State Privacy Rights

a.    Collection
During the 12-month period prior to the effective date of this Statement, we may have collected the following categories of personal information, including sensitive personal information, about you: 

• Identifiers: identifiers such as a real name, alias, postal address, unique personal identifier (such as customer number, unique pseudonym, or user alias), email address, account name, Social Security number, driver’s license number, passport number, and other similar identifiers, physical characteristics or description, state identification card number, and signature
• Identifiers (Online): a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; other forms of persistent or probabilistic identifiers, and Internet Protocol address
• Other Financial, Medical, and Health Information: bank account number, credit card number, debit card number, insurance policy number, and other financial information, medical information, and health insurance information
• Information Related to Characteristics Protected Under California or Federal Law: characteristics of protected classifications under California or federal law, such as race, color, national origin, religion, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, genetic information, disability, citizenship status, and military and veteran status
• Commercial Information: including records of personal property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies
• Biometrics: biometric information such as a fingerprint provided along with a product return if required by local law
• Internet and Other Electronic Network Activity Information: including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements
• Geolocation Data
• Sensory Information: Audio, electronic, visual, thermal, and similar information
• Professional or Employment-Related Information
• Education Information
• Profile Inferences: inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and/or aptitude

b.    Sources of collection
We collected personal information about you from the following sources:

• You
• Best Buy
• Device(s) You Used
• Service Providers

c.    Purposes for collection/use
We collected and used personal information about you for the following purposes: 

• Performing services you have purchased from or contracted for with us, including maintaining or servicing accounts (e.g., your My Best Buy® account), as well as providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, providing analytics services, or providing similar services
• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance
• Detecting and responding to security incidents, protecting against and responding to malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity
• Short-term, transient use, including, but not limited to, nonpersonalized advertising shown as part of your interactions with our digital properties
• Debugging to identify and repair errors that impair existing intended functionality
• Undertaking internal research for technological development and demonstration
• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us
• Displaying advertisements intended for you based on personal information, related to your activities over time and across nonaffiliated websites or online applications, used to predict your preferences or interests (targeted advertising)
• Customizing your experience on our digital properties
• Processing liability claims
• Complying with and enforcing applicable legal requirements, relevant industry standards and our policies

a.    We may have disclosed the following categories of personal information for a business purpose:

• Identifiers
• Identifiers (Online)
• Other Financial, Medical and Health Information
• Information Related to Characteristics Protected Under California or Federal Law
• Commercial Information
• Biometrics
• Internet and Other Electronic Network Activity Information
• Geolocation Data
• Sensory Information
• Professional or Employment-Related Information
• Education Information
• Profile Inferences

b.    We may share personal information about you for cross-context behavioral advertising — seeking to place ads to you on others’ digital properties based, at least in part, on personal information obtained from your activity on others’ digital properties. 

c.    We may have sold (as defined under California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, and Texas law) the following categories of personal information: 

• Commercial Information
• Identifiers (online) associated with a device used to interact with our digital properties or advertisements (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology)
• Internet and other electronic network activity information associated with a device used to interact with Digital Properties or advertisements
• Profile Inferences
  

d.    We do not sell the personal information of consumers under the age of 16 if we have actual knowledge of the individual’s age.

e.    We do not sell personal information as defined under Virginia and Utah law.

f.    Sensitive Personal Information: We do not share sensitive personal information for cross-context behavioral advertising. We do not sell sensitive personal information.  

g.    We may have disclosed personal information about you with the following categories of third parties: 

• Our affiliates
• Our joint marketing partners
• Our business partners
• Social media networks
• Third-party marketing partners
• Government entities, including law enforcement

Information we disclose to third parties:

You have certain choices regarding our use and disclosure of personal information about you, as described below.

• Access: You have the right to request, twice in a 12-month period, that we disclose to you the personal information related to you we have collected during the past 12 months. This may include:

o   The categories and specific pieces of personal information we have collected about you

o   The categories of sources from which we collected the personal information

o   The business or commercial purpose for which we collected or sold the personal information

o   The categories of third parties with whom we shared the personal information

o   The categories of personal information about you that we sold or disclosed for a business purpose, and the categories of third parties to whom we sold or disclosed that information for a business purpose

• Correction: You have the right to request that we correct certain personal information we have collected, taking into account the nature of the personal information and the purposes of the processing of the personal information. If you make a correction request, we may correct or instead delete information as allowed by law. Exceptions apply.
• Deletion: You have the right to request that we delete certain personal information we have collected from you. Exceptions apply.
• Opt-Out of Sale: You have the right to opt-out of the sale of personal information about you.

• Submit an access request, or call us at 1-888-BEST BUY (1-888-237-8289).
  • The report you receive containing personal information we have on file will provide instructions on how to pursue correction of applicable information.
• Submit a deletion request, or call us at 1-888-BEST BUY (1-888-237-8289).

More information on opting out of the sale of personal information about you, including through enabling Global Privacy Controls, is available on our Do Not Sell/Share page.

California Residents

• Limit the Use or Disclosure of Sensitive Personal Information. You have the right to request that we limit our use or disclosure of Sensitive Personal Information (as defined by California law) about you to certain uses authorized by the CCPA. We do not disclose Sensitive Personal Information beyond such authorizations. See our Limit the use of My Sensitive Personal Information page for more information.
• Do Not Share My Personal Information. You have the right to opt out of our sharing of personal information for cross-context behavioral advertising. See our Do Not Sell/Share page for more information on how to exercise this right.
• Shine the Light Request: You also may have the right to request that we provide you with (a) a list of certain categories of personal information we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year and (b) the identity of those third parties. To submit a Shine the Light Request, email us at [email protected].

Colorado Residents

• Opt Out of Targeted Advertising: You have the right to opt out of “Targeted Advertising.” See our Targeted Advertising Opt Out page for more information on how to exercise this right. 
• Appeal a Refusal to Take Action: Colorado law requires that we establish a process for a consumer to appeal our refusal to take action on certain requests. You may access that process on our Appeals information page. If you are not satisfied with the outcome of that process, you may contact the Colorado Attorney General to submit a complaint.
• Other Options not Relevant: We do not use data about you for the purpose of profiling to make decisions that would have legal or similarly significant effects on you. We do not knowingly process “sensitive data” concerning Colorado residents, as defined under Colorado law, unless required as a matter of law.

Connecticut Residents

• Opt Out of Targeted Advertising: You have the right to opt out of “Targeted Advertising.” See our Targeted Advertising Opt Out page for more information on how to exercise this right. 
• Appeal a Refusal to Take Action: Connecticut law requires that we establish a process for a consumer to appeal our refusal to take action on certain requests. You may access that process on our Appeals information page. If you are not satisfied with the outcome of that process, you may contact the Connecticut Attorney General to submit a complaint.
• Other Options not Relevant: We do not knowingly process “sensitive data” concerning Connecticut residents, as defined under Connecticut law, unless required as a matter of law.

Delaware Residents

• Specific Third Parties: You have the right to a list of specific “third parties” to which we have disclosed any personal information. We will include this list in the report we provide in response to an access request.
• Opt Out of Targeted Advertising: You have the right to opt out of “Targeted Advertising.” See our Targeted Advertising Opt Out page for more information on how to exercise this right. 
• Appeal a Refusal to Take Action: Delaware law requires that we establish a process for a consumer to appeal our refusal to take action on certain requests. You may access that process on our Appeals information page. If you are not satisfied with the outcome of that process, you may contact the Delaware Attorney General to submit a complaint.
• Other Options not Relevant: We do not knowingly process “sensitive data” concerning Delaware residents, as defined under Delaware law, unless required as a matter of law.

Iowa Residents

• Opt Out of Targeted Advertising: You have the right to opt out of “Targeted Advertising.” See our Targeted Advertising Opt Out page for more information on how to exercise this right.
• Appeal a Refusal to Take Action: Iowa law requires that we establish a process for a consumer to appeal our refusal to take action on certain requests. You may access that process on our Appeals information page. If you are not satisfied with the outcome of that process, you may contact the Iowa Attorney General to submit a complaint.
• Other Options Not Relevant: We do not knowingly process “sensitive data” concerning Iowa residents, as defined under Iowa law, unless required as a matter of law.

Montana Residents

• Opt Out of Targeted Advertising: You have the right to opt out of “Targeted Advertising.” See our Targeted Advertising Opt Out page for more information on how to exercise this right.
• Appeal a Refusal to Take Action: Montana law requires that we establish a process for a consumer to appeal our refusal to take action on certain requests. You may access that process on our Appeals information page. If you are not satisfied with the outcome of that process, you may contact the Montana Attorney General to submit a complaint.
• Other Options Not Relevant: We do not knowingly process “sensitive data” concerning Montana residents, as defined under Montana law, unless required as a matter of law.

Nebraska Residents

• Opt Out of Targeted Advertising: You have the right to opt out of “Targeted Advertising.” See our Targeted Advertising Opt Out page for more information on how to exercise this right.
• Appeal a Refusal to Take Action: Nebraska law requires that we establish a process for a consumer to appeal our refusal to take action on certain requests. You may access that process on our Appeals information page. If you are not satisfied with the outcome of that process, you may contact the Nebraska Attorney General to submit a complaint.
• Other Options Not Relevant: We do not knowingly process “sensitive data” concerning Nebraska residents, as defined under Nebraska law, unless required as a matter of law.

New Hampshire Residents

• Opt Out of Targeted Advertising: You have the right to opt out of “Targeted Advertising.” See our Targeted Advertising Opt Out page for more information on how to exercise this right.
• Appeal a Refusal to Take Action: New Hampshire law requires that we establish a process for a consumer to appeal our refusal to take action on certain requests. You may access that process on our Appeals information page. If you are not satisfied with the outcome of that process, you may contact the New Hampshire Attorney General to submit a complaint.
• Other Options Not Relevant: We do not knowingly process “sensitive data” concerning New Hampshire residents, as defined under New Hampshire law, unless required as a matter of law.

New Jersey Residents

• Opt Out of Targeted Advertising: You have the right to opt out of “Targeted Advertising.” See our Targeted Advertising Opt Out page for more information on how to exercise this right.
• Appeal a Refusal to Take Action: New Jersey law requires that we establish a process for a consumer to appeal our refusal to take action on certain requests. You may access that process on our Appeals information page. If you are not satisfied with the outcome of that process, you may contact the New Jersey Attorney General to submit a complaint.
• Other Options Not Relevant: We do not knowingly process personal data for the purposes of “profiling” or “sensitive data” concerning New Jersey residents, as defined under New Jersey law, unless required as a matter of law.

Oregon Residents

• Specific Third Parties: You have the right to a list of specific “third parties” to which we have disclosed any personal information. We will include this list in the report we provide in response to an access request.
  
• Opt Out of Targeted Advertising: You have the right to opt out of “Targeted Advertising.” See our Targeted Advertising Opt Out page for more information on how to exercise this right.
• Appeal a Refusal to Take Action: Oregon law requires that we establish a process for a consumer to appeal our refusal to take action on certain requests. You may access that process on our Appeals information page. If you are not satisfied with the outcome of that process, you may contact the Oregon Attorney General to submit a complaint.
• Other Options not Relevant. We do not knowingly process “sensitive data” concerning Oregon residents, as defined under Oregon law, unless required as a matter of law. 

Texas Residents

• Opt Out of Targeted Advertising: You have the right to opt out of “Targeted Advertising.” See our Targeted Advertising Opt Out page for more information on how to exercise this right.
• Appeal a Refusal to Take Action: Texas law requires that we establish a process for a consumer to appeal our refusal to take action on certain requests. You may access that process on our Appeals information page. If you are not satisfied with the outcome of that process, you may contact the Texas Attorney General to submit a complaint.
• Other Options not Relevant. We do not knowingly process “sensitive data” concerning Texas residents, as defined under Texas law, unless required as a matter of law. 

Utah Residents

• Opt Out of Targeted Advertising: You have the right to opt out of “Targeted Advertising.” See our Targeted Advertising Opt Out page for more information on how to exercise this right.
• Other Options not Relevant. We do not sell personal information as “sale” is defined under Utah law. We do not knowingly process “sensitive data” concerning Utah residents, as defined under Utah law, unless required as a matter of law.

Virginia Residents

• Opt Out of Targeted Advertising: You have the right to opt out of “Targeted Advertising.” See our Targeted Advertising Opt Out page for more information on how to exercise this right. 
• Appeal a Refusal to Take Action: Virginia law requires that we establish a process for a consumer to appeal our refusal to take action on certain requests. You may access that process on our Appeals information page. If you are not satisfied with the outcome of that process, you may contact the Virginia Attorney General to submit a complaint.
• Other Options not Relevant. We do not sell personal information as “sale” is defined under Virginia law. We do not knowingly process “sensitive data” concerning Virginia residents, as defined under Virginia law, unless required as a matter of law.

Verifying Requests
To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to personal information about you or complying with your request. If you have an account with us, we may verify your identity by requiring you to sign in to your account. If you request access to or deletion of personal information and do not sign in to an account with us, we require you to provide the following information: name, email address, phone number, and postal address. In addition, if you do not have an account and you ask us to provide you with specific pieces of personal information, we reserve the option to require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request. If you designate an authorized agent to make a request on your behalf for which verification is required, we may (1) require you to provide the authorized agent written permission to do so, and (2) require you to verify your own identity directly with us (as described above).

The My Best Buy® Program (the “Program”) is Best Buy’s loyalty program that offers Program members (“Members”) certain benefits. To participate in the Program, you must provide your full name, email address, postal address, and phone number. The following categories of personal information are implicated based on your participation in the Program:

• Commercial information, including records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
• Internet and Other Electronic Network Activity Information: including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications, or advertisements
• Identifiers (Online): a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; other forms of persistent or probabilistic identifiers, and Internet Protocol address
• Inferences drawn from any of the above (e.g., preferences or characteristics)

We use personal information to identify you as a member of the program and provide you with relevant messaging, benefits, and incentives. These benefits and incentives are reasonably related to the value of the data you provide.

Subject to certain restrictions, Members who use their My Best Buy Credit Card or My Best Buy Visa® Card on eligible transactions may receive points on qualifying purchases. My Best Buy Credit Cardmembers may redeem points toward the issuance of reward certificates after receiving a specified number of points, or they may also use points with certain Best Buy Partners. Members who do not have a My Best Buy Credit Card may be eligible to receive promotional certificates. Members may receive additional benefits identified by Best Buy, as updated from time to time, with a current summary available by visiting My Best Buy Terms.

Member purchases of certain products and services may be eligible for discounts or reduced member pricing at Best Buy retail stores, on BestBuy.com, and the Best Buy mobile app (“Member Pricing”). Member Pricing will be limited-time offers and subject to offer limitations communicated by us. Specific details on earning points, rewards, and Member Pricing can be found at My Best Buy Terms.

You may enroll in the Program on our website, through our mobile app, or at a Best Buy retail location. You may cancel your Member Account at any time by calling 1-888-BEST BUY (1-888-237-8289). See the My Best Buy Terms for additional information regarding membership cancellation.

If you choose to exercise any of your rights, you have the right not to receive, and will not receive, discriminatory treatment by us. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request. Employees and contractors are provided notice via different statements.

This Statement is available in alternative formats upon request. Please contact [email protected] or 1-888-BEST BUY (1-888-237-8289) to request this Statement in an alternative format.