Lyst - Privacy policy
SKIP NAVIGATION
Last revised: 12 June 2025

Data Protection and Privacy Notice

This Notice applies to anyone who visits Lyst’s websites, including www.lyst.com, or Lyst’s mobile applications (the “Sites”), and any other platforms Lyst owns or controls that link to this Notice (the “Lyst Platforms”). We refer to the Sites and the Lyst Platforms as the “Services”.

When you use the Services, you access linked pages or blogs, features and content (including any information, text, graphics, photos, lists of items compiled by you, comments, reviews, links, or other materials uploaded, downloaded or appearing on, or linked to the Services) (collectively the “Content”).

This Notice describes how LYST LTD (“Lyst”, “we”, “our” or “us”) collects, uses, discloses, and otherwise processes personal data about our users (the “User” or “you”).

1. What Does This Notice Cover?

This Notice covers Lyst’s treatment of personal data that Lyst gathers when you access the Services and/or access the Content. We explain what information we gather, why we gather it and the choices you have regarding your personal data.

2. What Personal Data Does Lyst Collect, and How?

As customers, you do not have any legal obligation to provide any personal data to Lyst. However, we require certain personal data from you in order to operate properly, including completing a transaction on your behalf. Login credentials (email and username) enable us to personalize and improve our services. You hereby agree and acknowledge that any information you do provide to us is provided at your own free will, for the purposes mentioned in this Privacy Notice and that we may keep such information in a database(s) which will be registered and kept in accordance with applicable laws and regulations.

a) Personal Data You Provide to Us

We receive and store any personal data you enter on the Services or provide to us in any other way. The types of personal data provided by you may include your full name, email address, username, password, age or date of birth, home and billing address, shipping address, phone number, order details of transactions carried out on the Sites, and payment information (payment information is held by our payment processors rather than us). If you take part in customer surveys or interviews or any other research activities we may conduct from time to time, we may also record your likeness and/or voice in any video and/or audio recordings made for this purpose.

b) Personal Data Collected Automatically

i. We receive and store certain types of information whenever you interact with the Sites or use another feature of the Services. In other words, when you are using the Services we are aware of it and may gather, collect and record the information relating to such usage, either independently or through the help of third-party services as detailed below. Lyst automatically receives and records information on our server logs from your browser including your IP address, certain Cookie information (please see the ‘What about Cookies’ section below for further information) unique identifiers (such as click IDs) and the page you requested.

ii. We automatically collect usage information, such as the numbers and frequency of visitors to the Services, similar to user music preference data or to TV ratings that indicate how many people watched a particular show. Lyst only uses this data in aggregate form, that is, as a statistical measure. This type of aggregate data enables us to figure out how often customers use parts of the Services or another feature of the Content so that we can make the Services appealing to as many customers as possible, and improve the Content.

iii. We also collect information about the devices you use to access our Services. This includes, for example, the type of computer or device you use, the hardware model, operating system and software.

c) E-mail Communications

We often receive a confirmation when you open an email from Lyst if your computer supports this type of program. Lyst uses this confirmation to help us decide how to make emails more interesting and helpful.

d) Location Information

When you download or use apps created by Lyst or its affiliates or subsidiaries and, where applicable, have requested or consented to location services, we may receive information about your location. We may use this information to provide you with personalised content and location-based services, such as search results. Most mobile devices allow you to turn off location services. To learn more about what information your device makes available to us, please also check the policies of your device manufacturer or software provider.

3. What About Cookies?

Technologies, such as cookies, pixels, software development kits (SDKs), web beacons, tags and scripts (“Cookies”) are used by Lyst and our partners, affiliates, analytics vendors or service providers. These Cookies are used in analyzing trends, administering the Services, tracking users’ movements around the Services and gathering demographic information about our user base as a whole. We may receive reports based on the use of these technologies by these companies on an individual as well as aggregated basis.

Third parties (for example, advertising networks and providers of external services like web traffic analysis services) may also store Cookies on your device. These Cookies are used by third parties to provide services to us, such as analytics/performance monitoring, or personalized advertising which may also include third parties using their Cookies to show you adverts based on your past visits to the Services. This means you may be shown different products based on what you appear to be interested in and what you have viewed on the Services as well as other products deemed relevant to your browsing activity. In this way, advertising can be made as relevant and as useful to you as possible.

We may engage certain web analytics services (including Google Analytics and the Meta Pixel) to help us understand and analyze how visitors use the Services, help us administer and improve the quality of the Services, and serve ads on our behalf across the internet.

Note that we do not control Cookies owned by third parties and it is your responsibility to configure your preferences for third-party Cookies based on your individual targeting and tracking preferences.

We or our vendors may collect personal data about your online activities over time and across different devices and online properties when you use the Services.

How do you opt-out of personalized advertising and control other Cookie settings?

Cookie settings on the Sites. You can adjust your first and third party Cookie preferences on the Site via the ‘Cookie Settings’ or ‘Do not sell or share my personal information’ links available at the bottom of most of our Site pages. If you opt out of Cookies, we set an opt out Cookie in your browser so that we can remember that you opted out. Your opt-out choice may apply only to the browser or device you are using when you opt out, so you should update your settings on each of your browsers and devices. If you opt out, you will still receive ads, but they may not be as relevant to you and your interests. Please be aware that if you delete, disable or opt-out of Cookies, your online experience with the Services may be affected and some features or areas of the Services may be limited.

Browser settings:

  • Block Cookies. You can adjust your Cookie preferences by activating the setting on your browser that allows you to refuse the setting of all or some Cookies. The "Help" feature on most browsers will tell you how to stop your browser from accepting new Cookies. It should also tell you how to set up the browser to notify you when you receive a new Cookie and how to disable Cookies entirely. You can also disable or delete similar data used by browser add-ons by changing the add-ons settings or visiting the website of the browser manufacturer. Visit www.allaboutcookies.org for more information about how to manage Cookies on your particular browser.

  • Delete Cookies. Your browser will also allow you to delete Cookies that are currently set on your device. Please note that if you delete all of your Cookies, all of your existing Cookies preferences will also be lost. This means that you will see the Cookie banner again each time you visit our Site until you set your Cookies preferences.

Device settings. You may also be able to adjust your Cookies preferences in the settings of your device. However, the settings you choose will not apply across all your devices. This means that if you want to opt out of Cookies on all devices, you must adjust your settings individually on each device and browser on which you use the Services.

Advertising Networks. You can opt-out of some third-party advertising Cookies by visiting: The Digital Advertising Alliance’s consumer choice page (https://youradchoices.com/control) or the Network Advertising Initiative’s consumer choice page (http://optout.networkadvertising.org).

Do Not Track signals. Your web browser may have settings that allow you to transmit a “Do Not Track” signal when you visit websites or use online services. Like many websites, the Sites are not designed to respond to “Do Not Track” signals received from browsers. To learn more about “Do Not Track” signals, visit allaboutdnt.com.

Third parties. You may be able to adjust your third-party Cookies preferences directly with the relevant third party. The following parties offer information about and tools to limit their use of personal data:

We are not responsible for the effectiveness of external parties’ opt-out options or programs, or the accuracy of their statements regarding their programs.

4. Why Do We Collect Personal Data?

We use the personal data we collect in order to:

Operate and improve the Services and to display Content

Allow you to take full advantage of the Services, including using “Wish Lists”

Allow you to order products on the Sites (where applicable)

Process or facilitate payments through third party payment processors (where applicable)

Recommend relevant products, and make it easier for you to track products you’re interested in

Offer you a personalised experience of the Services and on the Lyst Sites.

Communicate with you about your orders and provide customer service and technical assistance and collect feedback

Communicate with you about products, sale reminders, services and promotional offers

Administer your account if you have one, and update our records

Enable third-party service providers and contractors to carry out technical, logistical or other functions on our behalf

Conduct research, troubleshoot problems, and detect and protect against error, abuse of the Services, fraud or other criminal activity

Control risk, comply with laws and regulations, and comply with other legal process and law enforcement requirements

Produce aggregated statistical reports (provided that the reports do not identify customers)

Conduct surveys, interviews and other research activities in relation to your use of the Services and the Content, and we will use the results of such activities, including any video and/or audio recordings, for research and product development and to improve the Services and train our personnel

Administer any prize draw / sweepstakes (including prize fulfilment) where available

5. Where Will We Store Your Personal Data?

To provide the Services, the personal data that we collect from you may be transferred to, and stored in, the United States and other locations where we process personal data. By using the Services, you acknowledge and consent to the transfer and processing of your personal data as described in this Notice. Please be aware that the data protection laws and regulations applicable to your transferred personal data may be different from the laws in your country of residence.

6. Disclosing Personal Data to Third Parties

We disclose personal data as described in this Notice and require entities to which we disclose personal data to provide the same level of personal data protection as required by this Notice.

a) Lyst Partners

We work with a variety of partners (“Lyst Partners”) in order to offer you the widest possible choice of fashion items on the Sites. There are two ways to buy products through the Services:

Buying on a Lyst Partner website: Sometimes when you select a product, you will be taken directly to the Lyst Partner website and asked by the Lyst Partner to provide further personal details related to the transaction. The personal data you enter on the Lyst Partner website will be collected, stored and processed in accordance with the privacy policy of the Lyst Partner.

Buying on the Sites via Lyst’s integrated checkout (“Integrated Checkout”): For certain products you wish to buy, we operate an Integrated Checkout service, allowing you to check out these products on the Sites. In order to process these transactions, we will need to disclose your transaction information (such as name and shipping details) to the relevant Lyst Partner using our secure systems. The personal data you enter on the Integrated Checkout will be collected, stored, and processed in accordance with this Notice and in accordance with the privacy policies of the Lyst Partners from whom you wish to purchase the products.

Please note that: (i) you should carefully review the Lyst Partner privacy policy before completing any transaction involving a Lyst Partner; and (ii) the Lyst Partner is solely responsible for its use and disclosure of your personal data.

Promotions: We may also disclose your personal data to Lyst Partners in connection with certain promotions and competitions. These will be subject to additional rules and conditions which will be made available to you at the time of entering any such competition or promotion. You should carefully review the rules and conditions relating to such competitions and promotions.

Aggregate Information: We may also disclose aggregate information to the Lyst Partners about how our customers, collectively, use the Content. We disclose this type of statistical data so that the Lyst Partners also understand how often people use the Content, so that they, too, may provide you with an optimal online experience. Lyst never discloses aggregate information to a Lyst Partner in a manner that would identify you personally, unless we need to in order to complete a transaction on your behalf.

b) Payment processors

For purchases made on the Sites via the Integrated Checkout, your payment information (e.g. credit or debit card details) will be processed by third-party payment process providers such as Klarna or Stripe.

Please note: (i) you should carefully review the third-party payment processor privacy policy before completing any transaction via the Integrated Checkout service; and (ii) the third-party payment processor is solely responsible for its use and disclosure of your information.

c) Affiliate Networks

Lyst discloses personal data to affiliate networks such as Rakuten (“Affiliate Network”) for the purpose of Lyst participating as a publisher in the Affiliate Network and entering into engagements with Partners. Where the Affiliate Network collects and uses personal data for its own permitted purposes, the Affiliate Network is solely responsible for its privacy practices.

d) Advertisers

Advertisers and advertising networks may use automated technologies such as Cookies to collect information about your website activity on the Sites and other sites. This is used to target advertising to you online that may be of interest to you. For more information on Cookies and how to reject targeted advertising or interest-based advertising Cookies, please see our ‘What about Cookies’ section above.

e) Social media and other platform services

Personal data to/from third-party social media services: Our Services provide functionalities that permit you to initiate interactions between the Services and external social media and other platform services that we do not own or control, including social networks such as Instagram and Pinterest. These social features may enable you to “like” or “share” our content or otherwise connect the Services to a third-party account (e.g., to pull or push information to or from the Services). If you use such social features, both Lyst and the third party may have access to certain information about you and your use of the Services and the third-party service. If you use social features, information you post or provide access to may be publicly displayed on the Service or by the social media service that you use. Similarly, if you post information on a social media service that references the Service (e.g., by using a hashtag associated with Lyst or one of our brands in a tweet or status update), your post may be used on or in connection with the Service or otherwise by Lyst. We encourage you to carefully review the privacy policies of any third-party services you access so that you know how they will collect, use, and disclose your personal information.

We receive the usernames and passwords for your accounts and profiles on third-party sites with which the Sites interoperate. For example, by logging into the Sites via Facebook, we may obtain certain information from your Facebook account, such as your name and email address. This may give us automatic access to certain personal data retained by a social media site about you (e.g. content viewed by you, content liked by you and information about the advertisements you have been shown or may have clicked on). Where this information is received by us, we will use this information to further personalize your experience on the Lyst Sites. We may disclose your data (such as unique identifiers derived from your registration information on our Sites) to these third-party sites. This allows us to link your devices and provide you with a seamless experience across different devices that you use.

We sometimes work with social media services, such as Facebook, to provide custom audiences to partners. A custom audience is a type of audience made from a customer list. It is a form of targeted advertising that lets our partners advertise to their existing audiences who are on Facebook. In the event that Lyst creates a custom audience, we will use aggregated information we already hold about users such as email addresses. Our user information is hashed before it is sent to Facebook. This process turns the information into randomized code and cannot be reversed.

Alternatively, a partner might request we work with Facebook to create a lookalike audience. Facebook will generate a lookalike audience from a source audience, such as a custom audience, we have already shared with them. A lookalike audience is created by Facebook identifying qualities of the people in the source audience and delivering targeted advertising to an audience of people who “look like” the source audience. A lookalike audience is a way for partners to reach new users who might be interested in our Services because they are similar to our existing users.

We may also work with platforms, such as Google, to create audience groups from the email addresses we hold and retarget users across different advertising networks.

f) Analytics

We have implemented the Google Analytics Demographics and Interest Reporting feature and may disclose your information to analytics and search engine providers that help us to improve and optimize the Services.

g) Agents

We employ other companies and people to perform tasks on our behalf and need to disclose your personal data to them only to the extent necessary to provide products or services to you. Unless we tell you differently, Lyst’s agents do not have any right to use the personal data we share with them beyond what is necessary to assist us.

h) User Profiles and Other Personal Data You Post

If the service is available on the Sites, User profile information including your username, name, email address, and other information you enter (“User Submissions”) may be displayed to other Lyst users to facilitate user interaction within the Services and allow you to follow other users, and them to follow you. Email addresses are used to add new User Submissions to user profiles and to communicate through User Submissions. Any personal data that you voluntarily disclose online (on discussion boards, in messages and chat areas, through reviews in product pages, etc.) becomes publicly available and can be viewed, collected, and used by others. Any images, captions, physical descriptions, personal interests, or other content that you submit to the Services may be redistributed through the Internet and other media channels and may be viewed by the general public.

Please be aware that whenever you voluntarily post information to public areas on the Services or any other public forums, such information can be accessed by the public.

i) To comply with legal requests

We may provide your personal data to relevant third parties when we believe in good faith that it is necessary in order to (i) comply with the law, regulation or a legal request; (ii) enforce or apply our conditions of use in other agreements; or (iii) protect the rights, property, or safety of Lyst, our employees, our users, or others. This may include exchanging personal data with other companies and organizations for fraud protection and credit risk reduction.

j) Third parties where a corporate transaction is contemplated

In some cases, we may choose to buy or sell assets. In these types of transactions, customer information is typically one of the business assets that are transferred. In addition, in the event of a merger, acquisition, reorganization, asset sale, or in the unlikely event that Lyst goes out of business or enters bankruptcy, customer information may be one of the assets that are transferred to or acquired by a third party. If such transfers occur, the third-party transferee may continue to use your personal data as set out in this Notice.

k) Affiliates

We may disclose some or all of your personal data to any of our parent companies, subsidiaries, joint ventures, or other companies under common control with us.

l) Research companies

We may provide your personal data to research companies such as Survey Monkey that we use to help us carry out surveys regarding your use of the Services.

7. How is Your Personal Data Kept Secure?

We take care to maintain appropriate safeguards and security features to protect the integrity and privacy of the personal data you provide us with and to try to prevent unauthorized access to it. We encrypt your personal data to protect it from unauthorized use, and we use pseudonymization, information access controls, and firewalls.

If you choose to create an account with Lyst (a “Lyst Account”), the information in your Lyst Account is protected by a password for your privacy and security. You need to ensure that there is no unauthorized access to your account and information by selecting and protecting your password appropriately and limiting access to your computer and browser by signing off after you have finished accessing your account. You are responsible for safeguarding the password that you use to access the Services and for any activities or actions under your password. Lyst encourages you to use “strong” passwords (passwords that use a combination of upper and lower case letters, numbers and symbols) with your account. Lyst cannot and will not be liable for any loss or damage arising from your failure to comply with the above requirements.

The transmission of information via the Internet is not completely secure and we cannot guarantee the security of your data transmitted to the Services. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time. Any transmission of data is at your own risk.

8. What About Links To Third Party Websites?

The Services contain links to other sites such as Lyst Partners. Lyst is not responsible for the privacy policies and/or practices on other sites. When linking to another site you should read the privacy policy stated on that site. This Notice only governs personal data collected on the Services.

9. Data Retention

Subject to any legal obligations to keep your personal data longer, we store the data you provide to us for as long as is necessary to provide the Services to you (and if you have a Lyst Account, for as long as you have a Lyst Account), or until you ask us to delete it, whichever comes first.

After a request from a User to delete any data, a process will begin that permanently deletes the relevant data. Once begun, this process cannot be reversed and data will be permanently deleted. Any data which is not deleted shall be kept in an anonymized manner.

Lyst collects and retains usage data, other metadata and statistical information about the use of the Services in an aggregated and anonymised format.

10. What Choices Do You Have in relation to the Personal Data We Hold About You?

You have certain choices in relation to the personal data that we hold about you, which are detailed below. Some of these rights only apply in certain circumstances.

a) Deletion

To ask us to delete your Lyst Account, please follow the instructions in the Account Settings section of your Lyst Account.

If you no longer wish to provide your personal data through our mobile application, you may uninstall our mobile application from your device. Note that this action will not delete your user account or any information we previously collected via the mobile application, nor does it affect our personal data collection through our other Services.

Please note that although your personal data may be removed from our databases, Lyst may retain the anonymous information contained in the data you provided, and such information will continue to be used by us for statistical purposes.

b) Correction

If you have a Lyst Account, you can update certain personal data in your ‘Account’ settings, such as your name, email address, username, and password. The personal data that you can update or amend may change as the Services change.

c) Marketing opt-out

When you register for a Lyst Account, you may receive certain marketing emails or other communications from us. We will use your personal data such as your email address to occasionally provide you with information about products and services which may be of interest to you.

If you no longer wish to receive marketing messages from us, or if you want to change the type and frequency of these messages, you can change your preferences at any time in the Account Settings of your registered Lyst Account, or by clicking on the unsubscribe button in our marketing emails. Please note that it sometimes takes a short amount of time to refresh our records for these purposes. We require all Lyst Partners to honor your opt-out requests if you elect to stop receiving marketing messages. If, for whatever reason, your opt-out request is not honored, please let us know and we will attempt to resolve the issues.

When using the Lyst mobile application, your preferences for receiving push notifications and other mobile alerts can be configured in the settings of the app or the settings of your mobile device.

Please also be advised that you may not be able to opt-out of receiving non-promotional, transactional messages, or information about your Lyst Account (e.g. service announcements or administrative messages).

You can always opt not to disclose personal data, even though it may be needed to take advantage of the Services.

Please note that if you choose not to receive or read legal notices from us, such as this Notice, those legal notices will still govern your use of the Services, and you are responsible for reviewing such legal notices for changes.

11. Children

We do not knowingly market or sell products for purchase by children. The Services are not designed for use by children under 13 years old. Children under 13 are not allowed to register with Lyst or use the Services, or submit personal data through the Services. We do not knowingly collect personal data from anyone under the age of 13. If you have any reason to believe that anyone under the age of 13 has provided their personal data to us, please contact us as specified below, and we will work to delete that personal data from our databases.

12. Changes To This Notice

Lyst reserves the right to change this Notice from time to time. Use of personal data we collect now is subject to the Notice in effect at the time such personal data is used. If we make substantial changes in the way we use personal data, we will notify you by posting an announcement on the Services or sending you an email. Otherwise, all other changes to this Notice are effective as of the stated “Last Revised” date.

13. Questions Or Concerns

If you have any questions or concerns regarding privacy on our Services or the Content, please send us a detailed message here. We will make every effort to resolve your concerns.

Your California Privacy Rights

This section supplements the Notice and describes how Lyst processes the personal data of consumers in U.S. states with comprehensive consumer privacy laws, including the California Consumer Privacy Act (“CCPA”) (collectively, the “Applicable States”). In the event of a conflict between any other policy, statement, or notice and this section, this section will prevail as to consumers in the Applicable States (“Consumers”).

Defined terms from the Applicable State laws that are used in this Notice shall have the same meaning as in the Applicable State law. Personal data includes “Personal Information,” “Sensitive Personal Information,” and “Sensitive Data” as defined under Applicable State privacy laws.

a) How Does Lyst Collect, Use, and Disclose Consumer Personal Data?

As described in the “What Personal Data Does Lyst Collect, and How” section above, Lyst collects the following categories of personal information about Consumers from the Services. Personal Information we collect about you may vary depending on the nature of your interactions with us and may not include all of the examples listed below.

Categories of personal data that Lyst collects:

  • Identifiers and personal records (including records described in Cal. Civ. Code § 1798.80(e)), including contact information or unique personal identifiers such as IP address or Cookie identifiers.

  • Characteristics of protected classifications under state or federal law, including age and date of birth.

  • Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

  • Professional or employment-related information, including information from resumes provided during interviews.

  • Internet or other electronic network activity information, including browsing history, search history, and information regarding a consumer’s interaction with an internet website application, or advertisement.

  • Audio, electronic, and visual information, including through interview recordings and other research activities.

  • Geolocation data.

  • Inferences derived from personal data to create a profile about a consumer reflecting the consumer’s characteristics, including preferences, characteristics, and behavior.

Purpose for collecting and using personal data: We collect and use the categories of personal data listed above for the purposes listed above in the ‘What Personal Data Does Lyst Collect and How?’ and ‘Why Do We Collect Personal Data?’ sections.

Categories of sources of personal data: We collect the categories of personal data listed above directly from you or your device, automatically, or from our vendors and third parties (e.g. third-party payment processors, or social media networks, Lyst Partners, analytics providers).

Categories of third parties to whom Lyst discloses personal data: We may disclose the categories of personal data listed above as described above in the ‘Disclosing Personal Data to Third Parties’ section.

b) How Do We Sell Personal Data and Share Personal Data for Targeted and Cross-Context Behavioral Advertising?

We do not sell your personal data to other companies for monetary compensation. We may allow certain third parties (e.g., advertising partners) to collect information about your website activity via automated technologies on the Sites, such as Cookies. This sharing of personal data for targeted advertising or cross-context behavioral advertising (“Targeted Advertising”) may be considered a “sale” under Applicable State privacy law. You can exercise control over the use of these technologies by opting out, below.

We may sell or share for Targeted Advertising, the following categories of personal data about residents of the Applicable States with our advertising partners or analytics vendors in order to serve you content and advertisements that you may be interested in: identifiers, commercial information, internet or other electronic network activity information; geolocation data, and inferences.

This is used to target advertising to you online that may be of interest to you. You can exercise control over the use of these technologies by opting out, below.

c) How Do We Determine How Long to Retain Personal Data?

The criteria Lyst may include to determine the retention of your personal data include whether the information is necessary and proportionate to provide the Services to you as well as Lyst’s legal and regulatory requirements.

d) What Rights Do Consumers Have?

As a resident of an Applicable State, you may have the following rights in relation to your personal data:

  • Know, Confirm, and Access: You may confirm whether we are processing your personal data, access your personal data, and obtain information about the categories and specific pieces of personal data we process about you. Residents of certain Applicable States may also request details about third parties to which we have disclosed personal data.

  • Data Portability: You may request a copy of the personal data we hold about you in a portable format.

  • Deletion: You may request that we delete the personal data we have collected about you. We may retain certain information as required or permitted by applicable law.

  • Opt Out of Sales and Targeted Advertising: You may opt out of the sales and sharing for Targeted Advertising by clicking the “Do not sell or share my personal information” link in the footer of the website or in the ‘Legal info’ section of the mobile app settings. If you choose to use the Global Privacy Control (“GPC”) browser signal, you will need to turn it on for each browser you use.

  • Correction: You may request that we correct any inaccurate personal data we have collected about you.

  • Opt Out of Profiling: We do not offer this right because we do not profile individuals in furtherance of decisions that produce legal or similarly significant effects under applicable state privacy laws.

To exercise the rights listed above, you can contact us at privacy@lyst.com. We do not discriminate against you for requesting any of the rights noted above. If you make a privacy rights request, we will retain the personal data submitted in connection with your request for recordkeeping purposes. If we deny your privacy rights request, you may appeal for reconsideration of your request by emailing privacy@lyst.com.

e) Additional California Disclosures

These California disclosures apply to California residents under applicable California laws, including the CCPA.

Unless otherwise noted, the disclosures in this Notice cover our activities in the 12 months preceding the Last Revised date, as well as our current practices.

Sensitive Personal Information: We do not use or disclose sensitive Personal Information for purposes to which the right to limit use and disclosure applies under the CCPA.

Selling and Sharing Children’s Personal Data: We do not have actual knowledge that we sell or share the personal data of Consumers under 16 years of age.

California “Shine the Light”: You may obtain a list of the recipients to which we have disclosed Personal Information, as defined under California Civil Code §1798.83(e) (the “Shine the Light” law), during the preceding calendar year for direct marketing purposes, as applicable. To submit a request, please email us at privacy@lyst.com. Requests must include “California Shine the Light Request” in the subject line, and include your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per customer each year, and we are not required to respond to requests made by means other than through the provided email address or mail address. Because these rights and your CCPA rights are not the same and exist under different laws, you must exercise your rights under each law separately.