Last updated: May, 2026

Our Privacy Policy explains how Carter’s, Inc. – and our subsidiaries and family of brands, such as Carter’s, OshKosh B’Gosh, and Skip Hop (collectively, “Carter’s,” “we,” “our, and “us”) – collect, use, and process personal information about you. This Privacy Policy applies when you visit or use our websites or mobile applications where this policy is linked or posted (collectively, the “Site”), contact our customer service team, engage with us on social media, communicate with us, apply to work for us, purchase our products or services, or otherwise interact with us (collectively, the “Services”).

This Privacy Policy does not apply to personal information collected in the course of your employment with us. Please see our employee specific policies. This Privacy Policy also does not cover personal information collected by Carter’s Official Retail Partners operating outside the United States, which may maintain their own privacy policies. 

From time to time when visiting our sites, we may show you links to websites and content not affiliated with Carter’s. When you follow those links, this privacy policy will not apply. Specifically, this privacy policy does not cover other companies’ websites or content that we may link to.  We are not responsible for the content or privacy practices of any linked websites or content that we do not control.

This Privacy Policy also explains your choices for managing your information preferences, including opting out of certain uses of your Personal Information (defined below).

BY USING THE SITE OR ANY OF THE SERVICES, OR BY OTHERWISE PROVIDING US WITH YOUR PERSONAL INFORMATION, YOU ARE CONSENTING TO THIS PRIVACY POLICY. PLEASE READ IT CAREFULLY.

Privacy Policy Summary

• Personal Information We Collect

• Sources of Collection

• Purpose of Collection and How We Use Personal Information

• Categories of Third Parties We Share Personal Information With

• Cookies & Other Tracking Technology

• ChatBot Technology

• Other Automated Technology & Profiling

• Managing Your Marketing Preferences

• Managing Your Account Information

• Be Careful When You Share Information with Others

• Information Security

• Links & Third-Party Platforms

• About Our Mobile App

• Using Our In-Store WiFi

• Children’s Personal Information

• Processing Location

• Privacy Rights or Requests

• Notice to United States Residents

• Notice to Residents of the European Economic Area, the United Kingdom and Switzerland

• Notice to Residents of Other Countries

• Privacy Policy Changes

• Contact Us

We collect the following categories and types of “Personal Information”:

• Contact information: Examples include your first and last name, alias or username, mailing address, email address, phone number, and other identifiers or non-public information;

• Other identifying information: Examples include your internet protocol (IP) address, unique personal identifiers, online identifiers, social media usernames, Carter’s account details, passwords and other security information for authentication and access;

• Financial Information: Examples include credit card number, debit card number, bank account information and other financial information;

• Demographic information: Examples include gender, age, employment information, and salary information;

• Professional, Educational and Employment Information: If you apply to work with us, we may collect job application details such as your education and employment history, background check results, resume and references as well as any information on any relevant certificates or licenses.

• Geolocation data: Including your approximate location, inferred from your IP address, or interaction with geotargeted ads, and precise location only if you enable device location tracking in connection with the Services;

• Internet or other electronic activity: Examples include device data and usage information, referral sources, your browsing, search and click history, including information about how you interact with our Site, marketing communications, and ads, information about how you navigate within the Site and the Services and which elements of the Site and the Services you use the most, and ratings and reviews or other content you post on the Site or to the Services;

• Commercial information:  Examples include products or services purchased or viewed on the Site or through the Services;

• Audio and visual information: Examples include your videos and photos (and associated metadata), such as audiovisual content you provide to us, records of customer service calls and chats, and other audio or video recordings initiated by us (e.g., in-store video camera footage); and

• Inferences drawn from the categories described above in order to create a profile about you to reflect your preferences, characteristics, behavior and attitude.

Sensitive Information:  Some of the information listed above is considered “sensitive” Personal Information under some laws, including for example, personal information parents or guardians choose to share about the children they shop for.  Where we collect sensitive Personal Information, we do so either with your consent or because it is necessary to provide the Services to you, process your job application, to fulfil a legal requirement, or to prevent and detect fraud on the Site or through the Services. In some cases, if you fail to provide certain Personal Information when requested, we may be required to suspend your access to the Site and Services or disregard your job application. We do not use or disclose sensitive Personal Information for inferring characteristics or for purposes other than those permitted by law.

Note that if you apply for a Carter’s branded credit card, our banking partner will require certain additional personal information from you, including your birth date and social security number.

We obtain the categories of Personal Information listed above from the following categories of sources:

• We collect information directly from you. We collect contact information, demographic information, sensitive Personal Information, audio and visual information, and financial information directly from you. For example, when you create an account or enroll in the Carter’s Rewards program, make a purchase, participate in one of our contests or promotions, interact with our customer service, engage with our chatbot, interact with us on social media, use our in-store WiFi, or provide a review of our company or products.

• We collect information from you indirectly or passively. We collect other identifying information, geolocation data, device details, internet and other electronic activity from you passively using tools such as cookies and other tracking technologies. This activity is further described in the “Cookies” and “Advertising and Online Tracking” sections below.  We also collect information or images from security cameras in our stores.

• We collect information about you from third parties. We collect personal information about you from other sources, including our vendors, other businesses,  and from other publicly available sources.

  • We collect contact information and other identifying information from social media and public website sources.

  • We collect contact information, other identifying information, commercial information, geolocation data, and internet and electronic activity from Service Providers that collect certain Personal Information from or about you on our behalf, such as analytics software or platforms that we use to measure and analyze traffic to the Site, the Services, or interaction with our ads. For example, our Service Providers capture certain usage data to provide and analyze a “session replay” of your activities on the Site, which allows us to optimize the Site and the Services. The session replay may record, for example, clicks, mouse movements, scrolling, typing, navigation through the Site and the technical specifications of your device.

  • We collect contact information, other identifying information, demographic information, and commercial information from third party data suppliers.

We use your Personal Information for the following categories of use:

Transactional Purposes: We use your contact information, other identifying information, demographic information, sensitive Personal Information, financial information, and commercial information to:

• Receive, process, confirm, send, track or communicate with you regarding your request, order, inquiry or account;  

• Communicate with you about your order or account; and

• To otherwise fulfill or meet the reason you provided the information;
  

Analytical Purposes: We use your other identifying information, internet activity and browsing history, commercial information, demographic information, and geolocation data to analyze preferences, trends and statistics.

Marketing and Promotional Purposes: We use your contact information, commercial information, demographic information, internet or other electronic activity, geolocation data, and inferences to:

• Inform you of our new products, services and offers;
  Provide you with targeted advertising and personalized services and experiences;

• Run contests, promotions and sweepstakes;

• Provide you with our loyalty program including earning points and awarding and redeeming certificates; and

• Provide you with other information from and about Carter’s, including personalized marketing communications.
  

Maintenance and Improvement of the Site and the Services: We use your contact information, commercial information, and internet activity and browsing history to:

• Provide you with the Site and the Services, including to send you alerts about your account and provide the live chat;

• Handle your customer services requests;

• Help us diagnose technical and service problems and administer the Site and the Services;

• Help us to monitor and improve the Site’s and the Services’ performance and to make it easier for you and other users to use and manage features and programs made available through the Site and the Services;

• Help us to better understand the functionality of our mobile applications on your phone;

• To provide support, personalize and develop the Site or the Services;

• For  feature testing, research, analysis, evaluation and product development, including to develop and improve the Site and the Services;

• To help improve the performance, accuracy, and safety of our systems when you use our chatbot or other artificial intelligence tools deployed on the Site or through the Services, including using your Personal Information to train, fine-tune, or evaluate the underlying language models that power such systems; and

• To provide you with support and to respond to your feedback, suggestions, and inquiries, including to investigate complaints and address your concerns about content that violates our policies, or to improve content quality and accuracy, as well as to monitor and improve our responses.

Review and content creation purposes: We use your contact information, commercial information, and audio and visual information to enable reviews of and testimonials about our products and to display content that you have created and allowed us to display on the Site and the Services and on social media. 

Security and Fraud Prevention: We use your contact information, other identifying information, commercial information, financial information, sensitive Personal Information, geolocation data, audiovisual information, internet activity and browsing history, and inferences to:

• Protect the Site, the Services, databases and other technology assets;

• Protect Carter’s and our business;

• Minimize or prevent fraudulent or bot traffic;

• Detect and prevent malicious, deceptive, fraudulent or illegal activity on the Site or the Services;

• Protect the rights, security, and safety of Carter’s personnel and users of the Site and the Services; and

• Respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.

Data collected for purposes of obtaining the one-time passcode will not be shared with third parties or affiliates for marketing purposes.  However, personal data shared with Carter’s or its affiliates for other purposes are subject to the uses, purposes, and practices outlined in the remainder of this Privacy Policy.

Our professional advisors, such as accountants, auditors, consultants, and lawyers, may obtain any personal information we collect when needed to advise us. Another company may receive personal information if we sell, merge, or otherwise dispose of some or all of our assets or business.

We may collect additional Personal Information for other reasonable purposes not stated in this Privacy Policy. If necessary, at the time of collection we will provide you with the relevant details and, if required by law, seek your consent.

We may anonymize, aggregate or otherwise strip any Personal Information or other information we collect of all personally identifying characteristics and may use or share that aggregated, anonymized data with third parties for any purpose we deem appropriate. 

Additional Information for Carter’s Job Applicants. If you apply for a job with Carter’s, we use your contact information, other identifying information, demographic information, audiovisual information, professional, educational and employment information when considering your application. If you do not give us required information, it may adversely affect our ability to assess your application. If you have privacy concerns about the personal information we ask for during the application process, you can contact us at [email protected].

Service Providers

From time to time, we may establish a business relationship with other businesses whom we believe trustworthy and who have confirmed that their privacy practices are consistent with ours (“Service Providers”). For example, we may contract with Service Providers to provide certain services, such as hosting and maintenance, data storage and management, processing financial transactions, security and fraud prevention activities, and marketing and promotions. We only provide our Service Providers with the information necessary for them to perform these services on our behalf. Each Service Provider must agree to use reasonable security procedures and practices as required by law and appropriate to the nature of the information involved, in order to help protect your Personal Information from unauthorized access, use, or disclosure. Service Providers are prohibited from using Personal Information other than as specified by us.

Our Affiliates or Subsidiaries

We may share Personal Information with businesses controlling, controlled by, or under common control with Carter’s, where such affiliates or subsidiaries are acting as our Service Provider, or where required by law.

Third Parties

We may share Personal Information with a third party if you specifically authorize it, or it is required in order to complete a transaction, provide a product feature, service or activity that you initiated or requested. This includes participation in our partner programs. Note: In such case, the collection and processing of your Personal Information may be subject to the privacy policy of such third party.

Cross Contextual Behavioral Advertising

We may share information with third parties in order to provide cross-contextual behavioral advertising. This may include the following categories of Personal Information: other identifying information, geolocation information, commercial information and internet and other electronic activity.

Corporate Transactions

If Carter’s is merged, acquired, or sold, or in the event of a transfer of some or all of our assets, we may disclose or transfer Personal Information in connection with such transaction.

Compliance with Laws and Law Enforcement

We cooperate with government and law enforcement officials and private parties to enforce and comply with the law. We may disclose Personal Information and any other information about you to government or law enforcement officials or private parties if, in our discretion, we believe it is necessary or appropriate in order to respond to legal requests (including court orders and subpoenas), to protect the safety, property, or rights of Carter’s or of any third party, to prevent or stop any illegal, unethical, or legally actionable activity, or to comply with the law.

We use cookies, pixels, web beacons, SDKs, and other tracking technologies (“tracking technologies”) on our websites and mobile apps and in some marketing communications to allow us to better understand your shopping needs and preferences and to personalize your shopping experience by showing you more relevant products.

Cookies
We use cookies (a small text file placed on your computer to identify your computer and web browser). Our Site and Services may employ clear GIFs (a.k.a. web beacons), local shared objects (a.k.a. “flash cookies”), pixels, or other similar technologies, such as tags, as well as smart forms and logging services. We may also use anonymous identifiers (a random string of characters that is used for the same purposes as a cookie).

We use cookies and other similar technologies to analyze use of and improve the Site and the Services and as described in the “Advertising and Online Tracking” section of this Privacy Policy. The data collected may include how you navigate around a web page and the most commonly clicked links on a specific web page.

Most web browsers are initially set up to accept cookies. Your browser may give you the ability to control cookies or other tracking tools. How you do so depends on the type of tool. Certain browsers can be set to reject browser cookies. If you block or reject all cookies, certain features on our Site or Services may not work. If you block or reject all cookies, not all of the tracking described here will stop. Some of our Service Providers may use their own cookies, anonymous identifiers, or other tracking technology in connection with the services they perform on our behalf.

The Site may provide functionality to allow you to set your cookie preferences. This functionality relies on browser cookies to store your preferences. If you subsequently clear or delete your browser's cookies, the record of your cookie preferences will also be deleted, and we will not be able to honor your request until you update your preferences again.

We use third-party data analytics tools to analyze how users use the Site and Services. For example, we use Google Analytics to provide statistics and analytical tools to analyze how users use the Site. For more information on how Google Analytics uses data, visit www.google.com/policies/privacy/partners/. To opt out of having your information used by Google Analytics, visit https://tools.google.com/dlpage/gaoptout/.

Options you make are browser, device and domain specific which means that cookie preferences you select and save for this domain will not apply across other Carter’s or related websites.

Advertising and Online Tracking
We may place advertisements and allow third-party companies to serve ads and collect certain information when you visit the Site or use the Services. These companies may use certain information (e.g., click stream information, web browser type, time and date, subject of advertisements clicked or scrolled over) during your visits to the Site and other websites in order to provide advertisements about goods and services likely to be of interest to you (i.e., for cross-contextual behavioral advertising). These companies may also collect information about your activities on our Site on your current device and combine it with information about your activities on other websites, mobile applications, and devices. These companies typically collect such information using server logs, cookies, web beacons, tags, pixels, mobile advertising IDs (such as Facebook cookies or Google's Advertising ID), cross-device linking, and similar technologies. They may match your browsers or devices if you log into the same online service on multiple devices or if your devices share similar attributes that support an inference that they are used by the same person or household. This means that information about your activity on websites or applications on your current browser or device may be combined and used with information collected from your other browsers or devices. These third-party partners use this information for our and their own advertising, analytics, attribution, and reporting purposes. Our systems do not recognize browser “Do Not Track” signals, but several of our Service Providers who utilize these cookies on the Site enable you to opt out of targeted advertising practices.

To learn more about these advertising practices or to opt out of this type of advertising, you can visit www.networkadvertising.org or www.aboutads.info/choices/. Please note, however, that managing these preferences will not turn off internet advertisements in general. You will still receive the same number of advertisements, but those advertisements will be less reflective of your interests, as indicated by your web browsing habits. In addition, please note that the opt-out preferences that you set using these tools may be nullified if you delete your cookies after setting them, and we will not be able to honor your request until you update your preferences again.

We also use the Meta Pixel on our Site for marketing and analytics purposes, and you can learn more about this pixel by reading Meta’s privacy information here. If you do not want the Meta Pixel to track your interactions with our Site, you can disable Cookies for targeted advertising by managing your Cookie settings as described in this section. 

Some browsers or browser extensions also allow you to tell websites not to share your information for cross-contextual behavioral advertising through the “global privacy control” signal. We will respond to this signal in a frictionless manner. If you configure this setting on your browser, certain features on our site may not work and you will receive less targeted advertising.--

Options you make are device specific, which means that cookie preferences you select and save for this domain will not apply across other Carter’s or related websites.

Residents of some jurisdictions (e.g., California, Virginia, Colorado, Montana) have the ability to opt out of cross-contextual behavioral advertising through other means. Please see the “Right to Opt-out of Sale or Sharing” section below.

Session Replay Technology
We use session replay technology on our Site. Session replay technology, also referred to as session playback or user experience (UX) replay, collects information regarding, records, and tracks your interactions with a website or application. It then transforms those logged user events (such as mouse movements, clicks, page visits, scrolling, tapping, etc.) into a reproduction of what you actually did on the website or application. We use session replays for quality control, customer service, fraud prevention and security, and marketing purposes. Our session replay technology is owned and operated by a third-party who acts as our service provider. The information collected by this technology may be collected by, transferred to, and stored by our third-party service provider.

We use chatbots to help provide customer service and support, including through the use of a virtual assistant. A chatbot is a software application that mimics human conversations in text or voice interactions on our website or through our customer service hotline. It enables the communication between a human and a machine, which can take the form of messages or voice commands. The chatbot is designed to work without the assistance of a human operator. It responds to questions posed to it in natural language as if it were a real person using a combination of pre-programmed scripts and machine learning algorithms. When asked a question, the chatbot will answer using the knowledge database that is currently available to it. If the conversation introduces a concept it is not programmed to understand; it will pass it to a human operator. If you use our chatbot service, we will collect any Personal Information you provide to us. We will also create and store a transcript of your chat interaction with us which will be shared with and stored by our third-party service provider. We use these transcripts and the information you provide for quality control, customer service, fraud prevention and security.

We may use automated technologies, including automated decision-making and profiling, in connection with your use of the Site and our Services. “Automated decision-making” refers to decisions made in whole or in part using technology without human involvement, and “profiling” involves automated processing of Personal Information to evaluate or predict personal aspects such as your preferences, interests, behavior, or location.

These technologies may be used for a variety of purposes, including analyzing your interactions with our Site and Services, delivering personalized content or product recommendations, and tailoring marketing communications based on your previous internet activity. For example, we may use cookie-based or digital advertising profiling to better understand your interests and present you with more relevant advertising.

We may also use profiling in connection with evaluating eligibility for certain financial products and services, such as our Carter’s branded credit card. In those instances, profiling helps us with fraud prevention, security, and legal compliance. This type of profiling is not solely automated and may involve human review.

In some cases, we or our third-party service providers or partners may use profiling and automated decision-making to send or display content based on your profile and usage patterns.

Under most privacy laws you have the right to object at any time to the use of automated decision making or profiling. Please refer to the jurisdiction-specific section of this Privacy Policy for more information about your rights related to automated decision-making and profiling under applicable law.

Once you have opted in to receive our marketing emails, you can opt out of receiving marketing e-mails from us by following the “Unsubscribe” link provided at the bottom of all marketing e-mails you receive from us. You are able to opt out of receiving marketing e-mails from us, however, if you continue to use our services, we will still need to email you from time to time about your account.

If you register with us and create an account, you can review and change the Personal Information in your account at any time. You can do this by signing into your account and editing your Personal Information using the “Settings” link. Personal Information you may have provided about your children can be updated or deleted using the “Kids” link.

Please be aware that whenever you share information on any public area of the Site or the Services, that information may be accessed by others. In addition, please remember that when you share information in any other communications with third parties, that information may be passed along or made public by others. This means that anyone with access to such information can potentially use it for any purpose, including sending unsolicited communications. We cannot control and are not responsible for what such third parties may do with your information, so you should exercise caution when choosing to share it

We maintain recognized safeguards to help protect the confidentiality and security of your personal information. However, no data transmission over the Internet or other network can be guaranteed to be 100% secure, and no security measures can provide absolute protection. As a result, while we strive to protect information transmitted on or through the Site or the Services, we cannot and do not guarantee the security of any information you transmit on or through the Site or the Services or that you otherwise provide to us, and you do so at your own risk.

The Site and the Services may contain links to other websites or allow others to send you such links. A link to a third party’s website does not mean that we endorse it or that we are affiliated with it. We do not exercise control over third-party websites and are not responsible for their practices. You access such third-party websites or content at your own risk. You should always read the privacy policy of a third-party website before providing any information to the website.

We collect information about you when you download and use our mobile apps. The type of information we collect will vary depending on how you use our mobile apps and the settings you enable.

When you share location information with us, you can get our nearby store suggestions as well as customized notices, offers, and coupons. You can also choose to get push notifications from us on your device. To stop getting push notifications or sharing your location information, you will need to change your device settings. We do not control these.

If you no longer wish to provide us with personal information through our mobile app, please uninstall our app from your device. Note that uninstalling the app will not automatically delete your user account or personal information we previously collected via the app. Deleting the app will not affect our information collection on the website. To delete your personal information, please follow the instructions in the “Your Privacy Rights and How to Exercise Them” section below.

Choices you make regarding your privacy preferences may not be synchronized between the mobile app and the website or between your devices and browsers. If you install our mobile app on different devices, you will need to separately control your app permissions on each device.

By connecting to our in-store WiFi, you agree to share some personal information with Carter’s, such as your MAC address, email address, and IP address, under the terms of use of our third-party WiFi provider. We may also get information about what you do on our network, such as the domains or apps you access or use while using the WiFi service in our stores. If you prefer not to share this information with us, please do not connect to our in-store WiFi.

The Site and the Services are intended for and directed to users who are 16 years old or older. We do not knowingly collect Personal Information from children under the age of 16. If we become aware that we have inadvertently received Personal Information from a child, we will delete such information from our records.

If you are a parent or legal guardian, you can choose to give us personal information about your children, such as by providing family information in your Carter’s account.  You must be the parent or legal guardian of any child whose personal information you give us. If you are not, do not give us any child’s personal information.

California users under the age of 18 may request the removal of their content or information publicly posted on the Site or Services by e-mailing us at  [email protected].

Please be aware that your Personal Information and communications may be transferred to and maintained on servers or databases located outside your state, province, or country.  Although we will make all reasonable efforts to ensure your Personal Information is protected in accordance with our obligations, the laws in these other countries may not be as protective of your privacy as those in your location. Personal information processed and stored in another country may be subject to disclosure or access requests by the governments, courts or law enforcement or regulatory agencies in that country according to its laws. By using the Site or Services, you are agreeing to the collection, use, transfer, and disclosure of your Personal Information and communications will be governed by the applicable laws in the United States and/or the applicable country of processing. If you have any questions regarding international data transfers, you may contact us using the contact information we provide below.

Unless otherwise noted in this policy, we allow all users of this Site and Services to submit verifiable requests with respect to their privacy or management of their personal information using Carter’s Privacy Portal.   Certain rights may be offered based on your location.  Data privacy rights are not absolute. In some situations, we may not be able to process your request. This may include if a legal exception applies. You will not be discriminated against for exercising a privacy right or submitting a request. If you disagree with our decision you can contact us or appeal the decision as described below.

Your verifiable request must:

• Provide sufficient identifying information (including full name, postal address, and email address) to allow us to reasonably verify you are the person about whom we collected and retained Personal Information, and/or your authority to make such request on behalf of the data subject, and

• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

Note that we will only use Personal Information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request or to review and comply with the request.

You may authorize someone to act as your agent and submit a request on your behalf. Due to the sensitivity of such requests, you must verify the agent’s authorization before we will act. Accordingly:

• You or your agent must supply proof that the agent is registered with the Secretary of State to act on your behalf; or

• You or your agent must supply other written permission for a specific agent to act on your behalf, and will use your email address to connect directly with you to verify agent identity and authority.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm with a level of confidence appropriate to the sensitivity of the information that the Personal Information we have collected and retained in our systems and databases relates to you.

Making a verifiable consumer request does not require you to create an account with us.

If you cannot access our Data Privacy Portal or want to contact us a different way, you can also send us an email at [email protected], call us toll-free in the United States at 888-782-9548, or use any other methods provided in the “Contact Us” section at the end of this policy.

Please note that if we delete your Personal Information, some of our services will not work the same. For example, your previous opt-out requests will not be saved, and saved preferences and information will no longer be available.  If you ask us to delete your account, any loyalty rewards or points connected with your account will be deleted as well.

Residents of California or jurisdictions with similar laws (e.g., Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia) have certain specified data privacy rights under the applicable privacy laws in such states (“State Privacy Law(s)”). If you are a resident of a state that has a State Privacy Law, in addition to the rest of this policy, this section applies to you.

 These specified data privacy rights are:

 Confirmation and Access: You have the right to request confirmation of whether we are processing your Personal Information (also referred to as “personal data” under certain State Privacy Laws), and to access such information. This includes the right to obtain:

• The categories and specific pieces of Personal Information we have collected, used, disclosed, shared or sold about you;

• The categories of sources from which we collected your Personal Information;

• The purposes for which we collected, used, disclosed or sold your Personal Information;

• The categories of third parties to whom we have disclosed, shared or sold the Personal Information and (where required) the specific third parties to whom such disclosures or sales were made; and

• (Where applicable) information about any Profiling or automated decision-making processes that affect you.

 Portability: You may request a copy of the Personal Information we have collected and maintain about you.

 Deletion: You can request to have us delete your Personal Information; and

 Correction: You can ask us to fix or update your Personal Information if it is inaccurate, incomplete, or outdated.

 We will also maintain a record of your rights requests.

Right to Opt-out of the Sale or Sharing of Personal Information  

Residents of certain US jurisdictions (including those set forth above) have the right to opt out of the “sale” or “sharing” of their Personal Information, as such terms are defined under State Privacy Laws.

As discussed above, we share personal information with our advertising and marketing partners for targeted advertising and with other business partners for their and our benefit, such as digital advertising networks and data co-ops to deliver advertising that is tailored to your interests. Some states call these actions a “sale” of personal information.  

We may “sell” and/or “share” the following categories of Personal Information:

• Contact Information;

• Online identifiers;

• Geolocation information;

• Internet/electronic activity; and

• Commercial information;

You can opt-out of the “sale” or sharing of your information, or being tracked by or otherwise having your Personal Information disclosed to these third parties in this manner by clicking the “DO NOT SELL OR SHARE MY PERSONAL INFORMATION” link (the “DNS Link”) at the bottom of our Site, or in the menu of the mobile application you are using, and selecting your preferences.

Once you click on the DNS Link, you will be directed to take certain actions to effectuate your opt-out for each online and offline disclosure. Note that, even when you opt-out of targeted advertising, you will still see online ads, including ours, but the ads you see are less likely to be relevant to your interests.

Please note that your opt-out preferences for online tracking (e.g., cookies and other tracking technologies) are website/device specific, so you will need to opt out on each mobile application and Site.

You can also opt-out of online tracking by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). Note that we will only apply the request to that specific device or browser and only for cookie or pixel-based selling and sharing. Thus, you will need to opt-out on each browser and device where you use our services. If you clear your cookie history on a particular browser or device, your opt-out request will no longer be saved.

For clarity, broadcasting a GPC signal or using the functionality available on the Site to adjust your device cookies will not fully effectuate an opt-out for all offline sales of Personal Information. To do so, please complete all applicable steps available when you click the DNS Link.

Again, to learn more about these advertising practices, please visit https://optout.aboutads.info/ and https://www.networkadvertising.org/ to optout. You can also opt out of the re-sale of your Personal Information by other participants in these digital advertising networks by visiting https://www.iabprivacy.com/optout.html and opting out of each participant’s digital property.

Right to Opt-out of Profiling

Residents of some jurisdictions (e.g., California, Colorado, Connecticut, Oregon, Montana, Texas, Virginia) –subject to certain exceptions—may have a right to opt out of forms of automated processing performed on Personal Information to evaluate, analyze or predict personal aspects related to your economic situation, health, personal preferences, interests, reliability, behavior, location or movements (“Profiling”).

We engage in cookie-based or digital advertising-based Profiling. To opt out of this practice, please follow the instructions detailed above regarding opting out of the sale or sharing of your Personal Information.

We also engage in Profiling when evaluating individuals for our financial products and services, such as the Carter’s branded credit card. The purpose of this Profiling is for security and fraud prevention, and to comply with law. This type of Profiling is not solely automated. Due to the nature and purpose of this Profiling, to the extent you chose to apply for or use Carter’s’s financial products and services, you do not have an option to opt-out of this practice.

We may also engage in Profiling when we assess your interaction with the Site and our Services for the purpose of providing you information on additional products and services which may be of interest to you. Note, you can opt out of marketing emails as explained in the “Managing Your Marketing Preferences” section above.

We do not otherwise engage in Profiling.

Right to Limit Disclosure of Sensitive Personal Information

Residents of some jurisdictions (e.g., California) have a right to limit the processing of their sensitive Personal Information (as defined by the applicable State Privacy law). We do not collect or process sensitive Personal Information for inferring characteristics or use or disclose sensitive Personal Information for purposes other than those permitted by law and we do not sell sensitive Personal Information.

Right to Appeal

Residents of some jurisdictions (e.g., Texas, Virginia, Montana and Colorado) have a right to appeal our decision on a privacy rights request. If we were unable to fulfill your request to your satisfaction, you may appeal our decision by submitting an email to our privacy team at [email protected] within fourteen (14) days of the decision, and  provide a detailed reason for your appeal, as well as your state of residence.  

Notice to Nevada Residents/Your Nevada Privacy Rights

If you are a Nevada resident, please note that Carter’s does not sell for monetary consideration the Personal Information of Nevada consumers for the purpose of resale to other entities.

California’s Shine the Light Law; Your California Privacy Rights

California residents may ask Carter’s to provide them with (i) a list of certain categories of personal information that we have disclosed to other parties for their direct marketing purposes during the immediately preceding calendar year, and (ii) the identity of those other parties.

California residents may make one such request per calendar year.

To make a Shine the Light request, you may contact Carter’s by email at [email protected]. In your request, please state that you are a California resident and provide a current California mailing address for our response. Carter’s reserves its right not to respond to such requests submitted to addresses other than those specified in this paragraph.

Please note that your California’s Shine the Light law rights are distinct from the other privacy rights described above and must be exercised separately.

Notice of Financial Incentives and Loyalty Program

In General: We may offer various financial incentives permitted by State Privacy Laws that can result in different prices, rates, or quality levels. California law requires that we disclose specific information about the financial incentives we offer. Colorado requires that we provide similar information about loyalty programs that are offered to give individuals, among other things, “superior” goods or services (this is defined in Colorado as a Bona Fide Loyalty Program). Any permitted financial incentive we offer will reasonably relate to your Personal Information's value and contain written terms that describe the program's material aspects. The type and value of such offers or incentives may vary depending on the benefit and the Personal Information we collect. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time. Opting out may impact your ability to receive additional rewards or promotions.

Carter’s Rewards: You may also choose to join our free rewards program, Carter’s Rewards, which is subject to its own terms and conditions. This program allows you to earn points by making qualifying purchases and other activities, such as downloading our mobile application or using your Carter’s credit card. You can use these points to get rewards and other special offers from us. The Carter’s Rewards program collects the following categories of Personal Information – identifiers and non-public personal information (for example, your name and contact information), commercial information (for example, information about a purchase), inferences and customer profiles (for example, your purchasing trends), internet activity information (for example, how you interact with our ads or content), geolocation data (for example, where you tend to shop in person), and demographics (for example, your age group, approximate household income, or gender). We may process your contact information (i.e., email address) and other identifying information (e.g., IP address and device information) for purposes of targeted advertising when you participate in Carter’s Rewards. The value of the Personal Information collected and used through Carter’s Rewards is the equivalent of our expenses related to collecting and retaining the personal information of program participants. You can review our Carter’s Rewards FAQs for additional information. Participation in this program is voluntary, and you may opt-out at any time by using one of the methods provided in the “Contact Us” section at the end of this privacy policy.

Third parties who will receive Personal Information collected in connection with Carter’s Rewards are our Service Providers and business partners. For more information about our information sharing practices in connection with Carter’s Rewards, please see the “Categories of Third Parties We Share Personal Information With” section of this Privacy Policy.

Carter’s does not operate physical stores in the European Economic Area (“EEA”), United Kingdom (“UK”) or Switzerland although Carter’s Official Retail Partners are active in the region. Regardless, Carter’s recognizes the privacy rights of people from these jurisdictions who use our U.S. websites and applications. In addition to the other information provided in this Privacy Policy, please note the following information:

The data controller for the Site and Services is:

Carter’s, Inc.

3438 Peachtree Road NE, Suite 1800

Atlanta, Georgia 30326, USA

We use the Personal Information we collect about you to pursue the purposes described above in this Privacy Policy.

We rely on our legitimate interests as a business to provide, market, test, develop, and improve the Site and the Services you request, as well as to protect the Site and the Services from security threats, fraud, and abuse. We never rely on our legitimate interests when such reliance is overridden by the rights and freedoms of a data subject. Much of processing is necessary for the performance of a contract with our clients to provide the Site and the Services. In limited circumstances we may also rely on your consent to, for example, market our Services to you, collect information on our Site via cookies or other tracking technology, communicate with you about products, events, sweepstakes, promotions, etc.

In order to comply with our legal obligations, we may also use some of your Personal Information to detect and prevent illegal uses, abuse, spam, fraud, security incidents and other harmful activity, or to respond to law enforcement requests and as required by applicable law, governmental regulations or court orders.

You may have certain rights under the EU, UK or Swiss data protection legislation (collectively, “European Privacy Laws”) with respect to your Personal Information, such as the right to:

• request access to and be provided with information on the processing of your Personal Information;

• request corrections of your Personal Information if such Personal Information proves inaccurate or incomplete;

• request your Personal Information to be deleted (i) if it is no longer necessary for the purposes described in this Privacy Policy, (ii) should you decide to withdraw your consent where you gave it, (iii) should you object to its processing for direct marketing purposes, (iv) should you identify that it would have been unlawfully processed, (v) should we be under a legal obligation to erase it to comply with European Privacy Laws and always provided we are not under a legal obligation to keep it;

• restrict the processing of your Personal Information (i) if you contest its accuracy; (ii) if the processing is unlawful and you oppose the erasure; (iii) if it is no longer needed for the purposes set out in this Privacy Policy but is required to be maintained by us for the establishment, exercise or defense of a legal claim, (iv) if you object to profiling;

• object to the processing of your Personal Information for direct marketing purposes or to any processing which we would have based on our legitimate interest (e.g., profiling);

• receive Personal Information which you provided to us in a structured, commonly used and machine-readable format and to transmit it to another provider provided it is processed based on your consent or our contract;

• to object to the use of automated decision making or profiling; and

• withdraw consent for the processing of your Personal Information. You may withdraw your consent at any time. If you withdraw your consent, our use of your Personal Information before you withdrew it is still lawful.

If you wish to exercise any of your above rights, please reach out to us by:

• Visiting the Carter’s Privacy Portal to fill out and submit our web form.

You also have a right to make a complaint to a data protection supervisory authority, in the member state or country where you work, normally live, or where any alleged infringement of data protection laws occurred. A list of national data protection regulators in the EEA can be found here:

 http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

Carter’s is headquartered in the United States, and our Service Providers and partners operate globally. Please see the section labeled “Processing Location” above for more information. This means that your Personal Information will be transferred to countries outside the EEA, UK, or Switzerland when you visit the Site or use our Services. We have entered, or will enter, into so-called “Standard Contractual Clauses” approved by the Commission of the European Union for international transfer of Personal Information to controllers or processors established in third counties that do not provide a level of protection equivalent to that provided under the GDPR or UK GDPR. Where relevant, we may also rely on an adequacy decision. If you would like further information, please contact us or our Data Protection Officer via the information provided above.

The principle that we apply is that your Personal Information will be deleted when it is no longer necessary for the purpose for which it was collected, unless a longer retention period is needed to:

• Respond to any questions, complaints or claims made by you or on your behalf;

• To show that we treated you fairly; or

• To keep records required by law.

We will not retain your Personal Information for longer than necessary for the purposes set out in this policy.

Carter’s will honor the rights afforded to you by the privacy and data protection laws of your country. If you have any questions about any of the information in this policy or how it might apply to you, please contact us using this “Contact Us” information below.

We may change this Privacy Policy from time to time. If we decide to change this Privacy Policy, we will inform you by posting the revised Privacy Policy on the Site. Those changes will go into effect on the effective date shown on the revised Privacy Policy. By continuing to use the Site or the Services, you are consenting to the revised Privacy Policy.

If you have general questions or concerns related to your experience at Carter’s you can contact our Consumer Affairs team by email at [email protected], by telephone at 888-782-9548 (toll free in the United States), or by sending us a note at Carter’s Consumer Affairs, 206 State Street, Oshkosh, WI 54901.

For questions about our Privacy Policy, to notify us of a privacy concern, or if you would like to submit a privacy-related complaint or appeal, please contact our Privacy team at [email protected].

You can submit a request to exercise your privacy rights at any time by using the Carter’s Data Privacy Portal or by any of the other contact mechanisms noted in this Policy.

Please print a copy of this Privacy Policy for your records and please check the Site frequently for any changes.