SAKS OFF FIFTH Trunk Show Portal Privacy Policy

1. Scope

This policy applies only to the SAKS OFF FIFTH Trunk Show Portal available through StyleLookup, including store login, line lookup, customer lookup, certificate-related workflows, transactional communications, and related support and security functions.

2. Personal Information We Collect

• Customer information: first name, last name, email address, phone number, mailing address, city, state or province, postal code, country, and customer or certificate account identifiers.
• Transaction and certificate information: style number, UPC, item description, purchase date, sale price, MSRP-related information, store number, store name, certificate number, and related transactional records.
• Portal and session information: login/session data, cookies, tokens, IP address, timestamps, browser or user agent data, and related access-control information.
• Validation and anti-abuse information: address validation results, reCAPTCHA verification information, and related security screening data.
• Uploaded documents: files or images submitted in connection with certificate or service workflows, such as receipts.
• Communications data: support requests and transactional email records related to certificate delivery or support.

3. How We Collect Information

• Directly from authorized store users using the portal.
• From information entered into the portal for customer, item, transaction, and certificate workflows.
• Automatically from portal activity and security controls.
• From related store and operational systems that support the trunk show workflow.

4. How We Use Information

• Authenticate and authorize access to the SAKS OFF FIFTH Trunk Show Portal.
• Provide trunk show product lookup, line lookup, and related store workflow functionality.
• Search for, create, manage, and deliver certificate-related records.
• Validate submitted information, including customer address information where applicable.
• Send requested transactional communications such as certificate emails.
• Maintain portal security, detect misuse, enforce chain/store restrictions, and troubleshoot technical problems.
• Comply with contractual, legal, operational, and risk assessment obligations.

5. No Marketing Use

Personal information collected through the SAKS OFF FIFTH Trunk Show Portal is used only for the limited operational purposes described in this policy and is not used for unrelated advertising or marketing purposes.

6. Cookies, Sessions, and Similar Technologies

The portal uses cookies, secure session technologies, JWTs, and related authentication mechanisms to keep authorized users signed in, maintain security, and enforce access controls. Some functions may not operate properly without these technologies.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information processed through the portal. These safeguards may include secure session handling, route restrictions, access control checks, network or chain-specific restrictions, logging, and monitoring.

No system can guarantee complete security, and residual risk remains.

8. Sharing and Disclosure

• Internal operational access: authorized Effy personnel with a legitimate business need.
• Service providers: providers supporting hosting, authentication, email delivery, validation, security, or technical operations on our behalf.
• Legal and compliance disclosures: where required by law, legal process, audit, investigation, or to protect rights, systems, property, or safety.
• Business workflow support: where necessary to carry out the certificate, support, or trunk show process requested through the portal.

We do not sell personal information collected through this portal.

9. Retention

We retain personal information only for as long as reasonably necessary for trunk show operations, certificate processing, customer service, support, security logging, audit, compliance, and recordkeeping obligations.

10. Third-Party or Infrastructure Services

The portal may rely on third-party or infrastructure services for hosting, authentication, validation, email delivery, or other operational support. Such providers may process limited information as needed to provide their service on our behalf.

11. Changes to This Policy

We may update this policy from time to time. Updated versions will reflect the revised effective date and will apply prospectively unless otherwise required by law.

12. Contact

For questions about this policy, contact Effy / B.H. Multi Com Corp. / Effy Group IT:

• Phone: 212-944-0020