We're committed to your privacy.
Table of Contents
We collect information that is provided as part of business discussions, contract negotiations, contract management, or otherwise provided to us when you contact us in person, by physical delivery (e.g., mail or courier) through email, or via the Site. You can choose not to provide certain information, but then you might not be able to enter into or maintain a business relationship with us.
Macerich collects only that Information that is relevant for the purposes for which the data is requested.
Information You Give Us
Legal Documentation. When entering into a legal agreement with us, including without limitation, a lease, license, service agreement, guarantee or any other legal agreement, you may provide contact information, including name, address, email address, phone number, employer identification number, social security number, bank account information, tax returns and any other financial information reasonably requested by us.
Communications with Macerich. If you provide feedback through a form (whether online or in-mall) or contact us via e-mail, we will collect your name and e-mail address, as well as any other content or information you provide. In addition, we may obtain your employee’s contact numbers, names and e-mail addresses through these communications.
Information We Collect About You
When you visit our Site, our web server automatically collects and stores the following information:
Technical Information. Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your location, referring website address, media access control address (MAC), browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our Site (including date and time), pages on our Site you viewed; page response times, download errors, duration of page visits, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any phone number used to call our customer service number.
Video Recording. Macerich places video cameras at certain Centers. Macerich uses these cameras to photograph individuals and analyze the photographs for security purposes, traffic counting and to assess demographic data, which may include age and gender. This may include photographs of individuals who are visiting those Centers for business purposes. Information obtained from video cameras may include photographs of your employees, contractors, suppliers and vendors. We use this information to optimize shopping experiences at our Centers, and for marketing, strategic and security purposes. Due to the nature of such technology, we cannot exclude those individuals from being photographed or videotaped while on any Center. Photographs and videos of individuals are generally deleted after 30 days, although such photographs or videos may be retained longer if requested by law enforcement or if Macerich believes such photographs or videos may be needed in an investigation or legal proceeding. Macerich generally does not make any attempt to identify the individuals whose images are captured, unless a suspected criminal incident occurs necessitating the identification of a specific individual.
Location Information. We also employ in some Centers other mobile data technology to observe how individuals travel through our malls, assess the duration of time they are on our Centers, count the total numbers of individuals by hour, by entrance and other zones within the Center, and detect whether the individuals is a repeat visitor and the frequency of his or her visits. We employ these technologies directly and through software platforms developed and implemented by third parties. These technologies use signals broadcast from a smartphone or other mobile device and the device's MAC address, together with the time, signal strength and location of the observing sensor. This may be accomplished using Wi-Fi access points from any guest Wi-Fi we may offer at the Centers, regardless of whether you use such Wi-Fi, or using Wi-Fi sensors provided by a Macerich service provider. By the nature of these technologies, we would collect this information regarding individuals who are visiting Centers for business purposes. We use such information for marketing, strategic and security purposes. If you, your employees or agents want to avoid any collection of data by means of such mobile device detection technology, you should ensure all mobile devices you may be carrying are fully powered off at all times while on our property.
License Plate Recording. At certain Centers, Macerich photographs and records license plate numbers of shoppers and others who use our parking facilities, which may include individuals visiting the Centers for business purposes. This may include license plate numbers of your employees, contractors, suppliers and vendors. Macerich collects that information to assist drivers in locating their automobiles; to monitor available space in parking structures; and in certain locations, to facilitate automatic or cashless parking charges.
Information We Receive from other Sources
We also receive information about you from third parties who operate other Sites or services we use to provide our products and services to customers, as well as third parties who provide services to us or operate software platforms which we use in our business operations. We work closely with third parties, including, for example, business partners, promoters, affiliates, and sub-contractors in technical, payment and delivery services, advertising networks, marketing analytics providers, promotions, and search information providers.
Device Information. We collect data about the browsers and devices you use. The data we collect includes browser or device model and settings, operating systems, unique identifiers and the version of the app you’re using. We also collect data about how your browsers and device interact with our services, including IP address and system activity.
Social Networks. We may also collect information you post at other areas of the Site, such as public areas of social media platforms including message boards, blogs and reviews.Back to table of contents
We will use this information:
We will use this information:
We will combine this information with information you give to us and information we collect about you. We will use this information and the combined information for the purposes set out above (depending on the types of information we receive).Back to table of contents
We may also disclose your Information to third parties in the following circumstances:
Whenever we share information with third parties, we will take steps to ensure that the third parties put in place adequate measures to safeguard your Information, and they will be required to use any Information for only the intended purpose for which it was shared.Back to table of contents
Macerich uses reasonable and appropriate measures to protect your Information from loss, misuse and unauthorized access, disclosure, alteration and destruction, taking into account the risks involved in the processing undertaken and the nature of the Information we collect.
We will keep your Information for as long as we need it, or as otherwise prescribed by law, for the purposes set out above. This period will vary depending on your interactions with us. We may also keep a record of correspondence with you for as long as is necessary to enforce our legal rights arising out of our relationship.Back to table of contents
Under the California Consumer Privacy Act of 2018, California residents have certain rights regarding their data. Since the Information we collect or obtain from you is collected or obtained within a business context, your information rights are different from non-business consumers. You may separately have rights under the CCPA. For more information on CCPA, click here (open in new window).Back to table of contents
“Controller” means the Company which is the organization that determines the purposes for which, and the manner in which, any Information is Processed and used in its business.
“Processor” means any Person Processing Information.
“Person” means a natural person, corporation, association, organization, partnership, or other legal entity.
“Processing” is any activity that involves use of the Information. It includes, without limitation, obtaining, recording or holding the Information, or carrying out any operation or set of operations on the Information including organizing, amending, retrieving, using, disclosing, erasing or destroying it. Processing also includes transferring Information to third parties.
In order to comply with the GDPR, we are required to set out the legal basis for the processing of your Information. In accordance with the purposes for which we collect and use your Information, as set out above, the legal basis for processing your Information will typically be one of the following:
The transmission of information via the Internet is not completely secure. Although we take reasonable efforts to protect your Information, we cannot guarantee the security of your data transmitted to our Site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.
In some cases, there is a legal requirement to keep Information for a minimum period of time. Except in those circumstances, we do not keep your Information for any longer than is necessary for the purposes for which the Information was collected or for which it is to be further processed.
Subject to certain exceptions, you have the following rights with respect to your Information:
All of these rights are subject to certain conditions and exemptions. For example, Macerich will not be obligated to erase your Information if we need to retain it to protect ourselves in the event of a legal claim.
To exercise any of these rights, please submit a written request to us using the contact information set forth below. The Company reserves the right to charge a fee in dealing with such a request as permitted by applicable law and regulations. You may also opt out of receiving additional marketing information by using the unsubscribe feature in any marketing email we send you.Back to table of contents
Updated: December 4, 2020
Effective: December 4, 2020