This California Privacy Notice (“Notice”) is a supplement to other privacy policies or notices issued by Bloomin’ Brands, Inc. (“BBI” “us” “we” our”). In the event of a conflict between any other BBI policy, statement, or notice and this Notice, this Notice will prevail as to California residents and their rights under California law.

The California Consumer Privacy Act (CCPA)

In accordance with the CCPA’s requirements, this Notice describes our Collection, use, and disclosure of California Consumers’ Personal Information or “PI” during the preceding twelve months, as well as the rights California Consumers have under the CCPA. Terms defined in the CCPA that are capitalized in this Notice have the same meanings as in the CCPA unless otherwise stated.

Consistent with the CCPA, job applicants, current and former employees and contractors, and subjects of certain business-to-business communications acting solely in their capacity as representatives of another business, are not considered Consumers for purposes of this Notice or the rights described herein.

Collection and use of personal information

We Collect and share PI about California Consumers as described in the table below.

We Collect PI directly from the Consumer (e.g., when you complete an order, create an account, request information from us, call customer service, or sign in to a WiFi network operated by one of our restaurants), indirectly from the Consumer (e.g., through user activity on our websites or apps), from other individuals (e.g., when friends or family place a gift order), and through in-restaurant CCTV camera.

We Collect PI for the following business purposes:

• • Providing our services, including maintaining and servicing your accounts, verifying your information, billing and processing payments, marketing, analytics services, and similar functions and services;
• • Detecting security incidents and protecting against malicious, deceptive, or illegal activity;
• • Troubleshooting our services to identify and repair issues;
• • Internal research and development;
• • Quality and safety assurance, and improving, upgrading, and enhancing our products and services; and
• • Processing and managing interactions and transactions for our products and services.

In addition, we may Collect, use, and disclose your PI as required or permitted by applicable law, when requested or compelled by law enforcement or legal process, or in connection with contractual obligations. We do not treat Deidentified data or Aggregate Consumer Information as PI, and we reserve the right to convert, or permit others to convert, your PI into Deidentified data or Aggregate Consumer Information.

CCPA privacy rights

Under the CCPA, California Consumers have certain rights which they may exercise independently or through an Authorized Agent. CCPA rights requests are subject to an identification and verification process. We will not fulfill a CCPA request unless we have been provided sufficient information for us to reasonably verify that the requestor is the Consumer about whom we have Collected PI.

Some PI we maintain about Consumers (e.g., clickstream data) is not sufficiently associated with enough PI about the Consumer for us to be able to verify that it is a particular Consumer’s PI. Accordingly, we will not include such information in response to Consumer requests. If we cannot comply with a request, we will explain the reasons in our response. You are not required to create an account with us to make a verifiable request, but you may use your account to do so. We will use PI provided in your request only to verify your identity or authority to make the request and to track and document request responses, unless you also provided the PI to us for another purpose.

Your California Consumer privacy rights are described below. To make a request, click here on our CCPA portal and provide the following information including the nature of your request:

• • First Name
• • Last Name
• • Email address
• • Telephone number
• • Subject: CCPA Request

or call us at 866-265-0174.

In order to verify your identity, you must contact us from the email or phone number associated with your request. We will then follow-up with an outbound communication to you where you may be required to take further action to confirm your identity. Please follow the instructions above and promptly respond to any follow-up inquires. If you have requested that we provide you with specific pieces of information which BBI has about you, we will apply heightened verification standards.

For requests through an Authorized Agent, contact us via phone, or you may send mail to:

Attention: Legal Counsel Bloomin’ Brands, Inc Suite 500 2202 N. Westshore Blvd Tampa, FL 33607

An Authorized Agent may submit a request on behalf of a Consumer if the Consumer has provided the Authorized Agent with power of attorney in accordance with California law; alternatively, we will (1) require the Authorized Agent to present verifiable written authorization from the Consumer that the Authorized Agent has the Consumer’s permission to submit the request; and (2) independently verify the Consumer’s own identity with us.

We may Collect, use, and disclose your PI as required or permitted by applicable law. Please note we are not obligated to comply with Consumer requests to the extent that doing so would infringe on our, or any other person’s or party’s, rights, or conflict with applicable law.

Disclosure Rights

You have the right to request that we disclose the following information about your PI that we have collected and are maintaining for the 12-month period prior to your request date. Consumer requests of this nature may be made no more than twice in a 12-month period.

• • The categories of PI we have collected about you.
• • The categories of sources from which we Collected your PI.
• • The business or commercial purposes for Collecting or Selling your PI.
• • The categories of third parties to whom we have shared your PI.
• • The specific pieces of PI we have collected about you.
• • A list of the categories of PI disclosed for a business purpose in the prior 12 months, or that no disclosure occurred.
• • A list of the categories of PI Sold about you in the prior 12 months, or that no Sale occurred. If we Sold your PI, we will also list the categories of third parties to which we Sold PI, by categories of PI Sold for each third party.

You have the right to make or obtain a transportable copy, no more than twice in a 12-month period, of your PI that we (1) Collected in the 12 months prior to the request date, and (2) currently are maintaining. Please note that we retain PI for various time periods in accordance with applicable law and our internal recordkeeping policies and procedures, so we may not be able to fully respond to what might be relevant going back 12 months prior to the request.

“Do Not Sell” Rights

We do not sell California Consumer PI, including PI of minors under the age of 16, as “sell” is defined under the CCPA.

While there is not yet a consensus, some may argue that data practices of third-party cookies and tracking technologies associated with our websites and mobile app may constitute a “Sale” of your PI as defined by the CCPA. For more information on how we use cookies and other tracking technologies, please review our Privacy Policy here. You may opt out of interest-based advertising using ad industry opt out tools by visiting youradchoices.com/control and optout.networkadvertising.org. To effectively manage cookies via these tools, you must set cookie preferences on all browsers and all devices that you use. If you clear the cookies on your device, you may need to set your cookie preferences with these tools again. We are not responsible for the completeness, accuracy, or effectiveness of any third-party programs, tools, or frameworks, or the information they provide.

Deletion rights

Except to the extent we have a basis for retention under CCPA, you may request that we delete your PI that we have Collected directly from you and are maintaining. Our retention rights include, without limitation, to complete transactions and service you have requested or that are reasonably anticipated, for security purposes, for legitimate internal business purposes, including maintaining business records, to comply with law, to exercise or defend legal claims, and to cooperate with law enforcement.

Non-discrimination

We will not discriminate against you in a manner prohibited by the CCPA because you exercise your CCPA rights. This means that, consistent with California law, we will not deny providing our products or services to you, charge you different prices, or provide a different level or quality of products or services to you unless those differences are related to the value of your PI.

Notice of Financial Incentive

This Notice of Financial Incentive applies to our loyalty rewards program, Dine Rewards (“Dine Rewards”). Currently, Dine Rewards offers discounts and coupons to members as rewards for dining at our restaurants. We reserve the right to terminate or change the Dine Rewards program at any time at our sole discretion.

Program Details

Value of Consumer Data

We treat the value of Consumer data collected through Dine Rewards as the equivalent of relevant expenses related to the Collection and retention of Consumers’ PI as part of Dine Rewards. The Financial Incentive we offer to Consumers through Dine Rewards reasonably relates to the value of the Consumer’s data.

Withdrawal from the Program

You have the right to withdraw from Dine Rewards at any time. You may do so by contacting us at dinerewards@bloominbrands.com or 1-877-546-7407.

California's "Shine the Light" law

California’s “Shine the Light” law permits California residents to request certain information regarding our disclosure of PI to third parties for their own direct marketing purposes.

We do not share personal information with third parties for their direct marketing purposes without either obtaining your consent or giving you the ability to opt-out. If you are a California resident, you may request information about our compliance with the Shine the Light law by contacting us at privacy@bloominbrands.com or by sending a letter to

Attention: Legal Counsel Bloomin’ Brands, Inc. 2202 N. Westshore Blvd Suite 500 Tampa, FL 33607

Any such request must include “California Privacy Rights Request” in the first line of the description and include your name, street address, city, state, ZIP code, email address and telephone number. Please note that we are only required to respond to one request per customer each year, and we are not required to respond to requests made by means other than through this email address or mail address.

Please note that “Shine the Light” rights and CCPA rights are established under different legal regimes and must be exercised separately.

Contact Us

For more information regarding your California privacy rights, you may contact us at 866-265-0174 or email us at CAPrivacyRequest@bloominbrands.com. You may also write to us at:

Attention: Legal Counsel Bloomin’ Brands, Inc. 2202 N. Westshore Blvd Suite 500 Tampa, FL 33607