Skip to main content

Privacy Policy

We're committed to your privacy.

The Macerich Company Business to Business Privacy Policy


Table of Contents

  1. What Information Does Macerich Collect?
  2. How does Macerich use Information?
  3. Do we share your Information with any Third Parties?
  4. How We Store Your Information.
  5. Access to Other Websites
  6. Your Responsibility
  7. California Legal Disclosures; California Consumer Privacy Act
  8. Additional Policies in Compliance with the EEA Privacy Laws
  9. Contact Us
  10. Conditions of Use and Changes to Our Privacy Policy


Business to Business Privacy Policy

This Business to Business Privacy Policy (“Privacy Policy”) applies to all tenants and all companies engaging in a business transaction with The Macerich Company, its affiliates and subsidiaries (collectively "Macerich" “we”, “us” or the "Company”) and explains how we collect, use, and share your information, including how you can access and update your personal information. This Privacy Policy is designed for businesses and is not intended for individuals’ personal, family or household use. Macerich’s consumer privacy policy is available at macerich.com/privacy and applies to any individuals, family or households. Our websites (the “Websites”), mobile applications (the “Applications”), the shopping centers (collectively, the “Centers” and each individually, the “Center”) and Internet-based portals and other resources (the “Web Services”; collectively, with the Websites, Centers, Applications and individually, the “Site”) contain the most up to date consumer privacy policy in effect and any changes that may have been made to it. We treat all information collected for leasing premises, joint venture partnerships, sponsorships, marketing transactions, and any other business relationship related thereto as pertaining to individuals acting as business representatives, rather than in their personal capacity.

As our services evolve and we perceive the need or desirability of using your Information (as defined below) collected in other ways, we may from time to time amend this Privacy Policy. The effective date appears at the end of this Privacy Policy.

1. What Information Does Macerich Collect?

We collect information that is provided as part of business discussions, contract negotiations, contract management, or otherwise provided to us when you contact us in person, by physical delivery (e.g., mail or courier) through email, or via the Site. You can choose not to provide certain information, but then you might not be able to enter into or maintain a business relationship with us.

For purposes of this Privacy Policy, “Information” means information (whether stored electronically or in paper based filing systems) that could identify you or one of your principals, employees or contractors, such as name, address, telephone number, mobile number, email address, Social Security Number, Employer Identification Number, bank account information, and criminal and civil background check. We may also collect this type of information from you about others, such as employees, owners, contractors, guarantors or partners (some of whom may be family members) when necessary to maintain our business relationship. We also collect information such as demographic data, data about your online activity, and other information that is not used to identify you.

Macerich collects only that Information that is relevant for the purposes for which the data is requested.

Information You Give Us

Legal Documentation. When entering into a legal agreement with us, including without limitation, a lease, license, service agreement, guarantee or any other legal agreement, you may provide contact information, including name, address, email address, phone number, employer identification number, social security number, bank account information, tax returns and any other financial information reasonably requested by us.

Communications with Macerich. If you provide feedback through a form (whether online or in-mall) or contact us via e-mail, we will collect your name and e-mail address, as well as any other content or information you provide. In addition, we may obtain your employee’s contact numbers, names and e-mail addresses through these communications.

Information We Collect About You

When you visit our Site, our web server automatically collects and stores the following information:

Technical Information. Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your location, referring website address, media access control address (MAC), browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our Site (including date and time), pages on our Site you viewed; page response times, download errors, duration of page visits, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any phone number used to call our customer service number.

Video Recording. Macerich places video cameras at certain Centers. Macerich uses these cameras to photograph individuals and analyze the photographs for security purposes, traffic counting and to assess demographic data, which may include age and gender. This may include photographs of individuals who are visiting those Centers for business purposes. Information obtained from video cameras may include photographs of your employees, contractors, suppliers and vendors. We use this information to optimize shopping experiences at our Centers, and for marketing, strategic and security purposes. Due to the nature of such technology, we cannot exclude those individuals from being photographed or videotaped while on any Center. Photographs and videos of individuals are generally deleted after 30 days, although such photographs or videos may be retained longer if requested by law enforcement or if Macerich believes such photographs or videos may be needed in an investigation or legal proceeding. Macerich generally does not make any attempt to identify the individuals whose images are captured, unless a suspected criminal incident occurs necessitating the identification of a specific individual.

Location Information. We also employ in some Centers other mobile data technology to observe how individuals travel through our malls, assess the duration of time they are on our Centers, count the total numbers of individuals by hour, by entrance and other zones within the Center, and detect whether the individuals is a repeat visitor and the frequency of his or her visits. We employ these technologies directly and through software platforms developed and implemented by third parties. These technologies use signals broadcast from a smartphone or other mobile device and the device's MAC address, together with the time, signal strength and location of the observing sensor. This may be accomplished using Wi-Fi access points from any guest Wi-Fi we may offer at the Centers, regardless of whether you use such Wi-Fi, or using Wi-Fi sensors provided by a Macerich service provider. By the nature of these technologies, we would collect this information regarding individuals who are visiting Centers for business purposes. We use such information for marketing, strategic and security purposes. If you, your employees or agents want to avoid any collection of data by means of such mobile device detection technology, you should ensure all mobile devices you may be carrying are fully powered off at all times while on our property.

License Plate Recording. At certain Centers, Macerich photographs and records license plate numbers of shoppers and others who use our parking facilities, which may include individuals visiting the Centers for business purposes. This may include license plate numbers of your employees, contractors, suppliers and vendors. Macerich collects that information to assist drivers in locating their automobiles; to monitor available space in parking structures; and in certain locations, to facilitate automatic or cashless parking charges.

Information We Receive from other Sources

We also receive information about you from third parties who operate other Sites or services we use to provide our products and services to customers, as well as third parties who provide services to us or operate software platforms which we use in our business operations. We work closely with third parties, including, for example, business partners, promoters, affiliates, and sub-contractors in technical, payment and delivery services, advertising networks, marketing analytics providers, promotions, and search information providers.

Cookies. When you use our Site, we may collect information by automated means, such as through using technologies like cookies, web server logs, web beacons, and JavaScript. For additional information regarding cookies and other ways we collect information automatically, link to our Cookie Policy (open in new window). By visiting our Site you explicitly agree to our collection and use of this data.

Device Information. We collect data about the browsers and devices you use. The data we collect includes browser or device model and settings, operating systems, unique identifiers and the version of the app you’re using. We also collect data about how your browsers and device interact with our services, including IP address and system activity.

Social Networks. We may also collect information you post at other areas of the Site, such as public areas of social media platforms including message boards, blogs and reviews.

Back to table of contents

2. How does Macerich use Information?

General. We use your information for various reasons, including to:

Information you give to us.

We will use this information:

Information We Collect about You.

We will use this information:

Information we receive from other sources.

We will combine this information with information you give to us and information we collect about you. We will use this information and the combined information for the purposes set out above (depending on the types of information we receive).

Back to table of contents

3. Do we share your Information with any Third Parties?

We partner with third parties to provide some of the services and products available on our Site and at our events. We sometimes disclose your Information to those third parties, and they sometimes collect your Information in the first instance and provide it to us. All of these third parties use your Information only on behalf of Macerich and under the instructions of Macerich on how your Information may be used and processed. Macerich and our partners will use your Information for limited purposes as specified in this Privacy Policy (see Section 2). Macerich has written agreements with these third parties in which they agree to limit their use of your Information and agree to provide protections for your Information.

We may also disclose your Information to third parties in the following circumstances:

Whenever we share information with third parties, we will take steps to ensure that the third parties put in place adequate measures to safeguard your Information, and they will be required to use any Information for only the intended purpose for which it was shared.

Back to table of contents

4. How We Store Your Information.

Macerich uses reasonable and appropriate measures to protect your Information from loss, misuse and unauthorized access, disclosure, alteration and destruction, taking into account the risks involved in the processing undertaken and the nature of the Information we collect.

We will keep your Information for as long as we need it, or as otherwise prescribed by law, for the purposes set out above. This period will vary depending on your interactions with us. We may also keep a record of correspondence with you for as long as is necessary to enforce our legal rights arising out of our relationship.

Back to table of contents

5. Access to Other Websites

Our Site may include links to and from other websites of our partner networks and affiliates, or from entities who provide services to us or our Centers. If you follow a link to any of these websites, please note that these websites are not covered by this Privacy Policy. We are not responsible for the privacy practices of any third parties or the content of linked sites although we do encourage you to read the applicable privacy policies and terms and conditions of such parties or websites. This Privacy Policy only applies to how Macerich deals with your Information, and it does not apply to any other company or any other company’s websites even if you access them via our Site. Please check those websites’ policies before you submit any Information to them.

Back to table of contents

6. Your Responsibility

Although we will protect your privacy on the Site as described in this Privacy Policy, you should keep in mind that if you voluntarily disclose Information online or in person, that information may be accessible to others. This is also true if anyone else has access to your personal computer, such as an employer or family member. Additionally, this Privacy Policy is incorporated into Macerich’s Terms of Use (open in new window) by reference. It is your responsibility to adhere to the requirements of the Terms of Use (open in new window) upon any use of the Site.

Back to table of contents

7. California Legal Disclosures; California Consumer Privacy Act

Under the California Consumer Privacy Act of 2018, California residents have certain rights regarding their data. Since the Information we collect or obtain from you is collected or obtained within a business context, your information rights are different from non-business consumers. You may separately have rights under the CCPA. For more information on CCPA, click here (open in new window).

Back to table of contents

8. Additional Policies in Compliance with the EEA Privacy Laws

In addition to the other policies described in this Privacy Policy, residents of the European Union or the EEA are afforded the following additional rights and protections as required by the General Data Privacy Regulation (“GDPR”). The additional rights and protections set forth in this section of this Privacy Policy apply only to residents of the European Union or the EEA.

GDPR Definitions

The following additional definitions apply to this Section of the Privacy Policy:

“Controller” means the Company which is the organization that determines the purposes for which, and the manner in which, any Information is Processed and used in its business.

“Processor” means any Person Processing Information.

“Person” means a natural person, corporation, association, organization, partnership, or other legal entity.

“Processing” is any activity that involves use of the Information. It includes, without limitation, obtaining, recording or holding the Information, or carrying out any operation or set of operations on the Information including organizing, amending, retrieving, using, disclosing, erasing or destroying it. Processing also includes transferring Information to third parties.

The legal basis for processing your Information

In order to comply with the GDPR, we are required to set out the legal basis for the processing of your Information. In accordance with the purposes for which we collect and use your Information, as set out above, the legal basis for processing your Information will typically be one of the following:

Where we store your Information

The data that we collect from you is stored on our servers or on servers provided by cloud service providers, such as Amazon Web Services. If you are a resident of the EEA, your Information may be transferred within or outside the EEA to areas where privacy laws may be less strict than in the EEA. By submitting your Information, you agree to this transfer, storing, and processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

The transmission of information via the Internet is not completely secure. Although we take reasonable efforts to protect your Information, we cannot guarantee the security of your data transmitted to our Site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.

Addendum to how long we store your Information

In some cases, there is a legal requirement to keep Information for a minimum period of time. Except in those circumstances, we do not keep your Information for any longer than is necessary for the purposes for which the Information was collected or for which it is to be further processed.

Your rights with respect to your Information

Subject to certain exceptions, you have the following rights with respect to your Information:

All of these rights are subject to certain conditions and exemptions. For example, Macerich will not be obligated to erase your Information if we need to retain it to protect ourselves in the event of a legal claim.

To exercise any of these rights, please submit a written request to us using the contact information set forth below. The Company reserves the right to charge a fee in dealing with such a request as permitted by applicable law and regulations. You may also opt out of receiving additional marketing information by using the unsubscribe feature in any marketing email we send you.

Back to table of contents

9. Contact Us

This Site is owned and operated by Macerich. If you have any questions or suggestions with respect to this Privacy Policy or our privacy practices, please e-mail us at privacy@macerich.com, call us at 1-866-686-3246, or you can contact us by mail at:

The Macerich Company
401 Wilshire Blvd., Suite 700
Santa Monica, CA 90401
Attn: Privacy Office
Back to table of contents

10. Conditions of Use and Changes to Our Privacy Policy

If you have any concern about our privacy practices, please contact us with a thorough description, and we will try to resolve it. As our business changes, our Privacy Policy and Terms of Use (open in new window) may change also. We reserve the right to amend the Privacy Policy at any time to reflect changes to our practices or the law. We may e-mail periodic reminders of our notices and conditions, but you should check our Site frequently to see recent changes. Unless stated otherwise, our current Privacy Policy applies to all information that we have about you and your account.

Updated: December 4, 2020
Effective: December 4, 2020