The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (“CPRA”) (collectively, “CPRA”) grants certain rights to California residents. If our processing of your personal information is subject to the CPRA, you are entitled to the following rights:
- Right to access/know. You have the right to request what personal information we have collected, used, disclosed, and sold/shared about you within the preceding 12 months, unless doing so proves impossible or would involve disproportionate effort. You may only make a request for access twice within a 12-month period.
- Right to deletion. You have the right to request the deletion of your personal information that we collect or maintain, subject to certain exceptions. For example, if we are required by law to retain the information that you are asking be deleted, we would not be able to delete the information until we are legally permitted to delete it.
- Right to Correct. You have the right to correct inaccurate personal information that we collect or maintain.
- Right to opt-out of Sale/Sharing. You have the right to opt-out of the sale of your personal information to third parties. We do not share your personal information for money, however, we do share personal information with certain third parties, which may be considered a sale under the CCPA. Brixmor does not have actual knowledge that it sells personal information of minors under the age of 16 years.
- Right to non-discrimination. You have the right to not receive discriminatory treatment if and when you exercise your rights to access, delete, or opt-out under the CCPA.
- Right to Limit Use of Sensitive Personal Information. You have the right to limit the use of your sensitive personal information when such use goes beyond that which is necessary for providing the Services or certain other permissible purposes like fraud, customer service or quality control. Sensitive information includes Social Security number, driver’s license number, biometric information, precise geolocation, and racial and ethnic origin. We do not use your sensitive information for any purpose other than the purpose for which it was collected.
- Right to Data Portability. You have the right to ask that we transfer the personal information you gave us, to you, or in certain cases, directly to another organization, in a format that is easily understandable and to the extent technically feasible, in a structured, commonly used, machine-readable format.
- Right to Opt Out of Targeted Advertising. You have the right to opt out of the processing of your personal information for targeted advertising purposes. To exercise your right, you may submit a request by completing our webform below or by telephone at 800.468.7526.
- Right to limit use of sensitive personal information. You have the right to limit the use of how we use your sensitive personal information. We do not collect sensitive personal information, except financial account information, which we only use to process your purchase. However, Brixmor’s use of your sensitive personal information, if any, does not give rise to this right.
- Right to Appeal and File a Complaint. You have the right to appeal an action taken (or not taken) by Brixmor in response to your request. We will inform you of any action we have taken in response to your request without delay and, in any event, within forty-five (45) days after we receive your request. You can submit an appeal by completing our webform below or by telephone at 800.468.7526. If you believe your privacy rights have been violated, you can submit a complaint to the California Privacy Protection Agency at https://cppa.ca.gov/webapplications/complaint, or the California Attorney General at https://oag.ca.gov/contact/consumer-complaint-against-business-or-company.
To exercise your rights, you may submit a request by completing our webform below or by telephone at 800.468.7526. For requests submitted via telephone, you must provide us with sufficient information that allows us to reasonably verify you are the person about whom we collected the personal information and describe your request with sufficient detail to allow us to properly evaluate and respond to it. If we are not able to verify your identity for access and deletion requests with the information provided, we may ask you for additional pieces of information. The interactive webform contains the information we require to process your request.
Only you, or a person that you authorize to act on your behalf, may make a request related to your personal information. If you are an authorized agent making a request on behalf of another individual, you must provide us with signed documentation that you are authorized to act on behalf of that individual.