Nordstrom Privacy Policy

Using your personal information to provide you with the service you expect from Nordstrom.

At Nordstrom our customers are at the heart of what we do; we want to provide products and services that help each of our customers feel good and look their best, and this extends to our customers having confidence in how we handle their personal information. We take the trust you place in us very seriously, no matter whether you share personal information with us when visiting or making a purchase at our stores, reaching out to us by phone or email, using our websites ("Websites"), or our mobile applications ("Apps"). Within this policy, we will refer to the Websites, Apps, in-store activities, and communications with us collectively as the "Services." The goal of this Privacy Policy ("Policy") is to explain how Nordstrom, Inc., including our affiliates, subsidiaries, and family of brands (Nordstrom and Nordstrom Rack) (collectively, "Nordstrom", "we" or "us"), collect and use your personal information, who we disclose it to and when, and the tools and options available to you to manage that information.

This Policy applies to Nordstrom Services, and any sites, mobile apps or products that display or link to this Policy. It does not apply to any website, mobile app, service, or product that does not display or link to this Policy or that contains its own privacy policy. If you are the holder of a Nordstrom branded credit or debit card, please also review the Nordstrom Debit Card Privacy Notice and Nordstrom Credit Card Privacy Notice for more information about how Nordstrom Card Services and our banking partner use personal information associated with your Nordstrom branded credit or debit card.

What personal information we collect

The following are the categories of personal information we may collect and the period of time we retain personal information for each category:

Category of personal information we collect

Identifiers

Identifiers, such as your name, alias, phone number, mailing and email addresses, government-issued ID number, IP address, account name or other similar identifiers, account credentials, address book entries, birth date, and ZIP code.

How long we retain it

For as long as you remain a customer plus as long as necessary for legal reasons or to protect our interests.

Commercial information

Commercial information, including purchase and related transaction information, such as your Nordstrom account log-in credentials and password, payment method(s) (debit or credit card number), items purchased, items altered or custom made (including measurements), order status, information about wish list items, items in your online shopping bag or those saved for future purchase, items in your registry, product review information, gift card and Nordstrom Note information, preferred product sizes, brands you tell us you love and other merchandise interests, your status as a Nordy Club member, income range, and related information.

How long we retain it

For as long as you remain a customer plus as long as necessary for legal reasons or to protect our interests.

Information you share during communications and interactions with us

Information you share during communications and interactions with us, which may include the content of email messages, chat sessions, text messages, and phone calls.

How long we retain it

For as long as we need the information to provide service to you.

Demographic information

Demographic information, which may include age or birth date, gender, ZIP code, your status as a Nordy Club member, and other information about you.

How long we retain it

For as long as you remain a Nordstrom customer plus as long as necessary for legal reasons or to protect our interests.

Audio and visual information

Audio and visual information, such as video recordings of you when you visit one of our stores or call recordings when you call our Customer Care team.

How long we retain it

One year or longer as necessary for legal reasons or to protect our interests.

Location or geolocation information

Location or geolocation information, including device location information when using our Apps (if your device settings permit us to collect this information).

How long we retain it

One year or longer as necessary for legal reasons or to protect our interests.

Internet or other electronic network activity information

Internet or other electronic network activity information, including internet browsing information, unique device identifiers, cookie identifiers, device and browser settings and information, interaction with our Website, Apps or an advertisement, and Internet service provider information. We may also collect information about when and how you access and use our Websites and Apps, such as the date and time of your visit or use, the websites visited before and after visiting our Websites, how you navigate and what you search for on the Websites or Apps, the pages visited on the Websites, items you view, and the items you purchase.

How long we retain it

For as long as you remain a customer plus as long as necessary for legal reasons or to protect our interests.

Inferences

Inferences about or derived from any of the information above that may relate to your preferences or other matters.

How long we retain it

For as long as you remain a customer plus as long as necessary for legal reasons or to protect our interests.

Our Site is for individuals who are at least 13 years old

Nordstrom does not knowingly request or collect personal information from anyone younger than 13 years old (or other age required by law) without prior consent from a parent or legal guardian. Please contact [email protected] if you believe your child under age 13 has submitted personal information to Nordstrom without prior parental or legal guardian consent so that we can take steps to delete the information.

How we collect personal information

We collect personal information in various ways, both directly and indirectly. For example, when you send us postal mail, email our customer care team, fill out a form on our Websites, place an order through the Websites or Apps, or provide information to one of our in-store team members, we collect your information directly from you. We may also collect your personal information indirectly through automated means, for example, when you interact with our Websites or use our Apps, we may use technologies to collect information about how you use the Websites or Apps. We may also receive information about you from third parties including from our affiliates and subsidiaries, social media platforms or from our advertising partners.

We collect personal information when you provide it

We may collect personal information directly from you or your device as follows:

• When you register for a Nordstrom account, it is necessary for you to provide personal information that includes your name and email address. You may choose to provide us with additional personal information, including billing, mailing, and shipping addresses, phone number, and a payment method (e.g., credit card). If you make purchases through the Websites or Apps, you will also create a username and password, information that on subsequent visits helps us confirm your identity and makes it easier for you to make purchases on our Websites and Apps.
• If you join our Nordy Club, in addition to the Nordstrom account information you provide (as noted above), we will also need your mobile phone number.
• If you apply for a credit account or to manage an existing credit or debit account, you will need to provide your name, mailing address, email address, and phone number. You will also need to provide other information needed to assess your credit worthiness and verify your identity, such as date of birth, social security number, income, and employer information. This information is necessary for us to process your application, manage your account, and provide you with credit-related services. Please note that if you choose to link your card to another third-party website, they may use your information in different ways and have privacy policies that differ from ours; please refer to their privacy policies to understand how they collect and handle your information and your choices. For additional information about use of your personal information associated with a Nordstrom credit account, please see Nordstrom Credit Card Privacy Notice and Nordstrom Debit Card Privacy Notice.
• When you shop with us, either through the Websites or App, we store your browsing history, what you searched for, including when you use our style personalization tools, what you have saved for later, and when you ask us to notify you about items that go on sale or come back in stock and what you bought (if you make a purchase).
• When you interact with Nordstrom, including with a member of our sales team, visit a store, contact our Customer Care team, participate in a contest or sweepstakes, respond to a survey, engage in a promotional activity, register to attend an event or appointment, or apply for employment (applicants have access to our Careers Privacy Policy, which contains information on our collection and use of applicant and employee data).
• When you sign up to receive emails, including marketing communications.
• When you visit a store, we may collect video recordings and photographs of you that we use for security, to detect and prevent fraud, prevent product loss or damage, report incidents, and for operational purposes.

We collect personal information from third-party sources

To better understand your preferences, operate our business, and provide you with products and services we believe you will love, we may receive your personal information from the following third parties:

• Nordstrom, Inc. and the Nordstrom family of brands and companies you have interacted with.
• Online social networks if you follow Nordstrom, Nordstrom Rack, or any of our brands on social media sites, for example, Facebook, Instagram, Twitter, LinkedIn, TikTok or Pinterest. We may collect personal information when you communicate with us within the social media sites or use functionalities, plugins, widgets, or tools from social media platforms or networks in connection with our Websites (e.g., to log into an account, or to share inspiration, finds, purchases, and other content with your friends and followers on social media) or when you click "Share This" or "Like" buttons. We think it is important to point out that if you make a post on a social media site, such as on Facebook, Instagram, or Pinterest, or identify us in your social media feed by tagging us using a hashtag (#) or "at" (@), your personal information may be publicly available and is subject to the privacy policies of those social media sites. We recommend you review the privacy policies of any third-party sites you visit to understand the data collection and practices of those third parties.
• Third-party service providers that support our business, including companies that help with our marketing efforts, analytics providers, advertising networks and cooperatives, third parties that share information with us about the different devices you use online, reviews you have posted on third-party sites about products we offer, and other third parties that we collaborate or work with.

We collect personal information using automated technologies

Personal information is also collected through automated technologies and shared with us when you visit our Website, use our Apps, open an email, or click on one of our advertisements.

We automatically create website and mobile application log files, which are created when you access our Website and/or Apps. In addition, automated data collection technologies—such as cookies, beacons, tags, software development kits (SDK), and scripts—are used by us to analyze trends, administer the Websites and Apps, and track users' movements around the Websites and Apps. We, and our third-party service providers, also use these technologies to gather demographic information about our user base as individuals and in the aggregate.

A "cookie" is a small text file that is stored on an individual's computer and downloaded to the computer or mobile device when they visit a website. Cookies then send information back to the originating website on each subsequent visit, or to another website that recognizes that same cookie. We use the following types of cookies:

• Essential Cookies are required to make our Websites and Apps function properly and cannot be turned off in our systems. If you block these cookies, portions of our Websites or Apps may not function properly.
• Performance and Functional Cookies allow us to count visits and sources of traffic on our Websites and Apps so we can measure and improve performance and functionality. They help us know which pages of our Websites are most and least popular, which features of the Apps are used most, and how visitors move around the Websites and Apps.
• Targeted Advertising Cookies may be set through our Websites by our advertising partners. They may be used by advertising companies to build a profile of your interests and show you relevant advertisements on other websites. Please see Targeted Advertising in the Your options and legal disclosures section for information about how you can opt out of these cookies.
• Social Media Cookies allow you to share information using social media sharing buttons on social networks like Facebook, LinkedIn, Pinterest, Instagram, or Twitter. This information may then be used by the social media network to deliver targeted advertising to you.

We may combine information collected automatically (as described above) from your interactions with our Services and your activity on third-party sites with other data (including personal information).

If you wish to opt out of allowing certain cookies, you may do so by changing your browser settings so that cookies from our Websites and Apps cannot be set (see Targeted Advertising in the Your options and legal disclosures section below for your options). Please note that if you delete, block, or otherwise restrict cookies, or use a different computer or Internet browser, you will need to renew your cookie management choices.

How we use personal information

We use personal information, including information that we combine from your interactions with our Websites and Apps, in store, your device, or third parties, to conduct our business and to provide you with the best possible products, services, and experiences. We know your personal information is important to you, so we want to be transparent about the purposes for which we use that information. Here the ways we use your personal information:

• To provide you access to the Websites and Apps, including to service your account(s) and memberships, and maintain the security of both.
• To provide you with products and services, including to fulfill your orders, process your payments, and provide you with products and services that we think you will like.
• To respond to or notify you, including when you place an order, initiate text messaging as a Nordstrom credit card holder, obtain information about your credit account (including balance, available credit and other similar information), obtain a QR code in store for same-day purchases, reach out to us with a comment, request or question, enter a contest or sweepstakes, complete a survey, consent to a store team member emailing, texting or calling you about products and services you have asked about or purchased, and to let you know when an order or alteration is ready, to notify you of updates to the App or, when you elect, to let you know an item is back in stock.
• To personalize your experiences with us, including to remember your interests and preferences, customize the products and services we share with you, facilitate interactions with our stylists and store team members, track and categorize your activity and interests on the Websites and Apps, including identifying and linking the different devices you use, and to enrich your experience in our stores, on the Websites and the Apps.
• For marketing and advertising, including to send you marketing and advertising communications tailored to your interests and more general in nature, and to provide you with discounts and rewards.
• To offer you personalized content when you are near our store or store systems, have not disabled location sharing within your device settings, have installed any of our Apps and your device accesses our store Wi-Fi services.
• For analytics, including to understand how you use our Websites and Apps, how you shop with us, the methods, and devices you use to access our Websites and Apps, and to make improvements to our Websites and Apps.
• To manage our Nordy Club loyalty program, including to enroll new members and manage existing loyalty accounts.
• For business purposes, including to operate and improve our business and business activities, for research, to maintain our programs, accounts, and records; to understand your satisfaction with our products and services including the Websites and Apps; to detect and prevent fraud or misuse of our services; and for any other business purpose permitted by law.
• For legal and safety purposes, including to defend or protect us, you, our customers, or third parties, from harm or in legal proceedings; maintain the security of our customers, employees, and property; respond to court orders, lawsuits, subpoenas, and government requests; address legal and regulatory compliance; and notify you of product recalls or safety issues.

Category of personal information we collect

Identifiers

Identifiers, such as your name, alias, phone number, mailing and email addresses, IP address, account name or other similar identifiers, account credentials, address book entries, birth date, and ZIP code.

Purpose

To provide access to the Website and Apps;
To provide products and services;
To respond to or notify you;
To personalize your experiences with us;
For marketing and advertising;
To offer you personalized content;
For analytics;
To manage your participation in Nordy Club (if you are a member);
For business purposes; and
For legal and safety purposes.

Commercial information

Commercial information, including purchase and related transaction information, such as your Nordstrom account log-in credentials and password, payment method(s) (debit or credit card number), items purchased, items altered or custom made (including measurements), order status, information about wish list items, items in your online shopping bag or those saved for future purchase, items in your registry, product review information, gift card and Nordstrom Note information, preferred product sizes, brands you tell us you love and other merchandise interests, your status as a Nordy Club member, income range, and related information.

Purpose

To provide access to the Website and Apps;
To provide products and services;
To respond to or notify you;
To personalize your experiences with us;
For marketing and advertising;
To offer you personalized content;
For analytics;
To manage your participation in Nordy Club (if you are a member);
For business purposes; and
For legal and safety purposes.

Information you share during communications and interactions with us

Information you share during communications and interactions with us, which may include the content of email messages, chat sessions, text messages, and phone calls.

Purpose

To respond to or notify you;
For analytics;
To manage your participation in Nordy Club (if you are a member);
For business purposes; and
For legal and safety purposes.

Demographic information

Demographic information, which may include age or birth date, gender, ZIP code, your status as a Nordy Club member, and other information about you.

Purpose

To provide products and services;
To personalize your experiences with us;
For marketing and advertising;
To offer you personalized content;
For analytics;
To manage your participation in Nordy Club (if you are a member);
For business purposes; and
For legal and safety purposes.

Audio and visual information

Audio and visual information, such as video recordings of you when you visit one of our stores or call recordings when you call our Customer Care team.

Purpose

To provide products and services;
To respond to or notify you;
For analytics;
To manage your participation in Nordy Club (if you are a member);
For business purposes; and
For legal and safety purposes.

Location or geolocation information

Location or geolocation information, including device location information when using our Apps (if your device settings permit us to collect this information).

Purpose

To provide access to the Website and Apps;
To provide products and services;
To personalize your experiences with us;
For marketing and advertising;
To offer you personalized content;
For analytics;
For business purposes; and
For legal and safety purposes.

Internet or other electronic network activity information

Internet or other electronic network activity information, including internet browsing information, unique device identifiers, cookie identifiers, device and browser settings and information, interaction with our Website, Apps or an advertisement, and Internet service provider information. We may also collect information about when and how you access and use our Websites and Apps, such as the date and time of your visit or use, the websites visited before and after visiting our Websites, how you navigate and what you search for on the Websites or Apps, the pages visited on the Websites, items you view, and the items you purchase.

Purpose

To provide access to the Website and Apps;
To provide products and services;
To respond to or notify you;
To personalize your experiences with us;
For marketing and advertising;
To offer you personalized content;
For analytics;
For business purposes; and
For legal and safety purposes.

Inferences

Inferences about or derived from any of the information above that may relate to your preferences or other matters.

Purpose

To personalize your experiences with us;
For marketing and advertising;
To offer you personalized content;
For analytics;
For business purposes; and
For legal and safety purposes.

When we disclose personal information

We may disclose personal information we collect from you to third parties, including service providers, business partners, individuals and other third parties, for various reasons. We may disclose personal information to:

Categories of those we share information with

The Nordstrom family of brands and companies

The Nordstrom family of brands and companies including our affiliates, parents, and subsidiaries.

Categories of personal information we may share

All categories of information referred to in the What personal information we collect section.

Individuals and other companies with whom you ask us to share.

Categories of personal information we may share

Including where you ask us to share your wish list or where you request we accept payment from a third-party payor or financing company.

Marketing and advertising companies and service providers.

Categories of personal information we may share

Identifiers, commercial information, contact preference information, demographic information, location or geolocation information, Internet or other electronic network activity information, and inferences.

Third parties and service providers, delivering products and services directly to you.

Categories of personal information we may share

Identifiers and commercial information.

Service providers helping us better understand our interactions and transactions with you.

Categories of personal information we may share

Identifiers, commercial information, contact preference information, demographic information, location or geolocation information, Internet or other electronic network activity information and inferences.

Service providers addressing online and offline fraud and security.

Categories of personal information we may share

Identifiers, commercial information, demographic information, location or geolocation information and Internet or other electronic network activity information.

Service providers helping us maintain customer accounts and provide customer service.

Categories of personal information we may share

Identifiers, commercial information, contact preference information, demographic information, and location or geolocation information.

Service providers supporting internal research.

Categories of personal information we may share

Identifiers, commercial information, product preference information, demographic information, location or geolocation information, device and Internet browsing information and inferences.

Service providers that verify service quality.

Categories of personal information we may share

Identifiers, commercial information, information you share during communications and interactions with us, and Internet or other electronic network activity information.

Service providers that support our business as allowed by law.

Categories of personal information we may share

All categories of information referred to in the What personal information we collect section.

Financial services providers

Financial services providers, including collection agencies, credit bureaus, our banking partner (TD Bank U.S. N.A.) and payment card association members. We may also share your personal information with other companies, lawyers, credit bureaus, agents, government agencies, and card associations in connection with issues related to fraud, credit, defaults, or debt collection.

Categories of personal information we may share

All categories of information referred to in the What personal information we collect section depending on the circumstance and provider.

Social media platforms and networks

Social media platforms and networks such as Facebook, Twitter, Pinterest, and Instagram, when you choose to use certain features or tools available on our Websites or Apps that enable you to connect to a social media account or to share inspiration, finds, purchases and other content on social media.

Categories of personal information we may share

Contact information, demographic information, location or geolocation information and device information.

Parties to business transactions

Parties to business transactions including those involved in strategic business transactions like mergers, acquisitions, joint ventures, asset sales, reorganizations, divestitures, dissolutions, bankruptcies, liquidations, or other types of strategic business transactions where personal information may be shared, sold, or transferred, and subsequently used by a third party.

Categories of personal information we may share

All categories of information referred to in the What personal information we collect section.

Other third parties

Other third parties not otherwise described above, including service providers who assist us in preventing harm or fraud to us, you, our customers or other third parties; law enforcement, government entities, courts, or other third parties as required or allowed by applicable law, such as for the legal and safety purposes described under the How we use information section. We also may share personal information with third parties upon your request or with your approval, though we may not be able to accommodate all requests.

Categories of personal information we may share

All categories of information referred to in the What personal information we collect section depending on the circumstance and party.

Additional

We may also share aggregated or de-identified information with our affiliates, agents, service providers, business partners or other third parties for their marketing or analytics uses or for any other lawful purpose. This type of information cannot be used to identify you personally.

Note that it is our policy to require that third parties we share your personal information with protect that information consistent with this Policy and applicable law.

Targeted advertising partners

We work with and disclose certain personal information (identifiers, commercial information, contact preference information, demographic information, location or geolocation information, Internet or other electronic network activity information, and inferences) to third-party companies that support our advertising and marketing efforts, including to serve interest-based advertisements across the Internet; track and categorize your activity, interests and device(s) used over time on our Websites and Apps, and on third-party websites and mobile applications. The advertising networks and related providers gather this information to create individual profiles that are disclosed to us, which allows us the ability to match those individual customer profiles with advertisements we believe may be most relevant to a particular customer.

We may also disclose other information at our discretion, including information collected by automated technologies, which may be used by third parties for their own marketing, advertising, and other purposes. Please see the Targeted advertising portion of the Your options and legal disclosures section below for information on the choices you have related to interest-based advertising.

Note that we do not share text messaging originator opt-in data and consent information with any third party for their own use or benefit, or for the use or benefit of another party. Further, it is our policy to require that third parties we share your personal information with protect that information consistent with this Policy and applicable law.

We use third-party analytics providers

We use analytics services, including Google Analytics, to better understand how customers use our Websites and Apps to improve those technologies and optimize your experience and interactions. If you wish to opt out of allowing Google to collect analytics information, please visit Google Analytics Opt-out Browser Add-on.

We may share feedback you provide to us

We are excited when customers want to share feedback with us about the products and services they have purchased and what we offer. If you ask a question about a product, respond to a question about a product or submit an online review, including if you include a photo, please be aware that this feedback may be publicly shared and used by us on the Websites or Apps without compensation or attribution. Please see our Terms and Conditions for more information.

Your options and legal disclosures

We recognize that you want choice not only in the products and services we offer but also in how your personal information is used and shared. We currently offer the following choices and options:

• Viewing your personal information. You can access your name, email address, billing address, shipping addresses, payment methods, transaction information (orders, purchases, and returns), Nordy Club information and email by logging into your account on the Websites and Apps.
• Updating your personal information. You can also correct or update your name, email, billing or shipping addresses, some shopping preferences (such as preferred store location) and payment methods by logging into your account on the Websites. You may also make a request to update your personal information by writing to us at the email or postal mailing address specified in the Contact us section below.
• Targeted advertising, sharing, and sales. You may opt out of the use of information about your browsing activities on our Services to show you ads on other websites and services by adjusting your settings for each device and browser you use with the Websites and within each App you use. To opt out of targeted advertising, sharing, or sales, you must submit a request using our online form and adjust settings for each device and browser you use with the Websites and within each App you use. To adjust settings for Nordstrom and Nordstrom Rack, please go to our opt-out page. Alternatively, you may visit our Services using a legally recognized device or browser-based universal opt-out mechanism such as the Global Privacy Control, which will opt out the sharing of your personal information at a browser level. You may also opt out of targeted advertising by certain companies that participate in third-party industry groups by visiting the Network Advertising Initiative consumer opt-out page. In addition, your device settings may offer you additional privacy settings when using our Apps; please see the device settings for details. Please note that even if you opt out of receiving interest-based advertising, you will still receive advertisements, but they will be more general in nature.
• Email choices. You can opt out of marketing or advertising emails by following the unsubscribe process included in the promotional email you received or by logging into your account and indicating your preference. You may also request to opt out of marketing or advertising emails by contacting us at [email protected]. Please keep in mind that you if you opt out of receiving marketing messages, you will still receive transactional and service-related emails from us (such as emails related to your order, your membership in our Nordy Club, correction of personal information, password reset requests, reminder emails you have requested, updates to our terms and policies and other similar communications essential to your transactions on the Websites or Apps) that may be necessary for us to make the Websites and Apps available to you or respond to your inquiries. For questions about service or transactional emails related to your Nordstrom credit card, please call 1.800.964.1800, and for questions about service or transactional emails related to your Nordy Club membership, please call 1.800.446.4500.
• Direct mail choices. You may opt out of receiving marketing or advertising by direct mail by logging into your account on our Websites and indicating your preference. Alternatively, you can contact us through one of the methods specified in the Contact us section below and provide the name and mailing address that you would like to opt out. Please note that these requests may take up to 8–10 weeks to become effective.
• Telephone choices (calls and texts). You may opt out of receiving text messages by texting "Stop" at the end of any message you receive, or to opt out of marketing or advertising calls, by contacting us through one of the methods specified in the Contact us section below and sharing the phone number that you would like to opt out.
• Mobile location choices. If you use our Apps, you may decline to provide location information through your mobile device settings or any prompt requesting location information. As noted above, we may collect location data (where your device settings allow) when you have installed the Apps and your device is near one of our stores, even if you are not currently using the Apps. You may prevent this by adjusting your mobile device settings to prevent sharing of location information on your device.

Additional rights in specific jurisdictions. For our customers residing in certain U.S. states, state law may grant you additional rights. You, or your legally designated representative, may submit a request to exercise your rights by completing our online form. Completing the form online will allow us to begin working on your request more quickly and efficiently, but we recognize that some customers may have difficulty using the online form or would prefer support from our team to complete it; you can get help by calling 1.877.653.0390. Please see the Identity verification requirement section below for more information on our process for verifying we have received a legally valid request.

Rest assured, Nordstrom will not discriminate or retaliate against you if you elect to exercise any legally available rights as described in this Policy. If you would like an authorized agent to submit a request on your behalf, please send us an email at [email protected] for instructions and additional information we need to respond to a request when submitted by a legally authorized agent.

Identity verification requirement. The law requires that we validate the identity and legal authority associated with certain personal information requests, including for customers residing in states granting additional rights as set out below. As a result, we may require that you take additional steps to validate your identity and legal authority, particularly where you make a request through our online form or in writing (email or postal mail). If you make a request online or through our Customer Care center, we will send a message to the email address you provided in your request and you must validate your request within seven (7) days as instructed in that email. Your request will be considered validated once you have completed the email validation process or submitted additional information as requested. Should you fail to confirm your request within the relevant timeframe and/or fail to provide the additional information requested, your request will be considered unvalidated and closed.

We will provide a response to any personal information request within the timeframe required by law. If we cannot substantively respond to your request in a timely manner, we will notify you and provide the reason for the delay.

Under certain circumstances, we may not be able to fulfill your request, such as when doing so would interfere with our regulatory or legal obligations, where we cannot verify your identity, or if your request involves disproportionate cost or effort. But we will respond to your request within a reasonable time, as required by law, and provide an explanation.

Please see the What personal information we collect and When we disclose personal information sections above for information about the categories of personal information we collect and categories of recipients to which we have disclosed such information over the preceding 12 months.

For our customers residing in states with privacy legislation

Some U.S. state laws (please see the bottom of this Policy for information on which U.S. state laws) require that we provide certain disclosures, including a description of legal rights, to those who reside in those states. If you are a resident of any of these states, and a Nordstrom customer, this section applies in addition to all other applicable rights and information contained in this Policy.

Please see the What personal information we collect and When we disclose personal information sections above for information about the categories of personal information we collect and categories of recipients to which we have disclosed such information over the preceding 12 months.

As a resident of these states, you have the right to request:

• To know whether we are processing your personal information, access to that information and to receive a copy of your personal information.
• That we correct your personal information that is inaccurate.
• That we delete your personal information.
• To opt out of the processing of your personal information for the purposes of providing you with targeted advertising, which may also be considered a "sale" under certain laws.

Please see the Your options and legal disclosures section of this Policy section for additional information on how to exercise these rights.

The rights granted to you under applicable law may provide us with exceptions to fulfilling your request, including where we need to retain the information to fulfill a legal obligation, complete a transaction with you, prevent fraud or any other purpose permitted by law.

Should you wish to appeal a determination we have made with regard to your personal information request, send an email to [email protected] within 14 days of receiving a final response from us. Include "Data Subject Rights Appeal" in the subject line of your email, and provide your name, the original request case number, the email address associated with your request and any relevant information for us to investigate your appeal. We will provide a response to your request for an appeal within a reasonable time and in accordance with applicable law.

The Nordy Club and notice of financial incentive. We provide special offers and benefits to customers participating in our Nordy Club loyalty program. Customers may join online or in store; Nordstrom credit card applicants join The Nordy Club loyalty program as part of the credit card application process. Nordy Club members earn points when they purchase certain products or services. These points convert to Nordstrom Notes that may be applied to future purchases with Nordstrom. Additional information on the Nordy Club, including details on how to earn Nordstrom Notes and other Nordy Club benefits, can be found here. Participation in The Nordy Club is voluntary and Nordy Club members may withdraw from the Nordy Club loyalty program at any time by contacting our customer service team at 1.800.446.4500. The personal information we request from customers when they sign up for The Nordy Club includes their name, email, and phone number, so we can send reward and program-related information (including relevant marketing), and to ensure that purchases are associated with the correct Nordy Club account. A Nordy Club member may also share personal information with us through their Nordstrom or Nordstrom Rack account(s), including username and password, billing, mailing and shipping addresses, phone number and payment method (e.g., credit card) information and brand preferences, or through purchases they make online or in store, for purposes of creating a better online and/or in-store shopping experience. When a Nordy Club member accesses our website or mobile app or makes a purchase, we collect the same personal information as we do from other Nordstrom customers as detailed above in this Policy. We use and disclose any information we collect as part of our loyalty programs as described in this Policy. If you request that we delete any of your personal information that is essential to providing you with the Nordy Club loyalty program, we will not be able to provide you with the benefits of that program (e.g., if you ask us to delete your phone number, we will no longer be able to maintain your loyalty account).

While we do not assign a monetary value to the personal information we collect from Nordy Club members in exchange for the benefits The Nordy Club program offers, we do receive value in the form of customer loyalty and increased purchase engagement. In determining the value to Nordstrom, we considered the revenue generated from activities related to the collection and retention of Nordy Club members' personal information less expenses related to providing The Nordy Club program and benefits offered. This value will vary by member depending on purchases made, where those purchases are made (in store or online), which offers a member takes advantage of, and many other factors.

Do not sell or share my personal information

As described above, we work with certain advertising partners to show ads that are targeted to your interests. These activities may be considered "selling" or "sharing" of your personal information under California law. To opt out of these activities, you must submit a request using our online form and adjust settings for each device and browser you use with the Websites and within each App you use. To adjust settings for Nordstrom and Nordstrom Rack, please go to our opt-out page. Alternatively, you may visit our Services using a legally recognized device or browser-based universal opt-out mechanism such as the Global Privacy Control, which will opt you out of the sale or sharing of your personal information. Please note that we may continue to collect and share personal information about you with other third parties, including to continue providing services to you where sharing of your personal information is for purposes other than targeted advertising and permitted by law. Adjusting your settings using the settings link above will only opt out of any sharing activity on the browser and device you are using for the Nordstrom-branded website (e.g., Nordstrom.com or Nordstromrack.com) you are visiting once you tap the "confirm" button. If you use the Apps, you will also need to opt out under the Your Privacy Rights menu item for each App.

We do not knowingly "sell" or "share" the personal information of consumers under 16 years of age.

Nordstrom does not collect, process or use sensitive personal information to make inferences about you and uses sensitive personal information only as set forth in this Policy and as permitted by applicable law.

California Privacy Rights Request Metrics

The following are metrics reflecting the requests Nordstrom received from all consumers, including California consumers, for the timeframe of January 1, 2024, to December 31, 2024.

*Includes lack of consumer response to identity verification and duplicate requests.
**Excludes opt-out requests received from a browser-based opt-out mechanism such as the Global Privacy Control.

For our customers residing in Canada

Our Canadian customers may make purchases through Borderfree Inc. ("Borderfree"), U.S. Direct E-Commerce Limited ("ESW"), or may shop in one of our stores in the U.S. When you make a purchase through Borderfree or ESW, they will process your personal information to fulfill and deliver your order and share information about your transaction with us. Canadian privacy laws provide specific rights to our customers located in Canada. If you are a Canadian resident and a Nordstrom customer, this section applies in addition to all other applicable rights and information contained in this Policy.

Canadian privacy law provides Canadian residents the right to request access to, correction or deletion of your personal information. To submit a request for access, correction or deletion of your personal information, you may complete our online form or write to us at the email or postal mail address in the Contact us section below.

Identity verification requirement. Before we honor a personal information request from a customer residing in Canada, we validate the identity associated with the request. As a result, we may require that you take additional steps to validate your identity or legal authority, particularly where you make a request through our online form or in writing (email or postal mail). If you make a request to access, correct or delete your personal information, we will send a message to the email address you provided in your request and you must follow the instructions in that email for us to verify your request. We will begin processing your request once you have completed the verification process.

We will provide a response to any personal information request within the timeframe required by law. If we cannot substantively respond to your request in a timely manner, we will notify you and provide the reason for the delay.

Under certain circumstances, we may not be able to fulfill your request, such as when doing so would interfere with our regulatory or legal obligations, where we cannot verify your identity, or if your request involves disproportionate cost or effort. But we will respond to your request within a reasonable time, as required by law, and provide an explanation.

Data location. Your personal information will be transferred to and processed by us and our service providers in the United States of America and other countries or jurisdictions. The laws that apply to the use and protection of personal information in the U.S. or other countries or jurisdictions in which we transfer or process personal information may be different from the laws and protections in your country. We or our third-party service providers may disclose personal information as required or permitted by applicable Canadian, U.S. or other law (which may include lawful access by Canadian, U.S. or other foreign governmental authorities, regulators, courts or law enforcement agencies in the jurisdictions in which we or our service providers operate). For information on our use of service providers outside of Canada, please contact us.

For our customers residing outside the U.S. and Canada

Nordstrom does not market for direct sale to customers in regions outside the United States and Canada, including the European Economic Area (EEA), Switzerland and the United Kingdom (UK). Purchases made through our Websites or Apps that ship to locations outside the United States (including to Canada) are processed by Borderfree or ESW, not Nordstrom. Any personal information associated with those orders will be received by Nordstrom on behalf of Borderfree or ESW. Nordstrom may access personal information controlled by Borderfree or ESW to fulfill orders. If you have questions about Borderfree's privacy practices, please contact Borderfree (borderfree.com). For international orders managed by ESW, please refer to their privacy policy for additional information.

If you provide personal information through the Websites or Apps separate from a purchase, you understand that your personal information will be transferred to and processed in the United States of America and any other country or jurisdiction at our sole discretion. The laws that apply to the use and protection of personal information in the United States or other countries or jurisdictions in which we transfer or process personal information may be different from the laws and protections in your country.

Links to other sites

Links to other websites and services. Our Websites and Apps may provide links to Internet sites, content, or videos (embedded or direct links) maintained by third parties. We are not responsible for the sites, content, or videos available via those links, and we have not reviewed the privacy practices of those third parties. We encourage you to review the privacy practices of any third-party sites you choose to access.

Contact us

If you have questions about this Policy or our privacy practices, please contact us at:

Nordstrom Privacy
c/o VP – Head of Privacy
PO Box 21986
Seattle, WA 98111-3986
[email protected]

If you're not comfortable shopping through the Websites or Apps and would prefer to make your purchase via telephone, just give us a call at 1.888.282.6060. Our Customer Service representatives will be happy to assist you.

Updates to this policy
We may make changes to this Policy from time to time, and we may apply any changes to information previously collected, as permitted by law. Please be sure to check this Policy for updates. Each version of this Policy will be indicated by the last updated date at the top. If we make material changes to this Policy, we will notify you, such as by posting the updated Policy on the Websites or Apps, and/or as otherwise required by applicable law.

U.S. state privacy laws

• California Consumer Privacy Act (CCPA);
• Virginia Consumer Data Protection Act (VCDPA);
• Colorado Privacy Act (CPA);
• Connecticut Act Concerning Personal Data Privacy and Online Monitoring (CTDPA);
• Utah Consumer Privacy Act (UCPA);
• Texas Data Privacy and Security Act (TDPSA);
• Oregon Consumer Privacy Act (OCPA);
• Montana Consumer Data Privacy Act (MTCDPA);
• Delaware Personal Data Privacy Act (DPDPA);
• Iowa Data Protection Act (IDPA);
• Nebraska Data Privacy Act (NDPA);
• New Hampshire Privacy Act (NHPA);
• New Jersey Data Protection Act (NJPDA);
• Minnesota Consumer Data Privacy Act (MCDPA);
• Tennessee Information Protection Act (TIPA); and
• Maryland Online Data Privacy Act (MODPA; effective October 1, 2025).