How does DXL Enact California Privacy Rights?

NOTICE TO CALIFORNIA RESIDENTS - Your Rights under the California Consumer Privacy Act ("CCPA")
In addition to other rights described in this Privacy Statement, a California resident about whom DXL collects, uses, discloses or sells such individual's personal information to third-parties shall:

• Have the right to know, subject to certain exceptions and our offering you:

o The categories, sources and purposes of any personal information DXL collected about you in the preceding 12 month period;

o The categories of personal information DXL shares with any third-parties for a business or commercial use in the preceding 12 month period and the categories of third parties with whom the information was shared. Sharing personal information in this manner may constitute a "sale" under the CCPA;

o The categories of personal information we disclosed about you for a business purpose and the categories of third parties to whom we disclosed the information; and

o The specific pieces of personal information we collected about you.

• Have the right to request that DXL, and its third-parties, delete your personal information that has been collected or maintained.

• Have the right to not have your personal information sold to third-parties.

• Have the right to correct personal information that we have collected from you which is inaccurate.

• Have the right to the same pricing and service from DXL when you exercise your privacy rights under CCPA.

In the preceding 12 months, we collected, disclosed, or sold the following categories of personal information:

We do not knowingly sell personal information of users under the age of 16.

As described above, we work with certain advertising partners to show ads that are targeted to your interests. These activities may be considered "selling" or "sharing" of your personal information under California law.

Submit a Privacy Rights Request
To exercise your rights under CCPA or another applicable law, you may contact us at 1-855-ShopDXL submit a request via email at privacy@dxlg.com, via online form available here, or by writing to us at DXL, 555 Turnpike Street, Canton MA 02021; Attention: DXL Privacy. You may submit a request on your own behalf, or you may designate an authorized agent to make a request on your behalf. Your authorized agent must submit written proof, such as an affidavit, as evidence of your authorization to submit a request on your behalf.

In order to protect our customer’s personal information, and as required under applicable law, we will verify your identity following receipt of your request. For security purposes, our verification process requires an exact match of at least three data points you provide to us with data points we maintain in our records. Please provide your state of residence and at least three of the following data points when you submit your request:

• First and last name;

• Email address associated with your DXL account;

• Telephone number associated with your DXL account;

• Mailing Address

Upon receipt of your request to: (i) know what personal information DXL collects about you; or (ii) request that DXL delete the personal information it has collected about you. DXL will:

• Confirm receipt of your request within 10 days; and

• Respond to your request within 45 days.