The QVC Privacy Statement

CALIFORNIA PRIVACY DISCLOSURE

(Last Updated July 1, 2024)

This section is referred to as the “California Privacy Disclosure” and is provided in connection with the California Consumer Privacy Act (or “CCPA”). Some terms in this California Privacy Disclosure are defined in CCPA. This California Privacy Disclosure describes our practices within the last 12 months regarding personal information about people who are consumers under CCPA. This California Privacy Disclosure does not apply to human resources information or business-to-business information. If you would like information about human resources data or business-to-business communications data, please reach out to your contact at our company. This California Privacy Disclosure does not apply to information that is excluded from the definition of “personal information” under CCPA or to information or activity that is subject to exemptions under CCPA. We may update our Privacy Statement or this California Privacy Disclosure from time to time or provide additional notices where required or appropriate. This California Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this California Privacy Disclosure or other privacy notices and policies.

COLLECTED PERSONAL INFORMATION

Categories of Personal Information. We collect personal information about users of our Services who are California consumers including personal information in the following categories:

• Identifiers, such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers
• Personal information records (as described in Cal. Civ. Code § 1798.80(e)), such as name, signature, social security number, physical characteristics or description, address, telephone number, driver’s license or state identification card number, employment, employment history, bank account number, credit card number, debit card number, or other financial information, medical information
• Characteristics of protected classifications under California or federal law
• Commercial information, such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
• Internet or other electronic network activity information
• Non-precise geolocation data
• Audio, electronic, visual, thermal, olfactory, or similar information
• Sensitive personal information in the following categories:
  • Social security, driver’s license or state identification card
  • Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account
• Inferences drawn from any of the categories of information identified above

When we de-identify data for purposes of CCPA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Retention. We retain personal information and sensitive personal information in the categories above pursuant to our retention schedule, which is based on the purposes for which we collect and process the information, legal and regulatory requirements, and our legitimate business purposes.

SOURCES OF PERSONAL INFORMATION

We collect personal information from different sources, including:

• Personal information we collect from you. We collect personal information that you provide directly to us. Personal information we collect in this way includes your identifiers, personal information records, characteristics of protected classifications, commercial information, audio, electronic, visual, thermal, olfactory or similar information, professional or employment-related information, non-public education information, and the categories of sensitive personal information described above.
• Personal information we collect from other people. We collect some personal information about you from other people such as when a customer uses features in our Services to refer friends and family to us or when a customer purchases an item for another recipient. Typically, personal information we collect in this way may include your identifiers, personal information records, and commercial information.
• Personal information we collect through tracking technology or automatically. We collect some personal information through first-party or external-party technology when you use our Services, such as browsing and use information; information about devices that you use to access our Services; and information collected through cookies, pixels, and similar technology. The categories of personal information collected include identifiers, commercial information, internet or other electronic network activity information, non-precise geolocation data, and audio, electronic, visual, thermal, olfactory or similar information.
• Personal information we create. We create some personal information when you use our Services or in the operation of our business. This includes information that may be categorized as identifiers, commercial information, internet or other electronic network activity information, and inferences.
• Personal information we collect from our Affiliates. We are part of a group of businesses that includes our Affiliates. When you use our Services, we may access and use account information and other personal information that our Affiliates have collected for the purposes of providing Services to you.
• Personal information we collect from other companies. We collect personal information from other companies, including advertising networks, internet service providers, data analytics providers, government entities, operating systems and platforms, social networks, and data brokers.

Purposes for collecting, selling, or sharing personal information

We collect, use, sell or share personal information for the following business or commercial purposes:

• Performing services, including account provision and maintenance; product sales and fulfillment; customer service and communications; marketing and advertising (contextual, personalized, retargeted, auditing of impressions, analytics for personalization); payment- related activities (processing payments, creditworthiness, evaluating payment options, financing, installment payment programs, private label credit card programs); providing technology to enable use and operation of services; providing storage
• Maintaining and improving services and user experience, including creating and updating applications, websites, and other features; debugging to identify and repair errors; analytics related to improving services or user experience; product safety or quality activities
• Fraud prevention and information security, including verifying identity; helping ensure security and integrity by detecting and responding to fraud or security incidents; limiting payment fraud; protecting against other malicious, deceptive, or illegal activity
• Short-term, transient use permitted under CCPA
• Internal research, including developing and demonstrating technology; conducting research, analytics, surveys, and focus groups to improve customer experiences, develop services and products, and provide better marketing and advertising
• Other business purposes for which we provide notice, including legal obligations; prosecuting people responsible for fraudulent, malicious, deceptive or illegal activities; defending claims; notifying of product recalls; enforcing and notifying of our terms and conditions, privacy statement, forum guidelines, and other policies; and for records retention purposes
• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, made, or controlled by us, and to improve, upgrade, or enhance such service or device
• Any other purposes consistent with our applicable privacy statements

We collect, sell or share sensitive personal information for the following purposes: to perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services; helping to ensure security and integrity, including enabling networks or information systems to detect security incidents that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted personal information; detecting security incidents, resisting malicious, deceptive, fraudulent, or illegal actions; ensuring physical safety of natural persons; short-term, transient use permitted under CCPA; performing services for our business operations; and other business purposes for which we provide notice. We do not use or disclose sensitive personal information for purposes to which the right to limit use and disclosure applies under the CCPA.

SALES OR SHARING OF PERSONAL INFORMATION

We sell or share personal information that is within the categories in the table below. Beside each category of personal information are the categories of third parties to which such personal information is sold or shared. Items of sensitive personal information are noted with an asterisk.

As we require customers be 18 years of age or older to use our Services, we have no actual knowledge of sales or sharing of personal information of consumers under 16 years of age.

DISCLOSURES OF PERSONAL INFORMATION FOR BUSINESS PURPOSES

We disclose personal information that is within the categories in the table below for business purposes. Beside each category of personal information are the categories of service providers and contractors to which such personal information is disclosed for business purposes. Items of sensitive personal information are noted with an asterisk.

FINANCIAL INCENTIVES

We may from time-to-time offer “Incentives” such as discounts on goods, discounts on shipping, prizes for participating in contests, and other similar incentives. In connection with offering Incentives, we may collect a name, email address, phone/text number, or other personal information, as further described in the specific Incentive. To the extent that we collect personal information of a California consumer participating in connection with offering an Incentive, then the value of the personal information provided in connection with the Incentive is generally calculated as the value of the Incentive less our expenses in operating the Incentive program and other costs associated with our business activities related to the Incentive. A California consumer participating in an Incentive may opt-in to the Incentive by following the method of participation used for the Incentive. California consumers also have the right to withdraw from an Incentive at any time through the methods described in the terms and conditions of the Incentive program. Additionally, if an Incentive is related to receiving marketing emails or marketing text messages, a participating California consumer can withdraw from the Incentive by unsubscribing from the relevant communications, using the methods described in our Privacy Statement.

CCPA RIGHTS

Following are rights of California consumers under CCPA. To exercise these rights, please submit a request through the form available at this link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that, if you submit a request to know, request to delete or request to correct, you may be asked to provide 2–3 pieces of personal information that we will match against our records to verify your identity.

• Deletion.A California consumer has the right to request the deletion of personal information we have collected from the consumer, but CCPA permits some personal information to be retained, notwithstanding a consumer’s deletion request.
• Correction.Taking into account the nature of personal information and the purposes of processing personal information, a California consumer has the right to request the correction of the consumer’s personal information if it is inaccurate. You can request to correct personal information at the information above, and you can also correct some personal information by visiting your account page on our website.
• Right to Know. A California consumer has the right to request the disclosure of (1) the categories of personal information we have collected about that consumer; (2) the categories of sources from which that personal information is collected; (3) the business or commercial purpose for collecting, selling or sharing the personal information; (4) the categories of third parties to whom we disclosed personal information; (5) the categories of personal information that we sold, and for each category identified, the categories of third parties to which we sold that particular category of personal information; and (6) the specific pieces of personal information we have collected about that consumer.
• Opt-out of sales and sharing. A California consumer has the right to opt out of sales and sharing of personal information about that consumer. If you choose to use the Global Privacy Control (GPC) browser signal, you will only be opted out of online sales or sharing of personal information, and you will need to log in to retain settings or turn it on for each browser you use. To submit a request to opt out of offline sales and sharing, please log in or use our form available above.
• Non-Discrimination. A California consumer has the right that a business shall not discriminate against you because you exercised your rights under CCPA.
• Agents.Authorized agents may submit requests on a California consumer’s behalf by submitting the request through the same means listed under the rights above. Authorized agents must establish their qualification to act as an agent, and we will still require verification directly from the consumer, unless the authorized agent possesses an appropriate power of attorney.

COLORADO PRIVACY DISCLOSURE

(Last Updated July 1, 2024)

This section is referred to as the “Colorado Privacy Disclosure” and is provided in connection with the Colorado Privacy Act (or “CPA”). Some terms in this Colorado Privacy Disclosure are defined in CPA. This Colorado Privacy Disclosure only applies to people who are consumers under CPA. This Colorado Privacy Disclosure does not apply to information that is excluded from the definition of “personal data” under CPA or to information or activity that is subject to exemptions under CPA. This Colorado Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this Colorado Privacy Disclosure or other privacy notices and policies. However, if any other notice about CPA is provided at the point of collection, then that other notice shall govern in the event of a conflict with this Colorado Privacy Disclosure as permitted by applicable law.

Categories of personal data and processing purposes

We process personal data when you use our Services. Please see the section in the QVC Privacy Statement titled “Kinds of personal information we use” for a description of the kinds of personal data we use and the section titled “How we use personal information” for the purposes for which we process personal data. When we de-identify data for purposes of CPA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Sales of personal data and targeted advertising

We sell personal data and engage in targeted advertising. The table below describes categories of personal data that we sell or use for targeted advertising and the categories of third parties to which such personal data is sold or disclosed for targeted advertising.

Third parties

We use third parties to help us in the operation of our business, and these third parties may have access to any of the personal data described in the categories of personal data. The categories of third parties that we use include payment and collection services, and marketing and advertising companies.

CPA Rights

Following are rights of Colorado consumers under CPA. To exercise these rights, please submit a request through our webform link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that we will need to authenticate you to a reasonable degree of certainty before we can process your request.

• Access. A Colorado consumer has the right to ask us to confirm whether or not we process personal data about the Colorado consumer and to access such personal data. We provide access to such personal data by providing you with a copy of such personal data.
• Copy.A Colorado consumer has the right to obtain a copy of the consumer’s personal data that the consumer previously provided to the controller in a portable and, to the extent technically feasible, readily usable format.
• Correction.Taking into account the nature of personal data and the purposes of processing personal data, a Colorado consumer has the right to have inaccuracies in the consumer’s personal data corrected.
• Deletion.A Colorado consumer has the right to request the deletion of the consumer’s personal data, but CPA permits some personal data to be retained, notwithstanding a consumer’s deletion request.
• Sale of personal data. A Colorado consumer has the right to opt out of sales of personal data.
• Profiling. A Colorado consumer has the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. While we do not engage in activities that come within the scope of profiling under CPA, you may opt out of such profiling if we do so in the future.
• Targeted Advertising. We engage in targeted advertising. A Colorado consumer has the right to opt out of targeted advertising.
• Appeal. A Colorado consumer has the right to appeal our decision with respect to a request to exercise a CPA right.

Universal Opt-outs and GPC. If you choose to use the Global Privacy Control (GPC) or another universal opt-out mechanism recognized under CPA, you will be opted out of sales of personal data and targeted advertising for the online interaction in which the GPC signal is communicated. You will need to turn it on for each browser you use, and to retain your settings across sessions, you should be logged in to your account.

Agents.Authorized agents may submit requests on a Colorado consumer’s behalf by submitting the request through the same means listed under the rights above. Authorized agents must establish their qualification to act as an agent, and we will still require verification directly from the consumer, unless the authorized agent possesses an appropriate power of attorney.

NEVADA PRIVACY DISCLOSURE

(Last Updated December 20, 2023)

This section is referred to as the “Nevada Privacy Disclosure” and is provided in connection with Chapter 603A of the Nevada Revised Statutes (or “NRS Chapter 603A”). Some terms in this Nevada Privacy Disclosure are defined in NRS Chapter 603A. This Nevada Privacy Disclosure only applies to people who are consumers under NRS Chapter 603A. This Nevada Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this Nevada Privacy Disclosure or other privacy notices and policies.

Nevada consumers have the right to opt out of the sale of certain “covered information” (as defined in NRS Chapter 603A) to a third party that intends to license or sell that covered information. While we do not currently engage in such sales, you may submit a verified request to opt out of any future sales by submitting a request through our webform link or by emailing privacy.statement@qvc.com. Please include “Nevada” in your email subject line and include the following information in your email: your name, Nevada resident address, and email address.

CONNECTICUT PRIVACY DISCLOSURE

(Last Updated December 20, 2023)

This section is referred to as the “ConnecticutPrivacy Disclosure” and is provided in connection with the Connecticut Data Privacy Act(or “CTDPA”). Some terms in this Connecticut Privacy Disclosure are defined in CTDPA. This Connecticut Privacy Disclosure only applies to people who are consumers under CTDPA. This ConnecticutPrivacy Disclosure does not apply to information that is excluded from the definition of “personal data” under CTDPA or to information or activity that is subject to exemptions under CTDPA. This Connecticut Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this Connecticut Privacy Disclosure or other privacy notices and policies. However, if any other notice about CTDPA is provided at the point of collection, then that other notice shall govern in the event of a conflict with this Connecticut Privacy Disclosure as permitted by applicable law.

Categories of personal data. We process personal data when you use our Services. Please see the section in the QVCPrivacy Statement titled “Kinds of personal information we use” for a description of the kinds of personal data we use. When we de-identify data for purposes of CTDPA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Purposes for processing personal data.We process personal data for the purposes described in the section in the QVC Privacy Statement titled “How we use personal information”.

Third parties. We use third parties to help us in the operation of our business, and these third parties may have access to any of the personal data described in the categories of personal data. The categories of third parties that we use include payment and collection services, and marketing and advertising companies.

CTDPA Rights

Following are rights of Connecticut consumers under CTDPA. To exercise these rights, please submit a request through our webform link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that we will need to authenticate you to a reasonable degree of certainty before we can process your request.

• Access. A Connecticut consumer has the right to ask us to confirm whether or not we process personal data about the Connecticut consumer and to access such personal data. We provide access to such personal data by providing you with a copy of such personal data.
• Copy. A Connecticutconsumer has the right to obtain a copy of the consumer’s personal data that the consumer previously provided to the controller.
• Correction. Taking into account the nature of personal data and the purposes of processing personal data, a Connecticutconsumer has the right to have inaccuracies in the consumer’s personal data corrected.
• Deletion. A Connecticutconsumer has the right to request the deletion of the consumer’s personal data, but CTDPApermits some personal data to be retained, notwithstanding a consumer’s deletion request.
• Sale of personal data. A Connecticut consumer has the right to opt out of sales of personal data. While we do not engage in sales of personal data under CTDPA, you may opt out of such sales if we do so in the future.
• Profiling. A Connecticut consumer has the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. While we do not engage in activities that come within the scope of profiling under CTDPA, you may opt out of such profiling if we do so in the future.
• Targeted Advertising. We engage in targeted advertising. A Connecticut consumer has the right to opt out of targeted advertising.
• Appeal. A Connecticut consumer has the right to appeal our decision with respect to a request to exercise a CTDPA right.

DELAWARE PRIVACY DISCLOSURE

(Last Updated January 1, 2025)

This section is referred to as the “DelawarePrivacy Disclosure” and is provided in connection with the Delaware Personal Data Privacy Act(or “DPDPA”). Some terms in this Delaware Privacy Disclosure are defined in DPDPA. This Delaware Privacy Disclosure only applies to people who are consumers under DPDPA. This DelawarePrivacy Disclosure does not apply to information that is excluded from the definition of “personal data” under DPDPA or to information or activity that is subject to exemptions under DPDPA. This Delaware Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this Delaware Privacy Disclosure or other privacy notices and policies. However, if any other notice about DPDPA is provided at the point of collection, then that other notice shall govern in the event of a conflict with this Delaware Privacy Disclosure as permitted by applicable law.

Categories of personal data. We process personal data when you use our Services. Please see the section in the QVCPrivacy Statement titled “Kinds of personal information we use” for a description of the kinds of personal data we use. When we de-identify data for purposes of DPDPA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Purposes for processing personal data.We process personal data for the purposes described in the section in the QVC Privacy Statement titled “How we use personal information”.

Third parties. We use third parties to help us in the operation of our business, and these third parties may have access to any of the personal data described in the categories of personal data. The categories of third parties that we use include payment and collection services, and marketing and advertising companies.

DPDPA Rights

Following are rights of Delaware consumers under DPDPA. To exercise these rights, please submit a request through our webform link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that we will need to authenticate you to a reasonable degree of certainty before we can process your request.

• Access. A Delaware consumer has the right to ask us to confirm whether or not we process personal data about the Delaware consumer and to access such personal data. We provide access to such personal data by providing you with a copy of such personal data.
• Copy. A Delawareconsumer has the right to obtain a copy of the consumer’s personal data that the consumer previously provided to the controller.
• Correction. Taking into account the nature of personal data and the purposes of processing personal data, a Delawareconsumer has the right to have inaccuracies in the consumer’s personal data corrected.
• Deletion. A Delawareconsumer has the right to request the deletion of the consumer’s personal data, but DPDPApermits some personal data to be retained, notwithstanding a consumer’s deletion request.
• Sale of personal data. A Delaware consumer has the right to opt out of sales of personal data. While we do not engage in sales of personal data under DPDPA, you may opt out of such sales if we do so in the future.
• Profiling. A Delaware consumer has the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. While we do not engage in activities that come within the scope of profiling under DPDPA, you may opt out of such profiling if we do so in the future.
• Targeted Advertising. We engage in targeted advertising. A Delaware consumer has the right to opt out of targeted advertising.
• Appeal. A Delaware consumer has the right to appeal our decision with respect to a request to exercise a DPDPA right.

INDIANA PRIVACY DISCLOSURE

(Last Updated January 1, 2026)

This section is referred to as the “IndianaPrivacy Disclosure” and is provided in connection with the Indiana Consumer Data Protection Act(or “INCDPA”). Some terms in this Indiana Privacy Disclosure are defined in INCDPA. This Indiana Privacy Disclosure only applies to people who are consumers under INCDPA. This IndianaPrivacy Disclosure does not apply to information that is excluded from the definition of “personal data” under INCDPA or to information or activity that is subject to exemptions under INCDPA. This Indiana Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this Indiana Privacy Disclosure or other privacy notices and policies. However, if any other notice about INCDPA is provided at the point of collection, then that other notice shall govern in the event of a conflict with this Indiana Privacy Disclosure as permitted by applicable law.

Categories of personal data. We process personal data when you use our Services. Please see the section in the QVCPrivacy Statement titled “Kinds of personal information we use” for a description of the kinds of personal data we use. When we de-identify data for purposes of INCDPA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Purposes for processing personal data.We process personal data for the purposes described in the section in the QVC Privacy Statement titled “How we use personal information”.

Third parties. We use third parties to help us in the operation of our business, and these third parties may have access to any of the personal data described in the categories of personal data. The categories of third parties that we use include payment and collection services, and marketing and advertising companies.

INCDPA Rights

Following are rights of Indiana consumers under INCDPA. To exercise these rights, please submit a request through our webform link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that we will need to authenticate you to a reasonable degree of certainty before we can process your request.

• Access. An Indiana consumer has the right to ask us to confirm whether or not we process personal data about the Indiana consumer and to access such personal data. We provide access to such personal data by providing you with a copy of such personal data.
• Copy. An Indianaconsumer has the right to obtain a copy of the consumer’s personal data that the consumer previously provided to the controller.
• Correction. Taking into account the nature of personal data and the purposes of processing personal data, an Indianaconsumer has the right to have inaccuracies in the consumer’s personal data corrected.
• Deletion. An Indianaconsumer has the right to request the deletion of the consumer’s personal data, but INCDPApermits some personal data to be retained, notwithstanding a consumer’s deletion request.
• Sale of personal data. An Indiana consumer has the right to opt out of sales of personal data. While we do not engage in sales of personal data under INCDPA, you may opt out of such sales if we do so in the future.
• Profiling. An Indiana consumer has the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. While we do not engage in activities that come within the scope of profiling under INCDPA, you may opt out of such profiling if we do so in the future.
• Targeted Advertising. We engage in targeted advertising. An Indiana consumer has the right to opt out of targeted advertising.
• Appeal. An Indiana consumer has the right to appeal our decision with respect to a request to exercise an INCDPA right.

IOWA PRIVACY DISCLOSURE

(Last Updated January 1, 2025)

This section is referred to as the “IowaPrivacy Disclosure” and is provided in connection with the Iowa’s data protection law(or “IADPA”). Some terms in this Iowa Privacy Disclosure are defined in IADPA. This Iowa Privacy Disclosure only applies to people who are consumers under IADPA. This IowaPrivacy Disclosure does not apply to information that is excluded from the definition of “personal data” under IADPA or to information or activity that is subject to exemptions under IADPA. This Iowa Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this Iowa Privacy Disclosure or other privacy notices and policies. However, if any other notice about IADPA is provided at the point of collection, then that other notice shall govern in the event of a conflict with this Iowa Privacy Disclosure as permitted by applicable law.

Categories of personal data. We process personal data when you use our Services. Please see the section in the QVCPrivacy Statement titled “Kinds of personal information we use” for a description of the kinds of personal data we use. When we de-identify data for purposes of IADPA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Purposes for processing personal data.We process personal data for the purposes described in the section in the QVC Privacy Statement titled “How we use personal information”.

Third parties. We use third parties to help us in the operation of our business, and these third parties may have access to any of the personal data described in the categories of personal data. The categories of third parties that we use include payment and collection services, and marketing and advertising companies.

IADPA Rights

Following are rights of Iowa consumers under IADPA. To exercise these rights, please submit a request through our webform link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that we will need to authenticate you to a reasonable degree of certainty before we can process your request.

• Access. An Iowa consumer has the right to ask us to confirm whether or not we process personal data about the Iowa consumer and to access such personal data. We provide access to such personal data by providing you with a copy of such personal data.
• Copy. An Iowaconsumer has the right to obtain a copy of the consumer’s personal data that the consumer previously provided to the controller.
• Correction. Taking into account the nature of personal data and the purposes of processing personal data, an Iowaconsumer has the right to have inaccuracies in the consumer’s personal data corrected.
• Deletion. An Iowaconsumer has the right to request the deletion of the consumer’s personal data, but IADPApermits some personal data to be retained, notwithstanding a consumer’s deletion request.
• Sale of personal data. An Iowa consumer has the right to opt out of sales of personal data. While we do not engage in sales of personal data under IADPA, you may opt out of such sales if we do so in the future.
• Profiling. An Iowa consumer has the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. While we do not engage in activities that come within the scope of profiling under IADPA, you may opt out of such profiling if we do so in the future.
• Targeted Advertising. We engage in targeted advertising. An Iowa consumer has the right to opt out of targeted advertising.
• Appeal. An Iowa consumer has the right to appeal our decision with respect to a request to exercise an IADPA right.

KENTUCKY PRIVACY DISCLOSURE

(Last Updated January 1, 2026)

This section is referred to as the “KentuckyPrivacy Disclosure” and is provided in connection with the Kentucky Consumer Data Protection Act(or “KCDPA”). Some terms in this Kentucky Privacy Disclosure are defined in KCDPA. This Kentucky Privacy Disclosure only applies to people who are consumers under KCDPA. This KentuckyPrivacy Disclosure does not apply to information that is excluded from the definition of “personal data” under KCDPA or to information or activity that is subject to exemptions under KCDPA. This Kentucky Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this Kentucky Privacy Disclosure or other privacy notices and policies. However, if any other notice about KCDPA is provided at the point of collection, then that other notice shall govern in the event of a conflict with this Kentucky Privacy Disclosure as permitted by applicable law.

Categories of personal data. We process personal data when you use our Services. Please see the section in the QVCPrivacy Statement titled “Kinds of personal information we use” for a description of the kinds of personal data we use. When we de-identify data for purposes of KCDPA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Purposes for processing personal data.We process personal data for the purposes described in the section in the QVC Privacy Statement titled “How we use personal information”.

Third parties. We use third parties to help us in the operation of our business, and these third parties may have access to any of the personal data described in the categories of personal data. The categories of third parties that we use include payment and collection services, and marketing and advertising companies.

KCDPA Rights

Following are rights of Kentucky consumers under KCDPA. To exercise these rights, please submit a request through our webform link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that we will need to authenticate you to a reasonable degree of certainty before we can process your request.

• Access. A Kentucky consumer has the right to ask us to confirm whether or not we process personal data about the Kentucky consumer and to access such personal data. We provide access to such personal data by providing you with a copy of such personal data.
• Copy. A Kentuckyconsumer has the right to obtain a copy of the consumer’s personal data that the consumer previously provided to the controller.
• Correction. Taking into account the nature of personal data and the purposes of processing personal data, a Kentuckyconsumer has the right to have inaccuracies in the consumer’s personal data corrected.
• Deletion. A Kentuckyconsumer has the right to request the deletion of the consumer’s personal data, but KCDPApermits some personal data to be retained, notwithstanding a consumer’s deletion request.
• Sale of personal data. A Kentucky consumer has the right to opt out of sales of personal data. While we do not engage in sales of personal data under KCDPA, you may opt out of such sales if we do so in the future.
• Profiling. A Kentucky consumer has the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. While we do not engage in activities that come within the scope of profiling under KCDPA, you may opt out of such profiling if we do so in the future.
• Targeted Advertising. We engage in targeted advertising. A Kentucky consumer has the right to opt out of targeted advertising.
• Appeal. A Kentucky consumer has the right to appeal our decision with respect to a request to exercise a KCDPA right.

MARYLAND PRIVACY DISCLOSURE

(Last Updated July 1, 2025)

This section is referred to as the “MarylandPrivacy Disclosure” and is provided in connection with the Maryland Online Data Privacy Act(or “MODPA”). Some terms in this Maryland Privacy Disclosure are defined in MODPA. This Maryland Privacy Disclosure only applies to people who are consumers under MODPA. This MarylandPrivacy Disclosure does not apply to information that is excluded from the definition of “personal data” under MODPA or to information or activity that is subject to exemptions under MODPA. This Maryland Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this Maryland Privacy Disclosure or other privacy notices and policies. However, if any other notice about MODPA is provided at the point of collection, then that other notice shall govern in the event of a conflict with this Maryland Privacy Disclosure as permitted by applicable law.

Categories of personal data. We process personal data when you use our Services. Please see the section in the QVCPrivacy Statement titled “Kinds of personal information we use” for a description of the kinds of personal data we use. When we de-identify data for purposes of MODPA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Purposes for processing personal data.We process personal data for the purposes described in the section in the QVC Privacy Statement titled “How we use personal information”.

Third parties. We use third parties to help us in the operation of our business, and these third parties may have access to any of the personal data described in the categories of personal data. The categories of third parties that we use include payment and collection services, and marketing and advertising companies.

MODPA Rights

Following are rights of Maryland consumers under MODPA. To exercise these rights, please submit a request through our webform link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that we will need to authenticate you to a reasonable degree of certainty before we can process your request.

• Access. A Maryland consumer has the right to ask us to confirm whether or not we process personal data about the Maryland consumer and to access such personal data. We provide access to such personal data by providing you with a copy of such personal data. If you would like to obtain a list of third parties that we have disclosed any consumer personal data to in the past year, please submit a request for “List of third party disclosures” through our webform link or email us at privacy.statement@qvc.com. Please include “Maryland” in your email subject line and include the following information in your email: your name, Maryland resident address, and email address.
• Copy. A Marylandconsumer has the right to obtain a copy of the consumer’s personal data that the consumer previously provided to the controller.
• Correction. Taking into account the nature of personal data and the purposes of processing personal data, a Marylandconsumer has the right to have inaccuracies in the consumer’s personal data corrected.
• Deletion. A Marylandconsumer has the right to request the deletion of the consumer’s personal data, but MODPApermits some personal data to be retained, notwithstanding a consumer’s deletion request.
• Sale of personal data. A Maryland consumer has the right to opt out of sales of personal data. While we do not engage in sales of personal data under MODPA, you may opt out of such sales if we do so in the future.
• Profiling. A Maryland consumer has the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. While we do not engage in activities that come within the scope of profiling under MODPA, you may opt out of such profiling if we do so in the future.
• Targeted Advertising. We engage in targeted advertising. A Maryland consumer has the right to opt out of targeted advertising.
• Appeal. A Maryland consumer has the right to appeal our decision with respect to a request to exercise a MODPA right.

MINNESOTA PRIVACY DISCLOSURE

(Last Updated July 1, 2025)

This section is referred to as the “MinnesotaPrivacy Disclosure” and is provided in connection with the Minnesota Consumer Data Privacy Act(or “MNCDPA”). Some terms in this Minnesota Privacy Disclosure are defined in MNCDPA. This Minnesota Privacy Disclosure only applies to people who are consumers under MNCDPA. This MinnesotaPrivacy Disclosure does not apply to information that is excluded from the definition of “personal data” under MNCDPA or to information or activity that is subject to exemptions under MNCDPA. This Minnesota Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this Minnesota Privacy Disclosure or other privacy notices and policies. However, if any other notice about MNCDPA is provided at the point of collection, then that other notice shall govern in the event of a conflict with this Minnesota Privacy Disclosure as permitted by applicable law.

Categories of personal data. We process personal data when you use our Services. Please see the section in the QVCPrivacy Statement titled “Kinds of personal information we use” for a description of the kinds of personal data we use. When we de-identify data for purposes of MNCDPA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Purposes for processing personal data.We process personal data for the purposes described in the section in the QVC Privacy Statement titled “How we use personal information”.

Retention. We retain personal information pursuant to our retention schedule, which is based on the purposes for which we collect and process the information, legal and regulatory requirements, and our legitimate business purposes.

Third parties. We use third parties to help us in the operation of our business, and these third parties may have access to any of the personal data described in the categories of personal data. The categories of third parties that we use include payment and collection services, and marketing and advertising companies.

MNCDPA Rights

Following are rights of Minnesota consumers under MNCDPA. To exercise these rights, please submit a request through our webform link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that we will need to authenticate you to a reasonable degree of certainty before we can process your request.

• Access. A Minnesota consumer has the right to ask us to confirm whether or not we process personal data about the Minnesota consumer and to access such personal data. We provide access to such personal data by providing you with a copy of such personal data. If you would like to obtain a list of third parties that we have disclosed any consumer personal data to in the past year, please submit a request for “List of third party disclosures” through our webform link or email us at privacy.statement@qvc.com. Please include “Minnesota” in your email subject line and include the following information in your email: your name, Minnesota resident address, and email address.
• Copy. A Minnesotaconsumer has the right to obtain a copy of the consumer’s personal data that the consumer previously provided to the controller.
• Correction. Taking into account the nature of personal data and the purposes of processing personal data, a Minnesotaconsumer has the right to have inaccuracies in the consumer’s personal data corrected.
• Deletion. A Minnesotaconsumer has the right to request the deletion of the consumer’s personal data, but MNCDPApermits some personal data to be retained, notwithstanding a consumer’s deletion request.
• Sale of personal data. A Minnesota consumer has the right to opt out of sales of personal data. While we do not engage in sales of personal data under MNCDPA, you may opt out of such sales if we do so in the future.
• Profiling. A Minnesota consumer has the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. While we do not engage in activities that come within the scope of profiling under MNCDPA, you may opt out of such profiling if we do so in the future.
• Targeted Advertising. We engage in targeted advertising. A Minnesota consumer has the right to opt out of targeted advertising.
• Appeal. A Minnesota consumer has the right to appeal our decision with respect to a request to exercise a MNCDPA right.

MONTANA PRIVACY DISCLOSURE

(Last Updated July 1, 2024)

This section is referred to as the “MontanaPrivacy Disclosure” and is provided in connection with the Montana Consumer Data Privacy Act(or “MCDPA”). Some terms in this Montana Privacy Disclosure are defined in MCDPA. This Montana Privacy Disclosure only applies to people who are consumers under MCDPA. This MontanaPrivacy Disclosure does not apply to information that is excluded from the definition of “personal data” under MCDPA or to information or activity that is subject to exemptions under MCDPA. This Montana Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this Montana Privacy Disclosure or other privacy notices and policies. However, if any other notice about MCDPA is provided at the point of collection, then that other notice shall govern in the event of a conflict with this Montana Privacy Disclosure as permitted by applicable law.

Categories of personal data. We process personal data when you use our Services. Please see the section in the QVCPrivacy Statement titled “Kinds of personal information we use” for a description of the kinds of personal data we use. When we de-identify data for purposes of MCDPA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Purposes for processing personal data.We process personal data for the purposes described in the section in the QVC Privacy Statement titled “How we use personal information”.

Third parties. We use third parties to help us in the operation of our business, and these third parties may have access to any of the personal data described in the categories of personal data. The categories of third parties that we use include payment and collection services, and marketing and advertising companies.

MCDPA Rights

Following are rights of Montana consumers under MCDPA. To exercise these rights, please submit a request through our webform link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that we will need to authenticate you to a reasonable degree of certainty before we can process your request.

• Access. A Montana consumer has the right to ask us to confirm whether or not we process personal data about the Montana consumer and to access such personal data. We provide access to such personal data by providing you with a copy of such personal data.
• Copy. A Montanaconsumer has the right to obtain a copy of the consumer’s personal data that the consumer previously provided to the controller.
• Correction. Taking into account the nature of personal data and the purposes of processing personal data, a Montanaconsumer has the right to have inaccuracies in the consumer’s personal data corrected.
• Deletion. A Montanaconsumer has the right to request the deletion of the consumer’s personal data, but MCDPApermits some personal data to be retained, notwithstanding a consumer’s deletion request.
• Sale of personal data. A Montana consumer has the right to opt out of sales of personal data. While we do not engage in sales of personal data under MCDPA, you may opt out of such sales if we do so in the future.
• Profiling. A Montana consumer has the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. While we do not engage in activities that come within the scope of profiling under MCDPA, you may opt out of such profiling if we do so in the future.
• Targeted Advertising. We engage in targeted advertising. A Montana consumer has the right to opt out of targeted advertising.
• Appeal. A Montana consumer has the right to appeal our decision with respect to a request to exercise a MCDPA right.

NEBRASKA PRIVACY DISCLOSURE

(Last Updated January 1, 2025)

This section is referred to as the “NebraskaPrivacy Disclosure” and is provided in connection with the Nebraska Data Privacy Act(or “NEDPA”). Some terms in this Nebraska Privacy Disclosure are defined in NEDPA. This Nebraska Privacy Disclosure only applies to people who are consumers under NEDPA. This NebraskaPrivacy Disclosure does not apply to information that is excluded from the definition of “personal data” under NEDPA or to information or activity that is subject to exemptions under NEDPA. This Nebraska Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this Nebraska Privacy Disclosure or other privacy notices and policies. However, if any other notice about NEDPA is provided at the point of collection, then that other notice shall govern in the event of a conflict with this Nebraska Privacy Disclosure as permitted by applicable law.

Categories of personal data. We process personal data when you use our Services. Please see the section in the CompanyPrivacy Statement titled “Kinds of personal information we use” for a description of the kinds of personal data we use. When we de-identify data for purposes of NEDPA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Purposes for processing personal data.We process personal data for the purposes described in the section in the QVC Privacy Statement titled “How we use personal information”.

Third parties. We use third parties to help us in the operation of our business, and these third parties may have access to any of the personal data described in the categories of personal data. The categories of third parties that we use include payment and collection services, and marketing and advertising companies.

NEDPA Rights

Following are rights of Nebraska consumers under NEDPA. To exercise these rights, please submit a request through our webform link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that we will need to authenticate you to a reasonable degree of certainty before we can process your request.

• Access. A Nebraska consumer has the right to ask us to confirm whether or not we process personal data about the Nebraska consumer and to access such personal data. We provide access to such personal data by providing you with a copy of such personal data.
• Copy. A Nebraskaconsumer has the right to obtain a copy of the consumer’s personal data that the consumer previously provided to the controller.
• Correction. Taking into account the nature of personal data and the purposes of processing personal data, a Nebraskaconsumer has the right to have inaccuracies in the consumer’s personal data corrected.
• Deletion. A Nebraskaconsumer has the right to request the deletion of the consumer’s personal data, but NEDPApermits some personal data to be retained, notwithstanding a consumer’s deletion request.
• Sale of personal data. A Nebraska consumer has the right to opt out of sales of personal data. While we do not engage in sales of personal data under NEDPA, you may opt out of such sales if we do so in the future.
• Profiling. A Nebraska consumer has the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. While we do not engage in activities that come within the scope of profiling under NEDPA, you may opt out of such profiling if we do so in the future.
• Targeted Advertising. We engage in targeted advertising. A Nebraska consumer has the right to opt out of targeted advertising.
• Appeal. A Nebraska consumer has the right to appeal our decision with respect to a request to exercise a NEDPA right.

NEW HAMPSHIRE PRIVACY DISCLOSURE

(Last Updated January 1, 2025)

This section is referred to as the “New HampshirePrivacy Disclosure” and is provided in connection with the New Hampshire’s data protection law(or “NHDPA”). Some terms in this New Hampshire Privacy Disclosure are defined in NHDPA. This New Hampshire Privacy Disclosure only applies to people who are consumers under NHDPA. This New HampshirePrivacy Disclosure does not apply to information that is excluded from the definition of “personal data” under NHDPA or to information or activity that is subject to exemptions under NHDPA. This New Hampshire Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this New Hampshire Privacy Disclosure or other privacy notices and policies. However, if any other notice about NHDPA is provided at the point of collection, then that other notice shall govern in the event of a conflict with this New Hampshire Privacy Disclosure as permitted by applicable law.

Categories of personal data. We process personal data when you use our Services. Please see the section in the CompanyPrivacy Statement titled “Kinds of personal information we use” for a description of the kinds of personal data we use. When we de-identify data for purposes of NHDPA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Purposes for processing personal data.We process personal data for the purposes described in the section in the QVC Privacy Statement titled “How we use personal information”.

Third parties. We use third parties to help us in the operation of our business, and these third parties may have access to any of the personal data described in the categories of personal data. The categories of third parties that we use include payment and collection services, and marketing and advertising companies.

NHDPA Rights

Following are rights of New Hampshire consumers under NHDPA. To exercise these rights, please submit a request through our webform link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that we will need to authenticate you to a reasonable degree of certainty before we can process your request.

• Access. A New Hampshire consumer has the right to ask us to confirm whether or not we process personal data about the New Hampshire consumer and to access such personal data. We provide access to such personal data by providing you with a copy of such personal data.
• Copy. A New Hampshireconsumer has the right to obtain a copy of the consumer’s personal data that the consumer previously provided to the controller.
• Correction. Taking into account the nature of personal data and the purposes of processing personal data, a New Hampshireconsumer has the right to have inaccuracies in the consumer’s personal data corrected.
• Deletion. A New Hampshireconsumer has the right to request the deletion of the consumer’s personal data, but NHDPApermits some personal data to be retained, notwithstanding a consumer’s deletion request.
• Sale of personal data. A New Hampshire consumer has the right to opt out of sales of personal data. While we do not engage in sales of personal data under NHDPA, you may opt out of such sales if we do so in the future.
• Profiling. A New Hampshire consumer has the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. While we do not engage in activities that come within the scope of profiling under NHDPA, you may opt out of such profiling if we do so in the future.
• Targeted Advertising. We engage in targeted advertising. A New Hampshire consumer has the right to opt out of targeted advertising.
• Appeal. A New Hampshire consumer has the right to appeal our decision with respect to a request to exercise a NHDPA right.

NEW JERSEY PRIVACY DISCLOSURE

(Last Updated January 1, 2025)

This section is referred to as the “New JerseyPrivacy Disclosure” and is provided in connection with the New Jersey’s data protection law(or “NJDPA”). Some terms in this New Jersey Privacy Disclosure are defined in NJDPA. This New Jersey Privacy Disclosure only applies to people who are consumers under NJDPA. This New JerseyPrivacy Disclosure does not apply to information that is excluded from the definition of “personal data” under NJDPA or to information or activity that is subject to exemptions under NJDPA. This New Jersey Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this New Jersey Privacy Disclosure or other privacy notices and policies. However, if any other notice about NJDPA is provided at the point of collection, then that other notice shall govern in the event of a conflict with this New Jersey Privacy Disclosure as permitted by applicable law.

Categories of personal data. We process personal data when you use our Services. Please see the section in the CompanyPrivacy Statement titled “Kinds of personal information we use” for a description of the kinds of personal data we use. When we de-identify data for purposes of NJDPA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Purposes for processing personal data.We process personal data for the purposes described in the section in the QVC Privacy Statement titled “How we use personal information”.

Third parties. We use third parties to help us in the operation of our business, and these third parties may have access to any of the personal data described in the categories of personal data. The categories of third parties that we use include payment and collection services, and marketing and advertising companies.

NJDPA Rights

Following are rights of New Jersey consumers under NJDPA. To exercise these rights, please submit a request through our webform link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that we will need to authenticate you to a reasonable degree of certainty before we can process your request.

• Access. A New Jersey consumer has the right to ask us to confirm whether or not we process personal data about the New Jersey consumer and to access such personal data. We provide access to such personal data by providing you with a copy of such personal data.
• Copy. A New Jerseyconsumer has the right to obtain a copy of the consumer’s personal data that the consumer previously provided to the controller.
• Correction. Taking into account the nature of personal data and the purposes of processing personal data, a New Jerseyconsumer has the right to have inaccuracies in the consumer’s personal data corrected.
• Deletion. A New Jerseyconsumer has the right to request the deletion of the consumer’s personal data, but NJDPApermits some personal data to be retained, notwithstanding a consumer’s deletion request.
• Sale of personal data. A New Jersey consumer has the right to opt out of sales of personal data. While we do not engage in sales of personal data under NJDPA, you may opt out of such sales if we do so in the future.
• Profiling. A New Jersey consumer has the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. While we do not engage in activities that come within the scope of profiling under NJDPA, you may opt out of such profiling if we do so in the future.
• Targeted Advertising. We engage in targeted advertising. A New Jersey consumer has the right to opt out of targeted advertising.
• Appeal. A New Jersey consumer has the right to appeal our decision with respect to a request to exercise a NJDPA right.

OREGON PRIVACY DISCLOSURE

(Last Updated July 1, 2024)

This section is referred to as the “OregonPrivacy Disclosure” and is provided in connection with the Oregon Consumer Privacy Act(or “OCPA”). Some terms in this Oregon Privacy Disclosure are defined in OCPA. This Oregon Privacy Disclosure only applies to people who are consumers under OCPA. This OregonPrivacy Disclosure does not apply to information that is excluded from the definition of “personal data” under OCPA or to information or activity that is subject to exemptions under OCPA. This Oregon Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this Oregon Privacy Disclosure or other privacy notices and policies. However, if any other notice about OCPA is provided at the point of collection, then that other notice shall govern in the event of a conflict with this Oregon Privacy Disclosure as permitted by applicable law.

Categories of personal data. We process personal data when you use our Services. Please see the section in the QVCPrivacy Statement titled “Kinds of personal information we use” for a description of the kinds of personal data we use. When we de-identify data for purposes of OCPA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Purposes for processing personal data.We process personal data for the purposes described in the section in the QVC Privacy Statement titled “How we use personal information”.

Third parties. We use third parties to help us in the operation of our business, and these third parties may have access to any of the personal data described in the categories of personal data. The categories of third parties that we use include payment and collection services, and marketing and advertising companies.

OCPA Rights

Following are rights of Oregon consumers under OCPA. To exercise these rights, please submit a request through our webform link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that we will need to authenticate you to a reasonable degree of certainty before we can process your request.

• Access. An Oregon consumer has the right to ask us to confirm whether or not we process personal data about the Oregon consumer and to access such personal data. We provide access to such personal data by providing you with a copy of such personal data. If you would like to obtain a list of third parties that we have disclosed any consumer personal data to in the past year, please submit a request for “List of third party disclosures” through our webform link or email us at privacy.statement@qvc.com. Please include “Oregon” in your email subject line and include the following information in your email: your name, Oregon resident address, and email address.
• Copy. An Oregonconsumer has the right to obtain a copy of the consumer’s personal data that the consumer previously provided to the controller.
• Correction. Taking into account the nature of personal data and the purposes of processing personal data, an Oregonconsumer has the right to have inaccuracies in the consumer’s personal data corrected.
• Deletion. An Oregonconsumer has the right to request the deletion of the consumer’s personal data, but OCPApermits some personal data to be retained, notwithstanding a consumer’s deletion request.
• Sale of personal data. An Oregon consumer has the right to opt out of sales of personal data. While we do not engage in sales of personal data under OCPA, you may opt out of such sales if we do so in the future.
• Profiling. An Oregon consumer has the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. While we do not engage in activities that come within the scope of profiling under OCPA, you may opt out of such profiling if we do so in the future.
• Targeted Advertising. We engage in targeted advertising. An Oregon consumer has the right to opt out of targeted advertising.
• Appeal. An Oregon consumer has the right to appeal our decision with respect to a request to exercise an OCPA right.

RHODE ISLAND PRIVACY DISCLOSURE

(Last Updated January 1, 2026)

This section is referred to as the “Rhode IslandPrivacy Disclosure” and is provided in connection with the Rhode Island Data Transparency and Privacy Protection Act(or “RIDTPPA”). Some terms in this Rhode Island Privacy Disclosure are defined in RIDTPPA. This Rhode Island Privacy Disclosure only applies to people who are consumers under RIDTPPA. This Rhode IslandPrivacy Disclosure does not apply to information that is excluded from the definition of “personal data” under RIDTPPA or to information or activity that is subject to exemptions under RIDTPPA. This Rhode Island Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this Rhode Island Privacy Disclosure or other privacy notices and policies. However, if any other notice about RIDTPPA is provided at the point of collection, then that other notice shall govern in the event of a conflict with this Rhode Island Privacy Disclosure as permitted by applicable law.

Categories of personal data. We process personal data when you use our Services. Please see the section in the CompanyPrivacy Statement titled “Kinds of personal information we use” for a description of the kinds of personal data we use. When we de-identify data for purposes of RIDTPPA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Purposes for processing personal data.We process personal data for the purposes described in the section in the QVC Privacy Statement titled “How we use personal information”.

Third parties. We use third parties to help us in the operation of our business, and these third parties may have access to any of the personal data described in the categories of personal data. The categories of third parties that we use include payment and collection services, and marketing and advertising companies.

RIDTPPA Rights

Following are rights of Rhode Island consumers under RIDTPPA. To exercise these rights, please submit a request through our webform link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that we will need to authenticate you to a reasonable degree of certainty before we can process your request.

• Access. A Rhode Island consumer has the right to ask us to confirm whether or not we process personal data about the Rhode Island consumer and to access such personal data. We provide access to such personal data by providing you with a copy of such personal data.
• Copy. A Rhode Islandconsumer has the right to obtain a copy of the consumer’s personal data that the consumer previously provided to the controller.
• Correction. Taking into account the nature of personal data and the purposes of processing personal data, a Rhode Islandconsumer has the right to have inaccuracies in the consumer’s personal data corrected.
• Deletion. A Rhode Islandconsumer has the right to request the deletion of the consumer’s personal data, but RIDTPPApermits some personal data to be retained, notwithstanding a consumer’s deletion request.
• Sale of personal data. A Rhode Island consumer has the right to opt out of sales of personal data. While we do not engage in sales of personal data under RIDTPPA, you may opt out of such sales if we do so in the future.
• Profiling. A Rhode Island consumer has the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. While we do not engage in activities that come within the scope of profiling under RIDTPPA, you may opt out of such profiling if we do so in the future.
• Targeted Advertising. We engage in targeted advertising. A Rhode Island consumer has the right to opt out of targeted advertising.
• Appeal. A Rhode Island consumer has the right to appeal our decision with respect to a request to exercise a RIDTPPA right.

TENNESSEE PRIVACY DISCLOSURE

(Last Updated July 1, 2025)

This section is referred to as the “TennesseePrivacy Disclosure” and is provided in connection with the Tennessee Information Protection Act(or “TIPA”). Some terms in this Tennessee Privacy Disclosure are defined in TIPA. This Tennessee Privacy Disclosure only applies to people who are consumers under TIPA. This TennesseePrivacy Disclosure does not apply to information that is excluded from the definition of “personal data” under TIPA or to information or activity that is subject to exemptions under TIPA. This Tennessee Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this Tennessee Privacy Disclosure or other privacy notices and policies. However, if any other notice about TIPA is provided at the point of collection, then that other notice shall govern in the event of a conflict with this Tennessee Privacy Disclosure as permitted by applicable law.

Categories of personal data. We process personal data when you use our Services. Please see the section in the QVCPrivacy Statement titled “Kinds of personal information we use” for a description of the kinds of personal data we use. When we de-identify data for purposes of TIPA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Purposes for processing personal data.We process personal data for the purposes described in the section in the QVC Privacy Statement titled “How we use personal information”.

Third parties. We use third parties to help us in the operation of our business, and these third parties may have access to any of the personal data described in the categories of personal data. The categories of third parties that we use include payment and collection services, and marketing and advertising companies.

TIPA Rights

Following are rights of Tennessee consumers under TIPA. To exercise these rights, please submit a request through our webform link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that we will need to authenticate you to a reasonable degree of certainty before we can process your request.

• Access. A Tennessee consumer has the right to ask us to confirm whether or not we process personal data about the Tennessee consumer and to access such personal data. We provide access to such personal data by providing you with a copy of such personal data.
• Copy. A Tennesseeconsumer has the right to obtain a copy of the consumer’s personal data that the consumer previously provided to the controller.
• Correction. Taking into account the nature of personal data and the purposes of processing personal data, a Tennesseeconsumer has the right to have inaccuracies in the consumer’s personal data corrected.
• Deletion. A Tennesseeconsumer has the right to request the deletion of the consumer’s personal data, but TIPApermits some personal data to be retained, notwithstanding a consumer’s deletion request.
• Sale of personal data. A Tennessee consumer has the right to opt out of sales of personal data. While we do not engage in sales of personal data under TIPA, you may opt out of such sales if we do so in the future.
• Profiling. A Tennessee consumer has the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. While we do not engage in activities that come within the scope of profiling under TIPA, you may opt out of such profiling if we do so in the future.
• Targeted Advertising. We engage in targeted advertising. A Tennessee consumer has the right to opt out of targeted advertising.
• Appeal. A Tennessee consumer has the right to appeal our decision with respect to a request to exercise a TIPA right.

TEXAS PRIVACY DISCLOSURE

(Last Updated July 1, 2024)

This section is referred to as the “TexasPrivacy Disclosure” and is provided in connection with the Texas Data Privacy and Security Act(or “TDPSA”). Some terms in this Texas Privacy Disclosure are defined in TDPSA. This Texas Privacy Disclosure only applies to people who are consumers under TDPSA. This TexasPrivacy Disclosure does not apply to information that is excluded from the definition of “personal data” under TDPSA or to information or activity that is subject to exemptions under TDPSA. This Texas Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this Texas Privacy Disclosure or other privacy notices and policies. However, if any other notice about TDPSA is provided at the point of collection, then that other notice shall govern in the event of a conflict with this Texas Privacy Disclosure as permitted by applicable law.

Categories of personal data. We process personal data when you use our Services. Please see the section in the QVCPrivacy Statement titled “Kinds of personal information we use” for a description of the kinds of personal data we use. When we de-identify data for purposes of TDPSA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Purposes for processing personal data.We process personal data for the purposes described in the section in the QVC Privacy Statement titled “How we use personal information”.

Third parties. We use third parties to help us in the operation of our business, and these third parties may have access to any of the personal data described in the categories of personal data. The categories of third parties that we use include payment and collection services, and marketing and advertising companies.

TDPSA Rights

Following are rights of Texas consumers under TDPSA. To exercise these rights, please submit a request through our webform link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that we will need to authenticate you to a reasonable degree of certainty before we can process your request.

• Access. A Texas consumer has the right to ask us to confirm whether or not we process personal data about the Texas consumer and to access such personal data. We provide access to such personal data by providing you with a copy of such personal data.
• Copy. A Texasconsumer has the right to obtain a copy of the consumer’s personal data that the consumer previously provided to the controller.
• Correction. Taking into account the nature of personal data and the purposes of processing personal data, a Texasconsumer has the right to have inaccuracies in the consumer’s personal data corrected.
• Deletion. A Texasconsumer has the right to request the deletion of the consumer’s personal data, but TDPSApermits some personal data to be retained, notwithstanding a consumer’s deletion request.
• Sale of personal data. A Texas consumer has the right to opt out of sales of personal data. While we do not engage in sales of personal data under TDPSA, you may opt out of such sales if we do so in the future.
• Profiling. A Texas consumer has the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. While we do not engage in activities that come within the scope of profiling under TDPSA, you may opt out of such profiling if we do so in the future.
• Targeted Advertising. We engage in targeted advertising. A Texas consumer has the right to opt out of targeted advertising.
• Appeal. A Texas consumer has the right to appeal our decision with respect to a request to exercise a TDPSA right.

UTAH PRIVACY DISCLOSURE

(Last Updated December 20, 2023)

This section is referred to as the “UtahPrivacy Disclosure” and is provided in connection with the Utah Consumer Privacy Act(or “UCPA”). Some terms in this Utah Privacy Disclosure are defined in UCPA. This Utah Privacy Disclosure only applies to people who are consumers under UCPA. This UtahPrivacy Disclosure does not apply to information that is excluded from the definition of “personal data” under UCPA or to information or activity that is subject to exemptions under UCPA. This Utah Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this Utah Privacy Disclosure or other privacy notices and policies. However, if any other notice about UCPA is provided at the point of collection, then that other notice shall govern in the event of a conflict with this Utah Privacy Disclosure as permitted by applicable law.

Categories of personal data. We process personal data when you use our Services. Please see the section in the QVCPrivacy Statement titled “Kinds of personal information we use” for a description of the kinds of personal data we use. When we de-identify data for purposes of UCPA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Purposes for processing personal data.We process personal data for the purposes described in the section in the QVC Privacy Statement titled “How we use personal information”.

Third parties. We use third parties to help us in the operation of our business, and these third parties may have access to any of the personal data described in the categories of personal data. The categories of third parties that we use include payment and collection services, and marketing and advertising companies.

UCPA Rights

Following are rights of Utah consumers under UCPA. To exercise these rights, please submit a request through our webform link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that we will need to authenticate you to a reasonable degree of certainty before we can process your request.

• Access. A Utah consumer has the right to ask us to confirm whether or not we process personal data about the Utah consumer and to access such personal data. We provide access to such personal data by providing you with a copy of such personal data.
• Copy. A Utahconsumer has the right to obtain a copy of the consumer’s personal data that the consumer previously provided to the controller.
• Correction. Taking into account the nature of personal data and the purposes of processing personal data, a Utahconsumer has the right to have inaccuracies in the consumer’s personal data corrected.
• Deletion. A Utahconsumer has the right to request the deletion of the consumer’s personal data, but UCPApermits some personal data to be retained, notwithstanding a consumer’s deletion request.
• Sale of personal data. A Utah consumer has the right to opt out of sales of personal data. While we do not engage in sales of personal data under UCPA, you may opt out of such sales if we do so in the future.
• Profiling. A Utah consumer has the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. While we do not engage in activities that come within the scope of profiling under UCPA, you may opt out of such profiling if we do so in the future.
• Targeted Advertising. We engage in targeted advertising. A Utah consumer has the right to opt out of targeted advertising.
• Appeal. A Utah consumer has the right to appeal our decision with respect to a request to exercise a UCPA right.

VIRGINIA PRIVACY DISCLOSURE

(Last Updated December 20, 2023)

This section is referred to as the “VirginiaPrivacy Disclosure” and is provided in connection with the Virginia Consumer Data Protection Act(or “VCDPA”). Some terms in this Virginia Privacy Disclosure are defined in VCDPA. This Virginia Privacy Disclosure only applies to people who are consumers under VCDPA. This VirginiaPrivacy Disclosure does not apply to information that is excluded from the definition of “personal data” under VCDPA or to information or activity that is subject to exemptions under VCDPA. This Virginia Privacy Disclosure supplements our other privacy notices and policies and shall govern in the event of a conflict between this Virginia Privacy Disclosure or other privacy notices and policies. However, if any other notice about VCDPA is provided at the point of collection, then that other notice shall govern in the event of a conflict with this Virginia Privacy Disclosure as permitted by applicable law.

Categories of personal data. We process personal data when you use our Services. Please see the section in the QVCPrivacy Statement titled “Kinds of personal information we use” for a description of the kinds of personal data we use. When we de-identify data for purposes of VCDPA, we will maintain and use such de-identified data only in de-identified form and will not attempt to reidentify the information unless permitted by applicable law.

Purposes for processing personal data.We process personal data for the purposes described in the section in the QVC Privacy Statement titled “How we use personal information”.

Third parties. We use third parties to help us in the operation of our business, and these third parties may have access to any of the personal data described in the categories of personal data. The categories of third parties that we use include payment and collection services, and marketing and advertising companies.

VCDPA Rights

Following are rights of Virginia consumers under VCDPA. To exercise these rights, please submit a request through our webform link or call us at 1-800-367-9444 (7am–1am Eastern). Please note that we will need to authenticate you to a reasonable degree of certainty before we can process your request.

• Access. A Virginia consumer has the right to ask us to confirm whether or not we process personal data about the Virginia consumer and to access such personal data. We provide access to such personal data by providing you with a copy of such personal data.
• Copy. A Virginiaconsumer has the right to obtain a copy of the consumer’s personal data that the consumer previously provided to the controller.
• Correction. Taking into account the nature of personal data and the purposes of processing personal data, a Virginiaconsumer has the right to have inaccuracies in the consumer’s personal data corrected.
• Deletion. A Virginiaconsumer has the right to request the deletion of the consumer’s personal data, but VCDPApermits some personal data to be retained, notwithstanding a consumer’s deletion request.
• Sale of personal data. A Virginia consumer has the right to opt out of sales of personal data. While we do not engage in sales of personal data under VCDPA, you may opt out of such sales if we do so in the future.
• Profiling. A Virginia consumer has the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. While we do not engage in activities that come within the scope of profiling under VCDPA, you may opt out of such profiling if we do so in the future.
• Targeted Advertising. We engage in targeted advertising. A Virginia consumer has the right to opt out of targeted advertising.
• Appeal. A Virginia consumer has the right to appeal our decision with respect to a request to exercise a VCDPA right.