclose or transfer Personal Information to a potential or actual third party purchaser or other relevant third party.

We may also anonymize, aggregate or otherwise strip any Personal Information we collect of all personally identifying characteristics and may use or share that aggregated, anonymized data with third parties for any purpose we deem appropriate.

YOUR CHOICES

We believe in giving you choices about how your Personal Information is used. Below are some ways that you may exercise these choices, including how to change or correct your Personal Information and how to unsubscribe from marketing.

We encourage you to review this entire Privacy Policy to fully understand the choices you may have, such as allowing or blocking cookies, online behavioral tracking and advertising, asking for your Personal Information to be deleted, or asking what Personal Information we have collected from you. See "OTHER SUPPLEMENTAL NOTICES" for additional information that may apply to you based on your location.

When you set up an account, sign in or log in on one of our Platforms, you can access, correct, or update your choices and settings. If you receive email marketing communications from us on behalf of any of our brands and want to opt out of receiving such communications in the future from that brand, you can opt out by clicking the “Unsubscribe” link at the bottom of the promotional email. Similarly, if you receive direct mail from us and wish to unsubscribe, you can opt out by e-mailing us at [email protected]. Please be sure to include your full name, mailing address and e-mail address along with the types of information you do not want to receive. It may take up to 8 weeks to process an opt-out from direct mail.

Some services will allow you to accept or reject use of geolocation technologies but, if you don’t accept, you may not be able to enjoy certain features on our Platforms (such as the full “find a store” option). Unless otherwise explained to you in advance, you are not obligated to provide your Personal Information to us. If you decide not to provide your Personal Information, we might, in some instances, not be able to provide you with a product or service. Additionally, if you have opted out of certain services, such as marketing communications, you may still hear from us for other purposes such as needed to fulfill your orders or responding to customer service inquiries.

SECURITY

Safeguarding Your Personal Information

We care about protecting your Personal Information, so we employ reasonable physical, technical, and administrative safeguards designed to help keep it safe, including encryption and in some cases techniques to reduce the ability to identify an individual. Personal Information may be accessed by persons within our organization, our third party service providers, or the other persons described in this Privacy Policy who require such access to carry out the purposes described in this Privacy Policy or that are otherwise permitted or required by applicable law. Unless otherwise noted in this Policy, Personal information we collect for North and South America is managed from our headquarters in San Francisco.

No data collection, storage, or transmission, including over the Internet or other network can be guaranteed to be 100% secure, so despite our efforts we cannot and do not guarantee the security of any data you transmit to us, including on, or through, our Platforms. When you communicate with customer service via email or chat, we ask that you not share sensitive Personal Information via these communication channels. You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your log-in and password private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity.

When you register on one of our Platforms, you will need to set up a password to access your information on our site. If you want to cancel your password or change it, click on “Log In” from any page on the website, and you can access, correct, or update your choices and settings from within your account. Note that we don’t ask customers to confirm account or credit card details by email – if you receive an email claiming to be from us and asking for this information, don’t respond.

We store your Personal Information on the basis of applicable law and as required to satisfy the purpose for which the data is processed, unless a longer period is required for purposes such as complying with retention obligations, record keeping or other commercial requirements.

COOKIES, TRACKING AND ADVERTISING

Cookies, Tracking Technologies and Interest-Based Advertising

THIRD PARTY LINKS & FEATURES

Social Media and Third-Party Links

Social media provides tools that many of our consumers use and enjoy, and we include links to various social media platforms as part of our digital offerings. For your convenience and information, we may provide links to other sites, or add on features powered by third parties to our website or app, which may have privacy policies that differ from our own. We identify features and links that are provided by third parties, but are not responsible for the content or practices of any linked site. We recommend that you review the privacy policy of any site or feature that you access through our platforms before sharing your Personal Information and understand your privacy settings which will determine the degree to which your Personal Information is used, shared, or made public.

INTERNATIONAL PROCESSING

Transfers and Processing

Please be aware that your Personal Information may be transferred to and maintained on servers or databases located outside your state, province/territory, or country. If you are located outside of the United States, please be advised that as a global business we may we process, share and store Personal Information in countries other than your country of residence, including the United States.

By using our Platforms and unless such consent is prohibited by law, you are agreeing to the collection, use, transfer, and disclosure of your Personal Information, browsing information, and that communications will be subject to the applicable laws in the United States.

We comply with laws governing the international transfer of Personal Information typically through the execution of legally required data protection agreements incorporating, where applicable, standard contractual clauses approved for use by the European Union or regulators of other jurisdictions, or other instructions that may be specified, updated, amended, replaced, or superseded from time to time by the applicable regulatory authority.

SUPPLEMENTAL NOTICES

Additional data protection and privacy terms may be applicable depending on your location. These terms (our “Supplemental Notices”) are incorporated into, and should be read in conjunction with, this Privacy Policy by reference based on the applicable jurisdiction. They are updated from time to time to meet specific legal requirements and we encourage you to check the Supplemental Notices page for a description of practices and your privacy rights if you are doing business with us in one of these locations. Unless otherwise indicated, the Supplemental Notices have the same effective date as the LS&Co. Global Privacy Notice.

CONTACT US

If you have any questions, complaints or concerns about the Levi Strauss & Co. Privacy Policy or our data protection practices, or if you wish to exercise your data subject rights, please send an email to [email protected], call us toll free at 1-800-872-5384 (Levi’s) or 1-800-362-5377 (Dockers), or write to us at Levi Strauss & Co., Attn: Privacy, 1155 Battery Street, San Francisco, CA 94111.

NOTICE FOR INDIVIDUALS IN SOUTH AFRICA

If your Personal Information is subject to South African laws, the following clarifications shall apply. In the event of a conflict between the other sections of this Policy and this Supplemental Notice for South Africa, the provisions of this Supplemental Notice will apply to the extent of such inconsistency or conflict.

This Notice applies to the processing of Personal Information entered into a record by a data controller within the Republic of South Africa. For purposes of this Supplemental Notice and where the processing of Personal Information is subject to South African laws, references to the following terms, shall have the corresponding meaning as applicable in the Protection of Personal Information Act, 2013, as amended or replaced from time to time ("POPIA"):

"data controller" shall include a "responsible party" as defined in POPIA;

"data subject" shall include a "data subject" as defined in POPIA, which shall include living natural persons and existing juristic persons;

"data processor" shall include an "operator" as defined in POPIA;

“Information Regulator” shall mean the data protection supervisory authority in South Africa, as established under POPIA;

"personal information" shall be as defined in POPIA, which shall include personal information in relation to living natural persons and existing juristic persons;

"process" or "processing" shall be as defined in POPIA; and

"sensitive data" shall include "special personal information" and personal information relating to children as defined in POPIA.

CONTROLLER RESPONSIBLE FOR PROCESSING PERSONAL INFORMATION

The local entity acting as “data controller” for Personal Information collected in South Africa is Levi Strauss South Africa Ltd, which has its registered address at 4 Bree Street, 17th Floor Portside Building, Cape Town, Western Cape, 8001.

When we refer to “LS&Co.” or “we” in this Supplemental Notice, we refer such LS&Co. entity acting as “data controller” for your Personal Information.

RIGHT TO LODGE A COMPLAINT

You have the right to lodge a complaint with the South African Information Regulator. You may contact the office at: [email protected] and at +27 (0) 10 023 5200 or 33 Hoofd Street Forum III, 3rd Floor Braampark, South Africa, Braamfontein, Johannesburg.

PURPOSE(S) AND LEGAL BASIS FOR PROCESSING

Our collection, use, disclosure and other processing of personal information is necessary for the following legal bases:

• where applicable, with your consent in respect of the processing of your Personal Information, (for example, where we are required to obtain your prior consent in order to send you direct marketing communications by electronic means);
• performance of the contract between us to provide you with products and services including sending you transactional communications, verifying your identity, assisting you in-store, on the sites, processing payments, returns, exchanges, orders, shipping products, and providing customer service;
• for purposes we consider to be necessary for pursuing our legitimate interests or the legitimate interests of third parties to whom we disclose yourPersonal Information to including improving the functionality and integrity of our platforms and stores, keeping consumers up to date with information about our products and services, completing corporate transactions, understanding consumer preferences, personalizing our interactions and developing our business relationship, as these functions help sustain and grow our business;
• to protect your legitimate interests (e.g. where we use the Personal Information provided to us to give effect to your benefit);
• to comply with a legal obligation to which we may be subject, such as complying with orders from government or other legal authorities, detecting and preventing illegal conduct, abuse, spam, fraud (e.g. account takeovers or payment related fraud), security incidents and other harmful activities.

Before collecting and/or using any Special Personal Information (including photographs and video images) or Personal Information relating to children, we will establish a lawful justification to use that information. This justification will typically be:

• your consent or the consent of a competent person in relation to a child, if applicable;
• the establishment, exercise or defence by us of a right or obligation in law, or to comply with an international public law obligation;
• for historical, statistical or research purposes to the extent that: (i) the purpose serves a public interest and the processing is necessary for the purpose concerned; or (ii) it appears to be impossible or would involve a disproportionate effort to ask for your consent, and sufficient guarantees are provided to ensure that the processing does not adversely affect your privacy to a disproportionate extent;
• you have deliberately made the personal information public; or
• a context specific exemption provided for under South African local laws in relation to the processing of Special Personal Information or information relating to children, such as to identify you when it is essential for that purpose and to comply with laws and other measures designed to protect or advance persons, or categories of persons, disadvantaged by unfair discrimination.

Transfers and processing

Please be aware that your Personal Information may be transferred to and maintained on servers or databases located outside of South Africa, including to countries and organisations which have not been determined by the South African Information Regulator to have an adequate level of data protection as provided for under POPIA, including the United States.

When we do transfer your Personal Information, we use a variety of legal mechanisms to help ensure your rights and protections travel with your data:

• we ensure transfers within the LS&Co. entities are covered by agreements based on the EU Commission's standard contractual clauses as amended for compliance with South African local laws, which contractually oblige each member to ensure that Personal Information receives an adequate and consistent level of protection wherever it resides within the LS&Co. entities;
• where we transfer your Personal Information outside LS&Co. entities or to third parties who help provide our products and services, we obtain contractual commitments from them to protect your Personal Information based on the standard contractual clauses as amended for compliance with South African local laws; and
• where we receive requests for information from law enforcement or regulators, we carefully validate these requests before any Personal Information is disclosed.

In addition, if we transfer any Special Personal Information or Personal Information relating to children to third parties including other LS&Co. entities in countries that do not have adequate data protection laws with data protection principles similar to POPIA, we shall do so only with the requisite prior authorisation of the Information Regulator, in circumstances where required.

DIRECT MARKETING

We will use your Personal Information to send you direct marketing about other products and services that we feel may be of interest to you. We will give you the opportunity to consent to the receipt of direct marketing by unsolicited electronic communications at the point that you apply or register to receive the products and services. Should you already be considered our existing customer who receives direct marketing by unsolicited electronic communications from us in relation to the same or similar products and services, we will give you the opportunity to opt out of receiving direct marketing by unsolicited electronic communications on each occasion thereafter that you receive direct marketing communications from us. You can also change your marketing preferences at any stage by contacting us.

YOUR DATA SUBJECT RIGHTS

You may have the following rights with respect to your Personal Information under applicable laws:

• Access to and information on the processing of your Personal Information. We may and where applicable, must, refuse access to information in terms of the grounds for refusal of access to records set out in the applicable laws, including the Promotion of Access to Information Act, 2000;
• Correction of your Personal Information where it is inaccurate, irrelevant, excessive, incomplete, misleading or out of date;
• Deletion or destruction of your Personal Information where it is inaccurate, irrelevant, excessive, incomplete, misleading or unlawfully obtained; and
• Objection to processing of Personal Information but only where the justification for that processing is that it is necessary for pursuing our legitimate interests or that of a third party to whom it is disclosed, or is for the protection of your legitimate interests, or where the processing is in the context of the processing of Personal Information for the purposes of direct marketing other than by unsolicited electronic communications. If you raise an objection, such objection should be based on reasonable grounds relating to your particular situation, unless legislation provides for such processing.

CHILDREN AND MINORS

Our Sites offered in the Republic of South Africa are not intended to address anyone under the age of 18 (“Children”). We do not knowingly collect personal information from Children. If you are a parent or guardian and you are aware that your child has provided us with personal information without your consent, please contact us using information in the “CONTACT US” section and we will take steps to remove that information.