1. About this Privacy Notice
This Privacy Notice (“Notice”) explains how Iconix International Inc. and its relevant subsidiaries and affiliates, referred to as “Iconix”, “we”, “us” or “our”, collect, use, disclose, retain and otherwise process personal information in connection with the website on which this Notice appears and any related subscription, promotion or digital communication that links to this Notice, each a “Service” and collectively, the “Services”.
Unless a Service identifies another legal entity as its operator or controller, the organisation responsible for the processing described in this Notice is:
Iconix International Inc.
1450 Broadway, 22nd Floor
New York, New York 10018
United States
Email: [email protected]
If another Iconix entity or an authorised brand licensee operates a particular Service, that entity will be independently responsible for personal information collected through that Service. Any applicable supplemental notice should identify that entity.
This Notice is intended to address applicable privacy requirements in the United States, European Economic Area, United Kingdom and other jurisdictions in which the Services are made available.
2. Scope
This Notice applies to personal information collected through the Services and related interactions where this Notice is provided or referenced.
It does not apply to:
- personal information processed solely by an independently operated retailer, licensee or other third party;
- third-party websites and services governed by their own privacy notices;
- workforce or employment information governed by a separate notice; or
- offline activities for which a different privacy notice is supplied.
Some brand websites may be informational only, while others may offer newsletter subscriptions, enquiries, competitions, accounts or purchasing functionality. The relevant portions of this Notice apply only to the features offered through the Service you use.
3. Personal Information We Collect
Depending on your interaction with the Services, we may collect the following categories of personal information.
3.1 Identifiers and contact information
This may include:
- name;
- postal, billing or delivery address;
- email address;
- telephone number;
- account username or similar identifier;
- online identifiers;
- Internet Protocol address; and
- identifiers assigned through cookies or similar technologies.
3.2 Account and profile information
If account functionality is available, we may collect:
- login credentials;
- account preferences;
- saved products or interests;
- clothing or footwear size;
- communication preferences; and
- account activity.
3.3 Transaction and commercial information
Where products or services may be purchased through a Service, we may collect:
- products viewed, selected or purchased;
- order and return information;
- billing and delivery details;
- transaction history;
- payment status; and
- associated customer-service records.
Payment information may be collected directly by a third-party payment processor. In those circumstances, Iconix may receive transaction confirmation and limited payment-related information rather than your complete payment card number.
3.4 Communications and submissions
We may collect information contained in:
- enquiries;
- customer-service communications;
- competition or prize-draw entries;
- survey responses;
- reviews and comments;
- uploaded content;
- photographs, videos or other submitted media; and
- other correspondence sent to us.
Please do not provide sensitive personal information unless it is necessary and specifically requested.
3.5 Device, usage and network information
We and our service providers may collect:
- IP address;
- browser type and version;
- operating system;
- device type and identifiers;
- language and time-zone settings;
- referring and exit pages;
- pages viewed and links selected;
- dates and times of access;
- approximate location derived from an IP address;
- interactions with emails or advertisements; and
- cookie, pixel and analytics information.
3.6 Marketing information
We may collect:
- newsletter subscriptions;
- marketing preferences;
- records of consent;
- unsubscribe requests;
- promotion engagement; and
- information about the products, brands or content in which you have expressed an interest.
3.7 Inferences
Where permitted by law, we may infer likely interests or preferences from interactions with the Services. We do not use such inferences to make decisions producing legal or similarly significant effects unless separately disclosed.
3.8 Sensitive personal information
We do not intentionally use or disclose sensitive personal information for purposes beyond those permitted by applicable law and necessary to provide a requested Service, prevent fraud, maintain security or comply with law.
If a Service collects information treated as sensitive under applicable law, we will provide any required notice and obtain consent where required.
4. How We Collect Personal Information
We may collect personal information:
- Directly from you, including when you subscribe, contact us, create an account, enter a promotion, make a purchase or submit content.
- Automatically, through cookies (where you accept cookies), pixels, local storage, server logs and similar technologies.
- From service providers, including hosting, analytics, security, communications, ecommerce and payment providers.
- From affiliates and licensees, where relevant to the operation of a brand or Service.
- From social-media and advertising platforms, subject to your settings and the platform’s rules.
- From publicly available sources, where lawful.
- From commercial partners, where they are authorised to provide the information.
5. How and Why We Use Personal Information
5.1 Providing the Services
We may use personal information to:
- operate and display the Services;
- create and administer accounts;
- authenticate users;
- process and fulfil requests or orders;
- administer payments through authorised providers;
- provide customer support;
- administer competitions, surveys and promotions; and
- provide requested information.
For individuals in the EEA or UK, the lawful basis will generally be performance of a contract or taking steps at your request before entering into a contract.
5.2 Communications
We may use personal information to:
- respond to enquiries;
- provide account, order and service communications;
- send security notices;
- provide administrative updates; and
- notify users of material changes affecting a Service.
The relevant lawful basis may be performance of a contract, compliance with law or our legitimate interest in communicating effectively with users.
5.3 Marketing
Subject to applicable law, we may:
- send newsletters;
- provide information about brands, products, promotions or events;
- personalise communications;
- measure campaign engagement; and
- maintain suppression lists so that we honour opt-out requests.
For EEA and UK users, we rely on consent where required by law. Where permitted, we may rely on an existing-customer exception for similar products or services, subject to a clear opportunity to opt out.
You may unsubscribe at any time by selecting the unsubscribe link in an email or contacting us. Unsubscribing from marketing will not prevent necessary transactional, security or service communications.
5.4 Analytics and Service improvement
We may use information to:
- understand how the Services are used;
- diagnose technical issues;
- improve functionality and content;
- evaluate campaign effectiveness;
- generate aggregated statistics; and
- develop or improve services.
For EEA and UK users, we rely on consent for non-essential analytics technologies where required. Otherwise, we may rely on legitimate interests, taking account of individual rights and reasonable expectations.
5.5 Security, fraud prevention and legal compliance
We may use personal information to:
- secure the Services, systems and accounts;
- detect and prevent fraud or misuse;
- investigate suspected violations;
- enforce our terms and protect legal rights;
- respond to lawful requests;and
- comply with recordkeeping and reporting obligations; and
- establish, exercise or defend legal claims.
6. Artificial Intelligence and Automated Processing
We may use automated and artificial intelligence-assisted tools to support functions such as content production, search, analytics, security, customer-service routing, marketing operations and workflow efficiency.
Unless a supplemental notice states otherwise:
- we do not use website personal information to make automated decisions;
- we do not knowingly submit sensitive personal information to a general-purpose AI service for unrestricted model training;
- human review is used where appropriate;
- AI-enabled service providers are subject to appropriate contractual, confidentiality and security controls; and
- legally required permissions and disclosures must be addressed when AI-generated or synthetic advertising content is used.
Iconix’s internal AI compliance materials call for conspicuous disclosure of qualifying synthetic performers in New York-facing advertising and retention of disclosure and consent records.
7. Cookies and Similar Technologies
We use cookies and similar technologies to operate, secure, analyse and, where applicable, personalise the Services.
These may include:
- strictly necessary cookies;
- preference or functionality cookies;
- analytics cookies;
- advertising or targeting cookies;
- pixels and tags;
- software development kits; and
- local storage.
Strictly necessary technologies may operate without consent where permitted because they are required to provide a requested service or maintain security. Other technologies will be used in accordance with your choices and applicable law.
You may manage available choices through the “Cookie Settings”, “Privacy Choices” or an equivalent link on the relevant Service. Browser controls may provide additional options, although disabling necessary technologies may affect functionality.
A separate Cookie Notice or cookie-management interface should identify the technologies actually used on each Service, including provider, purpose and duration.
8. How We Disclose Personal Information
8.1 Service providers and processors
We may disclose information to providers of:
- website hosting and content management;
- cloud and data storage;
- security and fraud prevention;
- analytics;
- customer relationship management;
- email and communications;
- ecommerce and order administration;
- payment processing;
- customer support;
- marketing and advertising;
- professional advice; and
- records management.
They may process information only for authorised purposes and subject to appropriate contractual obligations.
8.2 Affiliates
We may disclose information within our corporate group where necessary for administration, security, legal compliance, brand management or another purpose described in this Notice.
8.3 Licensees and commercial partners
A brand licensee, retailer or fulfilment partner may process information where it independently operates a store, promotion or service. If that party determines its own purposes and means of processing, its privacy notice will apply.
8.4 Authorities and other recipients
We may disclose information:
- to comply with law or legal process;
- to protect rights, safety or property;
- to investigate fraud or security incidents;
- in connection with legal proceedings;
- to regulators, courts or law-enforcement bodies; or
- in connection with a corporate transaction.
8.5 Sale, sharing and targeted advertising
We do not sell personal information.
Certain advertising, analytics or cross-context behavioural-advertising activities may nevertheless constitute “sale”, “sharing” or “targeted advertising” under particular US state privacy laws.
Where applicable, you may opt out through a recognised opt-out preference signal.
We do not knowingly sell or share the personal information of children under 16.
9. International Transfers
Iconix is based in the United States. Personal information may be processed in the United States and other countries that may not provide the same level of data protection as your home jurisdiction.
When personal information is transferred from the EEA or UK to a country not recognised as providing adequate protection, we use an applicable safeguard, which may include:
- the European Commission’s Standard Contractual Clauses;
- the UK International Data Transfer Agreement or UK Addendum;
- an applicable adequacy decision;
- an approved transfer framework, where valid and applicable; or
- another lawful transfer mechanism.
Where required, we assess relevant transfer risks and apply supplementary safeguards.
10. Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide the Services, comply with legal and accounting obligations, resolve disputes, prevent fraud and enforce agreements.
Retention periods are determined by considering:
- the nature, volume and sensitivity of the information;
- the purpose of processing;
- contract and account duration;
- statutory limitation periods;
- tax, accounting and regulatory requirements;
- security and fraud-prevention needs; and
- whether the purpose can be achieved through anonymisation.
Indicative periods, subject to the approved corporate retention schedule, are:
- account information: for the life of the account and 12 months afterwards;
- transaction and tax records: 6 years;
- routine enquiries: 12 months after closure;
- statutory limitation periods;
- competition records: for the administration period and 12 months afterwards;
- marketing records: until opt-out or prolonged inactivity, with limited suppression records retained as necessary;
- consent records: for as long as required to demonstrate compliance;
- cookie data: for the durations shown in the cookie interface; and
- security logs: 24 months, unless required longer for investigation or legal purposes.
When information is no longer needed, we delete, anonymise or securely isolate it.
11. Security
We maintain reasonable administrative, technical and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
No transmission or storage system is completely secure. Users are responsible for maintaining the confidentiality of account credentials and notifying us of suspected unauthorised access.
We maintain processes for investigating security incidents and notifying affected individuals and authorities where required.
12. Children’s Privacy
The Services are intended for a general audience and are not directed to children under 13 in the United States or children below the age at which they may independently consent to online processing in their jurisdiction.
We do not knowingly collect personal information online from a child under 13 without legally required parental consent.
If you believe that a child has provided personal information contrary to this section, contact [email protected]. We will investigate and take appropriate action.
Any promotion open to minors must have separate, age-appropriate terms and privacy disclosures.
13. Your Privacy Rights
Depending on your location and subject to applicable exceptions, you may have rights to:
- know whether we process your personal information;
- access personal information;
- receive information about categories, sources, purposes and recipients;
- correct inaccurate information;
- delete information;
- restrict or object to processing;
- receive portable information;
- withdraw consent;
- opt out of sale, sharing or targeted advertising;
- limit certain uses of sensitive personal information;
- opt out of qualifying profiling or automated decision-making;
- appeal the refusal of a request where applicable; and
- receive equal service without discrimination for exercising a privacy right.
Please describe your request and identify the relevant Service or brand. We may verify your identity using information reasonably proportionate to the request. An authorised agent may submit a request where permitted, subject to verification of authority and identity.
We will respond within the period required by applicable law. If a request is denied, we will provide an explanation and any legally required appeal process.
14. EEA and UK Information
For EEA and UK individuals, Iconix processes personal data on one or more of the following legal bases:
- performance of a contract;
- compliance with a legal obligation;
- consent;
- protection of vital interests;
- performance of a task in the public interest, where applicable; or
- legitimate interests not overridden by your rights.
Where we rely on legitimate interests, those interests may include operating and improving the Services, communicating with users, protecting systems, preventing fraud, maintaining records and supporting ordinary business administration.
You may complain to the data protection authority in the country in which you live or work. UK individuals may complain to the Information Commissioner’s Office. We encourage you to contact us first so that we can attempt to resolve the matter.
15. US State Privacy Disclosures
Where an applicable US state privacy law applies, sections 3, 4, 5 and 8 describe:
- categories of personal information collected;
- categories of sources;
- business and commercial purposes;
- categories of recipients; and
- potential sale, sharing or targeted-advertising activity.
For California residents, this Notice is intended to serve as a privacy policy under the California Consumer Privacy Act, as amended.
We do not use or disclose sensitive personal information for the purpose of inferring characteristics except as separately disclosed and legally permitted.
If we offer a financial incentive or loyalty programme involving personal information, we will provide a separate notice describing its material terms before enrolment.
16. Disputes Concerning this Privacy Notice
The collection and processing of personal information remain subject to applicable privacy law and the jurisdiction of competent privacy and consumer-protection authorities.
To the extent legally permitted, contractual disputes relating to this Notice or the Services are governed by the dispute-resolution provisions in the applicable Website Terms of Use.
Nothing in those provisions:
- restricts a privacy right that cannot lawfully be waived;
- prevents you from submitting a complaint to a competent privacy regulator;
- prevents a regulator from investigating or enforcing applicable law; or
- requires a UK, EEA or other consumer to arbitrate where applicable law preserves access to a court or public authority.
For US users, any arbitration provision in the Website Terms will only apply where the Terms were presented and accepted in a manner sufficient to create an enforceable agreement.
16. Disputes Concerning this Privacy Notice
The collection and processing of personal information remain subject to applicable privacy law and the jurisdiction of competent privacy and consumer-protection authorities.
To the extent legally permitted, contractual disputes relating to this Notice or the Services are governed by the dispute-resolution provisions in the applicable Website Terms of Use.
Nothing in those provisions:
- restricts a privacy right that cannot lawfully be waived;
- prevents you from submitting a complaint to a competent privacy regulator;
- prevents a regulator from investigating or enforcing applicable law; or
- requires a UK, EEA or other consumer to arbitrate where applicable law preserves access to a court or public authority.
For US users, any arbitration provision in the Website Terms will only apply where the Terms were presented and accepted in a manner sufficient to create an enforceable agreement.
17. Changes to this Notice
We may update this Notice to reflect changes in law, technology, the Services or our processing practices.
We will post the revised Notice with an updated “Last updated” date. If a change materially affects how previously collected information is used, we will provide additional notice or obtain consent where required.
18. Contact Us
Data Protection Manager
Iconix International Inc.
1450 Broadway, 22nd Floor
New York, New York 10018
United States
Email: [email protected]
Last updated: October 6, 2026