Notice to California Residents

JCPenney’s Privacy Notice covers our information practices for the last 12 months regarding the categories of personal information we have collected (under the Types of personal information we collect" and "How we collect your personal information" section of the Privacy Notice) and the purpose for which we collect your information (under the "How we use your personal information") and with whom we share your personal information (under the "Disclosure of personal information with others" section of the Privacy Notice). Click here to opt-out of the sale or share of your personal information. JCPenney may place an “opt-out” cookie on your device if you choose to opt-out. Therefore, your browser must be set to accept cookies. In addition, you will need to exercise your opt-out should you visit www.jcpenney.com or our app on a different device.

Under the California Privacy Rights Act, as amended (the “CPRA”), a California consumer may have access to certain privacy rights. Click here to learn about your privacy rights and if you want to exercise any of the privacy rights you may do so by going to this link - Data Subject Rights Request.

Data Subject Rights Requests from California Consumers

JCPenney processed requests from California consumers with respect to the rights described herein and has compiled the numbers as follows:

	Requests for Access	Requests to Delete	Requests to Opt-Out	Requests to Correct
Received	13	125	700	16
Complied with, in whole or in part	9	93	549	15
Denied*	3	20	0	0
Invalid**	1	12	151	1
Median response	12 days	21 days	1 day	1 day

*Where we were unable to verify the consumer in our systems.

**Where consumers did not complete steps to verify their identity.