Recreational Equipment, Inc. Consumer Health Data Privacy Policy

Recreational Equipment, Inc. and our subsidiaries and affiliates (collectively, “REI”) collect and process personal information when you access or use our websites and mobile application, shop in our stores, attend our classes, events, outings, or trips, contact customer support, or otherwise interact with us. Please see our Privacy Policy for more details about our information practices and the privacy rights and choices available to you.
This Consumer Health Data Privacy Policy supplements our general Privacy Policy and applies to personal information that constitutes “Consumer Health Data,” as that term is defined under Washington’s My Health My Data Act and Nevada’s SB 370. We refer to these laws together as the “Consumer Health Data Laws,” and this policy applies only to individuals who are protected by such laws.

We may update this policy from time to time. If we make changes, we will revise the date at the top of the policy. If the changes are material, or if otherwise required by the Consumer Health Data Laws, we will provide you with additional notice of updates, such as by sending you an email or providing a notification via our websites and mobile application.

If you have any questions about this Consumer Health Data Privacy Policy, please contact us at privacy@REI.com.

When you rent equipment from us or register for a class, event, or trip with REI, we collect personal information that could constitute Consumer Health Data, such as physical preparedness, information about mobility/balance issues, height, weight, inseam, shoe size, whether you are pregnant or have any medical conditions, and information about disabilities, allergies, dietary requirements, and prescription medications.

We use Consumer Health Data to provide the products and services you request. We may also use Consumer Health Data to prevent, detect, protect against, investigate, and respond to security incidents and fraudulent or other malicious or illegal conduct and to preserve the integrity and security of our products and services.

We may disclose the categories of Consumer Health Data described above to provide you with the products and services you request. For example, we may disclose Consumer Health Data to service providers and vendors (also known as “processors” under the Consumer Health Data Laws) that need access to such data to perform services on our behalf, such as those that manage our events, trips, and outing registrations, waiver collections, equipment rentals, and storage of any signed waivers and rental agreements.

We may also share Consumer Health Data with third parties, like guides that organize and lead REI classes, events, and trips, but only for the purpose of providing the products and services you request.

REI does not “sell” or otherwise “share” Consumer Health Data, as those terms are defined under the Consumer Health Data Laws.

REI offers a host of privacy rights and choices to our users, which you can review in our Privacy Policy and U.S. State Privacy Notice.

If you are covered by a Consumer Health Data Law, then you have the following additional rights:

• The right to confirm REI’s collection and sharing of Consumer Health Data about you and to access such data, including a list of third parties with whom we have shared Consumer Health Data;
• The right to request that REI delete Consumer Health Data about you; and
• The right to review and make or request changes to Consumer Health Data about you.

In addition, you have the right to opt out of the collection and sharing of Consumer Health Data at any time by contacting us at privacy@REI.com to request that we stop processing your Consumer Health Data.

You may exercise your rights by emailing us at privacy@REI.com. Please note that we may take reasonable steps to verify your identity in connection with the request. If we refuse to act on your request, you may appeal such decision by following the instructions we provide in our response.

Under Consumer Health Data Laws, you may also have the right to withdraw consent for certain uses of Consumer Health Data and to obtain a list of third parties and affiliates to whom your Consumer Health Data has been “sold.” REI does not engage in such activities. If this changes, we will update this policy and provide you appropriate rights.