CCPA Privacy Notice | Outback Steakhouse

This California Privacy Notice (“California Notice”) is a supplement to other privacy policies or notices issued by Bloomin’ Brands, Inc. and its subsidiaries (operating under Outback Steakhouse, Carrabba’s Italian Grill, Bonefish Grill, Fleming’s Prime Steakhouse & Wine Bar, Aussie Grill by Outback, Tender Shack, Outback & Carrabba’s Express), as well as Dine Rewards (collectively, “BBI” “us” “we” "our”), and applies to “Consumers” as defined by the California Consumer Privacy Act (as amended by the California Privacy Rights Act, and together with related regulations, the “CCPA”). This California Notice describes how we may collect, use, or disclose information about you; your choices regarding our use of your information; how we safeguard such information; and how you may contact us regarding our privacy practices.

In the event of a conflict between any other BBI policy, statement, or notice and this California Notice, this California Notice will prevail as to California residents and their rights under California law.

As used in this California Notice, the term “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you. Personal Information does not include information that is publicly available, de-identified, or aggregated.

Unless otherwise noted, the disclosures that describe how and why we collect and use your Personal Information also describe how and why we collected and used your Personal Information within the past twelve (12) months.

If you are a current employee of BBI, our California Employee Privacy Notice applies to the Personal Information we obtain about you in the employment context. You may contact Human Resources or Privacy@BloominbBrands.com to obtain a copy of the California Employee Privacy Notice that you received during onboarding.

Capitalized terms contained herein that are not defined by the CCPA shall have the same meaning as prescribed in our Privacy Policy.

How and Why We Collect Your Personal Information

We may collect Personal Information about California consumers, including job applicants and individuals that interact with BBI in their capacity of representing another business, as set forth below.

Note that the specific pieces of Personal Information we collect about you may vary depending on the nature of your interactions with us and may not include all of the examples listed.

Category of Personal Information or Sensitive Personal Information	Examples of Personal or Sensitive Personal Information	Categories of Sources from which Collected	Purposes for Collection, Use or Disclosure
Identifiers	This includes name, postal address, Internet Protocol address, email address, telephone number, MAC address, company contact details (including company name, company address, company email address, and company telephone number)	Directly from you Automatically when you use our Services From our affiliates, subsidiaries, service providers, or business partners that help us to run our business, or from other individuals (e.g., when friends or family place a gift order)	To provide our products and services, including processing transactions To communicate with you To comply with applicable laws and regulations To improve our products and services To manage the quality, safety, and security of our products and services, including disclosures with regard to food safety To detect and prevent fraud or illegal activity against you and/or us To authenticate your identity To review your qualifications and credentials To determine if you might fit a job need of ours and to contact you to see if you might be interested in a job for which you did not apply To respond to chats with our virtual job assistant To deliver legal or other notices To assess your job application, including to manage your profile in our recruitment system, perform pre-screening checks, send transactional SMS messages about the status of your application, and conduct interviews To enter into and execute agreements
Personal Information described in Cal. Civ. Code (need section symbol) 1798.80§	This includes Identifiers listed above, tokenized instances of payment card details, signature, telephone number, employment and employment history, education, physical and electronic signature, and company financial information (such as routing numbers, etc.)	Directly from you Automatically when you use our Services From our affiliates, subsidiaries, service providers, or business partners that help us to run our business, or from other individuals (e.g., when friends or family place a gift order)	To provide our products and services, including processing transactions To communicate with you To comply with applicable laws and regulations To improve our products and services To manage the quality, safety, and security of our products and services, including disclosures with regard to food safety To detect and prevent fraud or illegal activity against you and/or us To authenticate your identity To review your qualifications and credentials To determine if you might fit a job need of ours and to contact you to see if you might be interested in a job for which you did not apply To respond to chats with our virtual job assistant To deliver legal or other notices To assess your job application, including to manage your profile in our recruitment system, perform pre-screening checks, send transactional SMS messages about the status of your application, and conduct interviews To enter into and execute agreements
Characteristics of protected classifications	Under California or federal law, this includes age and date of birth, marital status, race, ancestry, ethnic origin, sex, gender, sexual orientation, gender identity, religion or creed, military or veteran status, medical condition, or disability	Directly from you	To comply with U.S. Equal Employment Opportunity Commission (“EEOC”) and California Civil Rights Agency (“CCRA”) requirements, and other equal opportunity initiatives To support our recruitment and diversity, equity, and inclusion programs and initiatives
Commercial Information / Purchase Details	Such as purchase history or tendencies	Directly from you Automatically when you use our Services From our affiliates, subsidiaries, service providers, and business partners that help us to run our business	To provide our products and services To improve our products and Services To reimburse you if you travel for a job interview and seek reimbursement
Internet or other electronic network activity information	This includes browsing history, information regarding interactions with our services or advertisements	Automatically when you use our Services From our affiliates, subsidiaries, service providers, and business partners that help us to run our business	To provide our products and services To process and manage interactions and transactions for our products and Services To improve our products and Services To manage the security of our Services To detect and prevent fraud or illegal activity
Geolocation Data	This includes precise physical location	Automatically when you use our Services	To show you relevant offers and promotions To determine which restaurant is closest to you To ensure you place your order from the right restaurant To improve our Services, set default options, and provide you with a better shopping experience
Audio, electronic, visual or similar information	This includes Audio recordings of customer service calls, CCTV footage	Automatically while you are on our property or using certain Services From our affiliates, subsidiaries, service providers, and business partners that help us to run our business	To improve our products and Services To manage the security of our services and facilities To detect and prevent fraud or illegal activity against you and/or us
Professional or employment-related information	This includes recruitment information (such as skills, qualifications, references, recommendations, languages spoken, and other information included in a resume, application form, or cover letter)	Directly from you	To review your qualifications and credentials To contact references and conduct background checks To determine if you might fit a job need of ours and to contact you to see if you might be interested in a job for which you did not apply To assess your job application, including to manage your profile in our recruitment system, perform pre-screening checks, send transactional SMS messages about the status of your application, and conduct interviews To administer your business account
Inferences	This is used to create a profile reflecting your restaurant preferences, dining preferences, customer characteristics, and behavior	Drawn from the other categories of Personal Information we collect	To manage the security of our Services To show you relevant ads while you are browsing the internet or using social media To improve our Services, set default options, and provide you with a better dining experience To inform you about other positions you may be interested in To determine if you might fit a job need of ours To detect and prevent fraud or illegal activity against you and/or us

Additional information collected from job applicants. We may collect your Personal Information if you apply to work for us, attend a recruitment event, or otherwise participate in the BBI recruitment process. This Personal Information may include information relating to your eligibility to work in your jurisdiction (such as immigration and/or visa status), and criminal records information obtained through background checks. Your Personal Information may be submitted through or processed by our service providers, who share your information with us. For example, if you choose to import Personal Information about yourself from other websites (such as LinkedIn) or use a chatbot to ask recruitment-related queries, send communications, or schedule interviews, your information may be processed by one or more of our service providers. We may also collect Personal Information from our service providers, including via referrals, recruitment agencies, and background screening providers.

Disclosures for business purposes. We may disclose Personal Information to our subsidiaries, affiliates, service providers, and contractors for business purposes as follows:

To process your transactions or requests for products or services
To perform services on our behalf (e.g., fulfilling orders, processing payments, supporting promotions, providing communications, web/cloud hosting, tech support)
To ensure security and integrity of Personal Information
To debug or identify and repair technical errors that impair existing intended functionality
For short-term, transient use, including, but not limited to, non-personalized advertising
For advertising and marketing purposes, including auditing related to ad impressions and
In connection with activities to verify or maintain the quality or safety of our products and services
To comply with applicable legal requirements, including disclosures concerning food safety and related health issues
To detect or protect against malicious, deceptive, fraudulent, or illegal activity

Although we do not sell Personal Information in exchange for money, some of the ways in which we disclose Personal Information for targeted advertising purposes may be considered “sales” or “sharing” under California law (where selling includes disclosures of Personal Information to third parties under circumstances where the third parties may use the information for their own purposes). You may opt out of this type of selling and/or sharing of your Personal Information by clicking on the “Do not sell or share my personal information” link in the footer of this website and adjusting your cookie preferences.

We do not have actual knowledge that we sell or share the Personal Information of consumers under the age of 16.

How Long We Keep Your Personal Information

We keep the categories of Personal Information described above for as long as is necessary for the purposes described in this California Notice or otherwise required or permitted by law. This generally means holding the information for as long as one of the following apply:

Your Personal Information is reasonably necessary to manage our operations, to manage your relationship with us, or to satisfy another purpose for which we collected the information;
Your Personal Information is reasonably necessary to carry out a disclosed purpose that is reasonably compatible with the context in which the Personal Information was collected;
Your Personal Information is reasonably required to protect or defend our rights or property (which will generally relate to applicable laws that limit actions in a particular case); or
We are otherwise required or permitted to keep your information by applicable laws or regulations.

Where information is used for more than one purpose, we will retain it until the purpose with the latest period expires. For more information about our retention policies, please contact us using the contact details below.

California Privacy Rights

California residents have certain rights that they may exercise independently or through an authorized agent. California rights requests are subject to an identification and verification process. We will not fulfill a CCPA request unless we have been provided sufficient information for us to reasonably verify that the requestor is the consumer about whom we have collected Personal Information.

In order to verify your identity, we may ask you to contact us from the email address or phone number associated with your request. Depending on the nature of your request, we may also ask you to provide 2-3 pieces of Personal Information that we will match against our records to confirm your identity. Please follow the instructions in any correspondence regarding your request, and promptly respond to any follow-up inquires. If you have requested that we provide you with specific pieces of Personal Information which BBI has about you, we will apply heightened verification standards.

An authorized agent may submit a request on behalf of a consumer if the consumer has provided the authorized agent with power of attorney in accordance with California law; alternatively, we will (1) require the authorized agent to present verifiable written authorization from the consumer that the authorized agent has the consumer’s permission to submit the request; and (2) independently verify the consumer’s own identity with us.

If we cannot comply with a request, we will explain the reasons in our response. You are not required to create an account with us to make a verifiable request, but you may use your account to do so. We will use Personal Information provided in your request only to verify your identity or authority to make the request and to track and document request responses unless you also provided the Personal Information to us for another purpose.

Your California privacy rights are described below. You or an authorized agent may make a request through our CCPA portal or by calling us at 866-265-0174.

Right To Know. You have the right to request that we disclose the following information about your Personal Information that we have collected about you. Consumer requests of this nature may be made no more than twice in a 12-month period.

The categories of Personal Information we have collected about you
The categories of sources from which we collected your Personal Information
The business or commercial purposes for collecting, selling, or sharing your Personal Information
The categories of recipients to whom we have disclosed your Personal Information
The specific pieces of Personal Information we have collected about you
A list of the categories of Personal Information disclosed for a business purpose in the prior 12 months
A list of the categories of Personal Information about you that was sold or shared in the prior 12 months, if any. If we sold your Personal Information, we will also list the categories of third parties to which we sold Personal Information, by categories of Personal Information sold for each third party

Right to Delete. Except to the extent we have a basis for retention under CCPA, you may request that we delete your Personal Information that we have collected directly from you and are maintaining.

Right to Correct Inaccurate Information. If you believe that Personal Information we maintain about you is inaccurate, you have the right to request that we correct that information.

Right to Opt Out of the Sale or Sharing of Personal Information. You have the right to opt out of the “sale” or “sharing” of your Personal Information and you may do so by indicating your opt out preferences through our cookie preference center which can be found on any of our websites. For more information on how we use cookies and other tracking technologies, please review our Privacy Policy.

Right to Non-Discrimination. We will not discriminate against you because you exercise your California privacy rights. This means that, consistent with California law, we will not deny providing our products or services to you, charge you different prices, or provide a different level or quality of products or services to you.

Notice of Financial Incentive

This Notice of Financial Incentive applies to our loyalty rewards program, Dine Rewards (“ Dine Rewards”). Currently, Dine Rewards offers discounts and coupons to members as rewards for dining at our restaurants. We reserve the right to terminate or change the Dine Rewards program at any time at our sole discretion.

Program Details

Incentive Offered	Material Terms	How to Opt-In
Your account earns points or credits for dining at eligible restaurants. Points are accumulated to earn rewards that may be redeemed for discounts on future purchases.	You can view the full terms and conditions for Dine Rewards here. Categories of PI Collected: o Identifiers (e.g., name, email address, telephone number, zip code, date of birth) o Customer Accounts/Commercial Information (e.g., purchase history) o Inferences from PI Collected (e.g., customer profiles including dining preferences, customer characteristics and behaviors)	You can join Dine Rewards by making an account at Dine-Rewards.com or in one of our apps. Alternatively, ask a server at one of our restaurants for help signing up.

Value of Consumer Data

We treat the value of Consumer data collected through Dine Rewards as the equivalent of relevant expenses related to the Collection and retention of Consumers' PI as part of Dine Rewards. The Financial Incentive we offer to Consumers through Dine Rewards reasonably relates to the value of the Consumer's data.

Withdrawal from the Program

You have the right to withdraw from Dine Rewards at any time. You may do so by contacting us at dinerewards@bloominbrands.com or 1-877-546-7407.

California's "Shine the Light" law

California's “Shine the Light” law permits California residents to request certain information regarding our disclosure of PI to third parties for their own direct marketing purposes.

We do not share customer Personal Information with third parties for their direct marketing purposes without giving you the ability to opt out. If you are a California resident, you may request information about our compliance with the Shine the Light law by contacting us at Privacy@BloominbBrands.com .

Contact Information

For more information regarding this California Notice or your California privacy rights, you may contact us toll-free at 866-265-0174 or email us at Privacy@BloominbBrands.com. You may also write to us at:

Attention: Legal Counsel

Bloomin' Brands, Inc.

2202 N. Westshore Blvd

Suite 500

Tampa, FL 33607

Effective Date: April 17, 2023