Privacy Policy
Table of Contents
1. Introduction
2. How We Collect Personal Data
There are specific ways we can collect personal data online, including, but limited to:
- Using cookies: Cookies are pieces of information stored directly on the computer that you are using. Cookies allow us to collect information such as browser type, time spent on the Services, pages visited, language preferences, and other anonymous traffic data.
- Using pixel tags and other similar technologies: Pixel tags (also known as web beacons and clear GIFs) may be used in connection with some Services to, among other things, track the actions of users of the Services (including email recipients), measure the success of our marketing campaigns and compile statistics about usage of the Services and response rates.
- Through Google Analytics and/or Adobe Analytics, which use cookies and other, similar technologies to collect information about use of the Services and report website trends. You can learn about Google’s practices here, and opt out of them by downloading the opt-out browser add-on available here. You can learn about Adobe Analytics’ privacy practices or opt-out of cookies set to facilitate reporting here.
3. Types of Personal Data We May Collect From You
Depending on how you interact with us or our Vendors, we may collect the following information:
- Contact Information, such as your name, shipping and billing addresses, email address, telephone number, or other similar identifiers.
- Biographic and Demographic Information, such as your date of birth, age, gender, and photos.
- Financial and Payment Information, such as your credit card details, bank account number, financial information, and payment preferences.
- Commercial Information, such as records of products purchased, considered, or other purchasing or consuming histories or tendencies.
- Account Information, such as your online account user name and password, profile details you choose to provide, transcripts of customer service chats, and your feedback and reviews.
- Internet Usage Information, such as your browsing history, search history, web-based location, IP address, and any other Internet usage information our Sites may automatically record when you visit.
- Device Information, such as your browser or device model and settings, operating system, device ID, and unique identifiers.
- Audio and Video Information, such as camera footage used for security and fraud/theft prevention in and around our stores, including in our parking lots.
- Customer Support Information, such as the information you may provide when you interact in a live-session with our Customer Care personnel regarding a store purchase or online order. Our Customer Care personnel do not have access to and cannot see your payment information, including credit card number during these live sessions.
- Inferences, such as inferences drawn from any of your personal data collected.
- Other Personal Data you provide, such as the content provided either in your job application or in your communications with us, including interactions with us online, in-person, or on the phone.
4. How We Use, Sell, or Disclose Your Personal Data
| PERSONAL DATA CATEGORIES | PURPOSES FOR COLLECTION AND PROCESSING | THIRD PARTIES TO WHOM PERSONAL DATA IS DISCLOSED FOR NON-TARGETED ADVERTISING PURPOSES | THIRD PARTIES TO WHOM PERSONAL DATA IS DISCLOSED FOR TARGETED ADVERTISING |
|---|---|---|---|
| Identifiers and contact information, including first and last name, email address, phone number, shipping and billing addresses. | To operate, manage, and maintain our business; To provide services on our Sites; To accomplish our business purposes and objectives, including:
| Vendors, such as cloud service providers (including cloud-based customer service and survey tools we use), payment processors, fraud detection service providers, and business partners. Affiliates for purposes of business operations and support. Advertising and analytics providers. | Advertising partners. |
| Biographic and Demographic Information, such as your date of birth, age, gender, and photos. | To operate, manage, and maintain our business; To accomplish our business purposes and objectives, including:
| Vendors, such as cloud service providers (including cloud-based customer service and survey tools we use), payment processors, and business partners. Advertising and analytics providers, including Bridg | Advertising partners, including Bridg |
| Financial and Payment information | To operate, manage, and maintain our business; To provide services on our Sites; to accomplish our business purposes and objectives, including:
| Vendors, such as cloud service providers (including cloud-based customer service and survey tools we use), payment processors, and business partners. Advertising and analytics providers. | Advertising partners. |
| Account Information, such as your online account user name and password, profile details you choose to provide, transcripts of customer service chats, and your feedback and reviews. | To operate, manage, and maintain our business; To provide services on our Sites; To accomplish our business purposes and objectives, including:
| ||
| Internet Usage Information, such as IP address, your browsing history, search history, web-based location, and any other Internet usage information our Sites may automatically record when you visit. | To operate, manage, and maintain our business; To provide services on our Sites; To accomplish our business purposes and objectives, including:
| Vendors, such as cloud service providers (including cloud-based customer service and survey tools we use), payment processors, (including fraud detection services), and business partners. Affiliates for purposes of business operations and support. Advertising and analytics providers. | Advertising partners, including Bridg. |
| Device Information, such as hardware model, device software platform/OS and firmware, mobile carrier, preferred languages, and in some cases, browser type, Internet service provider, referring/exit pages and URLs, and clickstream data. | To operate, manage, and maintain our business; To provide services on our Sites; To accomplish our business purposes and objectives, including:
| Vendors, such as cloud service providers (including cloud-based customer service and survey tools we use), payment processors Advertising and analytics providers. | Advertising partners. |
| Audio and Video Information, such as camera footage used for security and fraud/theft prevention. | To operate, manage, and maintain our business; To accomplish our business purposes and objectives, including:
| None | |
| Customer Support Information, such as the information you may provide when you interact in a live-session with our Customer Care personnel regarding a store purchase or online order. Our Customer Care personnel do not have access to and cannot see your payment information, including credit card number during these live sessions. | To operate, manage, and maintain our business; To provide services on our Sites; To accomplish our business purposes and objectives, including:
| ||
| Profile Inferences, such as inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior and attitudes intelligence, abilities, and/or aptitude. | To accomplish our business purposes and objectives, including:
| Advertising and analytics providers, including Bridg. | Advertising and marketing partners, including Bridg. Identity unification partners |
| Other Personal Data you provide, such as the content provided either in your job application or in your communications with us, including interactions with us online, in-person, or on the phone. | To operate, manage, and maintain our business | None |
- Vendors. We may provide personal data to Vendors who we engage to provide services to us, including payment processors, fraud detection partners, targeted advertising and marketing partners, shipping and logistics partners, identity unification firms and customer analytics or analysis firms.
- Government, regulatory, or law enforcement agencies. We reserve the right to disclose your information to respond to valid information requests from government authorities and judicial requests, to investigate potential fraud, or where otherwise required by law. We may disclose your personal data where we believe the disclosure is necessary or appropriate to comply with regulatory or legal requirements, or to protect the safety, rights, or property of ourselves and others and to exercise, establish, or defend our legal rights.
- In connection with a merger, acquisition, or business transfer. If we sell all or a part of our company, are part of a merger, consolidation, restructuring, sale of company stock, and/or sale of assets or other corporate change, your information may be transferred as part of that transaction.
- At your direction. We may disclose your personal data at your direction or with your consent.
- Collaborators. We may share personal data with collaborators with whom we jointly develop or promote our Sites, including sponsorships and co-branded opportunities and promotions.
- The General Public. We may share personal data with the general public if you choose to share personal data when contributing content to our Sites through forums, blogs, social features, product reviews, or the like.
- Aggregate Data. We may disclose your personal data in an aggregated or non-identifying form or otherwise in a form that cannot reasonably be used to identify you. We will not attempt to re-identify and/or link data we receive in an aggregate or de-identified state to any person, household, or device. Furthermore, Academy is not responsible for the privacy or data security practices of other organizations and has no control over and is not responsible for the accuracy of de-identified and/or anonymous data third parties pass to Academy.
- complete the transaction for which the Personal Data was collected;
- fulfill the terms of a written warranty or product recall;
- continue our ongoing business relationship with you;
- ensure the security and integrity of our Site and services; and
- satisfy any legal or regulatory requirements.
To determine the appropriate retention period for individual categories of Personal Data, we collect, we consider the nature and sensitivity of the information; the potential risk of harm from unauthorized use or disclosure; the purposes for which we process the information; whether we can fulfill those purposes through other means; and applicable legal or regulatory requirements.
5. Children's Privacy
You must be 18 years or older to use our Sites. Our Sites are for a general audience, are not targeted to children, and do not knowingly collect personal data from children under 13 years of age.
6. Links to Third-Party Websites
7. Advertising and Opt-Out Disclosures
8. Information Security
9. Cookies and Similar Technology
You may opt out of targeting cookies here. Please note that if you do not accept cookies, you may experience some inconvenience in your use of the Services. For example, we may not be able to recognize your computer, and you may need to log in every time you visit. You also may not receive advertising or other offers from us that are relevant to your interests and needs.
10. Your Marketing Preferences via Mail, E-mail and Text
- Replying STOP to any text message you receive from us;
- Texting STOP to 22369 – to unsubscribe from marketing, promotional, or cart reminder text messages; and
- Texting STOP to 74840 – to unsubscribe from order confirmation, order update, and shipping confirmation text messages.
11. State Privacy Rights
If you are a resident of another state, we will honor your data privacy rights to the extent the applicable law requires.
| Right to Know If We Process Your Personal Data and Access Personal Data: You may request that we delete the personal data we have collected from you or obtained about you. Please note that, in some instances, we may decline to honor your request or only honor your request in part, where, for example, we are unable to verify your identity or an exception to this right applies. |
| Right to Request the Deletion of Personal Data: You may request that we delete the personal data we have collected from you. Please note that, in some instances, we may decline to honor your request or only honor your request in part, where, for example, we are unable to verify your identity or an exception to this right applies. |
| Right to Opt Out of the Sale or Processing of Personal Data for Targeted Advertising / Profiling: Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, and Virginia residents may direct us to cease processing their personal data for targeted advertising, selling their personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. Utah residents may submit a request to opt out of the processing of their personal data for purposes of targeted advertising or the sale of their personal data. Iowa residents may submit a request to opt out of the sale of their personal data. To opt out of targeted advertising /profiling, please submit the form available here. Opt-out Signal: You may also opt out of the sale or sharing of your personal data by broadcasting an Opt Out Preference Signal, as described in the “Global Privacy Control” section below. |
| Right to Correct Inaccurate Personal Data: If you are a resident of Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, or Virginia, you have a right to request the correction of inaccurate personal data that we may have on file about you. Please note that, in some instances, we may decline to honor your request or only honor your request in part, where, for example, we are unable to verify your identity or an exception to this right applies. |
| Right to Data Portability: You may request a copy of the personal data you previously provided to us in a portable, and, to the extent technically feasible, readily usable format that will allow you to transmit the data to another business. Please note that, in some instances, we may decline to honor your request or only honor your request in part, where, for example, we are unable to verify your identity or an exception to this right applies. |
| Right to List of Third Parties: Residents of Maryland, Minnesota, or Oregon can request a list of the specific third parties to which we have disclosed consumer personal data. If you wish to request a list of specific third parties to which we have disclosed consumer personal data, you may do so by contacting Customer Care |
| Right to Appeal: If you receive a denial of a personal data rights request, you have the right to request an appeal. If you wish to appeal a denied request, you may do so by contacting Customer Care If you are a Texas resident and we deny your appeal, you may submit a complaint to the Texas Attorney General’s office online. |
In order to exercise your rights described above, please contact Customer Care A parent or legal guardian may make a request on behalf of their child. Depending on where you live, you may also submit a request to us through an authorized agent as described in more detail in the “Authorized Agents” section below.
You must provide sufficient information to allow us to reasonably verify you are the person about whom we collected personal data, and you must describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to your request.
When we receive your request: (a) we will acknowledge that we have received it; (b) we will try to match the information you provide in making the request with information we already maintain about you; (c) if required to verify your identity, we may ask you to provide additional information, including personal data, or to log into your existing account with us; and (d) we will consider various factors when determining how to verify your identity, such as the sensitivity and value of the data, the risk of harm, the likelihood of fraud, etc.
We will only use personal data we collect during the verification process for the purpose of verifying your identity. If we are unable to verify your identity as required by applicable laws and regulations, we will decline to comply with your request, and let you know why.
Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, and Texas residents may opt out of the sale or sharing of their personal data by broadcasting an Opt Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.
If you are a resident of Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon and Texas, you may use an authorized agent to exercise certain privacy rights on your behalf. If you choose to use an authorized agent to submit a request on your behalf, you must (a) provide signed permission to that authorized agent to submit requests on your behalf, and (b) verify your identity.
We may deny a request from an authorized agent if we do not have proof that they are authorized by you to act on your behalf.
If you are an authorized agent, please contact Customer Care.
We will try to respond to your request within 45 days. If we require additional time, we will inform you of the reason and any applicable extension period.
Non-Discrimination. We do not discriminate against anyone for exercising any privacy right listed in this Policy.
12. Bona Fide Loyalty Program Disclosure
We offer special offers through Email Sign Up or SMS Sign Up, whereby consumers can use their email address or phone number to sign up for discounts, personalized offers, and access to products from your favorite brands.
Benefits through the TacCrate Rewards Program
We offer special offers if you create a TacCrate account with us. For TacCrate Special Offers and TacCrate Terms and Conditions.
Benefits through the Academy credit card
If you choose to create or maintain a TacCrate account, TacCrate will collect, at a minimum, your name, first name, last name, email and phone number. Date of birth will be optional for certain TacCrate benefits.
If you choose to apply for an TacCrate credit card, TacCrate collects at a minimum, your name, last four digits of your social security number, date of birth, and annual income, mailing address, email address, and phone number.
The purposes for which your opted-in personal data may be used include:
- Sending you marketing communications (which may include text messages or calls placed using autodialer technology), with your consent where required by applicable law;
- Providing you with personalized advertisements, communications, offers, and/or other products or services that we believe may be relevant for you;
- Sending you updates or other information related to the special offers or events you requested to receive; and
- Analytics, statistical analysis, and other research.
- Service providers: to facilitate the delivery of special offers to you and to provide you with the products and services that you have requested. We may also use service providers to assist us with managing, carrying out, and improving our advertising.
- Partners: to provide benefits to you, such as the TacCrate credit card, through our partnership with our partners.
13. Automated License Plate Recognition
In addition to the personal data we collect from you as specified in Section 3, we may use Automated License Plate Recognition (ALPR) technology where not prohibited by law to collect information relating to vehicles present at or near our stores, including our parking lots. We collect, use, and share this information for fraud prevention, security, and assets protection. Access and use of the ALPR technology and information collected is restricted to TacCrate Team Members and/or contractors who are fulfilling one of the specified purposes, including assets protection, investigations, and legal reasons.
14. Updates to this Privacy Policy
We may update this Privacy Policy from time to time. To the extent permitted by law, any changes to this Privacy Policy will be posted to our Sites and will become effective upon posting. Any changes will be effective only on or after the effective date of the change and will not affect any dispute arising prior to the effective date of the change.