Canada Job Applicant Privacy Notice

Last Updated: March 2026

AFH Canada Stores Co. (“A&F,” “we,” “our,” “us”) respect your concerns about privacy. This Privacy Notice describes the types of personal information (i.e., information about you or that can be used to identify you) we collect in connection with our recruitment and hiring activities, how we may use the information, and with whom we may share it. This Privacy Notice also describes the choices available regarding our use of the information and how you can contact us about our privacy practices.

The entity responsible for the processing of your personal information as described in this Privacy Notice is the A&F entity for which you apply or are recruited for a job. Any reference to “applicant,” “you,” or “your” means you, the job applicant or candidate.

Contents

• Basis for our Collection, Use, and Disclosure
• How We Collect and Use Your Information
  • Types of Information Collected and Processed
  • Purposes of the Processing
  • Justification for Processing
• Information Shared with or Collected Directly by Third Parties
• Storage of Data
• Your Rights
• Updates to this Notice
• Questions About Privacy

Basis for our Collection, Use and Disclosure

We only collect your personal information with your consent, which may be express (e.g., you check a box or sign a document allowing us to) or implied (e.g., where we are allowed to reasonably assume consent from your actions, such as when you submit your resume to apply for a job).

In certain cases, the law allows us to collect, use or disclose your personal information without your consent (such as in an emergency, for fraud prevention, or for other reasons that are set out in law).

How We Collect and Use Your Information

Generally speaking, we will collect your personal information directly from you (e.g. when you provide it to us).

To the extent A&F obtains sensitive personal information about you, we will obtain your consent to the extent required under applicable law and will comply with other relevant legal requirements regarding such information.

Please note that if you do not provide us with certain required personal information, A&F may not be able to consider your application.

Information Shared with or Collected Directly by Third Parties

A&F takes precautions to allow access to your personal information only to those associates who require such access to perform their job duties and to third parties who have a legitimate purpose for access to such personal information.

1. Group Entities: Your personal information may be shared with A&F’s group entities for purposes consistent with this Notice.

2. Service Providers: A&F may appoint third parties to provide services to us or on our behalf, such as background checks, travel agencies, recruiting agencies, record retention vendors, or other service providers who help us carry out the purposes listed above. Such third parties may have access to your personal information to provide services to A&F.

Any service providers engaged by A&F will have access to your personal information solely to the extent necessary to enable them to perform those services on A&F’s behalf and A&F will ensure that they are contractually prohibited from using such data for any other purpose.

All service providers must enter into a services agreement or Confidentiality and non-Disclosure Agreement with A&F whereby they are required to appropriately safeguard the privacy and security of the personal information they process on behalf of A&F.

3. Other third parties: A&F may also disclose your personal information with third parties where it is: (i) necessary to comply with the law or to protect the safety of A&F Associates; (ii) to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims; (iii) to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person; (iv) in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution, or liquidation  or (v) as otherwise required or permitted by law.

4. Transferring Data Outside Canada: In case of 1, 2, or 3 above, a transfer of your personal information may take place to countries outside of Canada (or, if you are a resident of Quebec, locations outside of Quebec), such as the United States, whose laws may not provide for the same level of protection to your personal information. We will therefore ensure – where necessary – that all adequate safeguards are in place and that all applicable laws and regulations are complied with in connection with such transfer. You may request a copy of the safeguards that we have put in place in respect of transfers of personal information by contacting us as described in the Questions About Privacy section below.

Storage of Data

The time period for which we keep personal information depends on the purpose for which we collected it. In all cases we keep it for as long as necessary to fulfil the purposes for which we collected it and in line with our Records Retention Policy, which is available on the Abercrombie & Fitch SharePoint website (Tools and Resources  Policies). The Records Retention Policy considers all relevant legal obligations and lawful data retention practices to determine the applicable retention period for each category of data, including personal information. Once personal information has reached the end of its retention period, we will then delete the personal information, unless we are legally required to retain it or if we need to retain it in order to comply with our legal obligations.

Your Rights

Under the conditions set out under applicable law, you have the following rights:

1. Right of access: You have the right to obtain from us confirmation as to whether or not personal information concerning you is being processed, and, where that is the case, to request access to the personal information. The access information includes – inter alia – the purposes of the processing, the categories of personal information concerned, and the recipients or categories of recipients to whom the personal information have been or will be disclosed.
   
   Where you  have the right to obtain a copy of the personal information undergoing processing, we will provide you with one. For additional copies requested by you, we may charge a reasonable fee based on administrative costs.

2. Right to rectification: You have the right to obtain from us the rectification of inaccurate personal information concerning you. Depending on the purposes of the processing, you have the right to have incomplete personal information completed, including by means of providing a supplementary statement.

3. Right to deletion): You have the right to ask us to destroy your personal information. In Quebec, where applicable, you have the right to have your information de-indexed from internet search results.

4. Right to data portability: Residents of Quebec have the right to receive the personal information concerning you which you have provided to us in a structured, commonly used and machine-readable format and you have the right to transmit those personal information to another entity without hindrance from us.

5. Right to withdraw your consent: You have the right to withdraw your consent at any time and in most cases, we will no longer process your personal information. However, if the processing of your personal information is necessary to take steps prior to entering into a contract or to perform a contract already concluded, we may not be able to do so. In addition, in cases where your personal information is necessary to the service , if you withdraw your consent, we may no longer be able to provide you with that service.

Please refer any of your questions to us per the contact details provided in the below section “Questions about Privacy”.

Updates to Privacy Notice

This Notice may be updated periodically to reflect any necessary changes in A&F’s privacy practices. In such case, A&F will inform Associates via email or on its Intranet of any significant changes to its Policy and indicate at the top of the Policy when it was most recently updated.

Questions about Privacy

If you have any questions, comments or concerns regarding our privacy practices or our legal compliance, please email us at privacy@anfcorp.com or write to us at the address set out below:

Attn: Legal-Privacy Team
Abercrombie & Fitch
6301 Fitch Path
New Albany, Ohio 43054 US