Brixmor Property Group Privacy Policy

This Privacy Policy provides an overview of the personal information Brixmor Property Group (“Brixmor”, “we”, “our”, or “us”) collects from you, how we use it, with whom we share it, and the choices you have in connection with this. 

 

APPLICABILITY OF PRIVACY POLICY

 

This Privacy Policy applies to any and all websites, mobile applications, or other digital products (the “Online Services”) made available by Brixmor and our offline services (collectively, the “Services”).

 

PERSONAL INFORMATION WE COLLECT, How We Use It, How Long We Keep It, and How We Share It

 

Through your use of our Services, we collect personal information, which is information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you. We will retain your information for as long as it is necessary for the purpose of the processing, unless we receive a request to delete this information and no exception to your right to deletion applies. We collect personal information from you directly and automatically as you use our Services as outlined below.  

 

• Apply for employment. When you apply for employment with Brixmor, we will collect and process your personal information as set forth in our Applicant Notice.

   

• Contact us. When you contact us, you will need to provide us with your personal identifiers (name, email address, and telephone number) and any other information you choose to include in your correspondence. We use this personal information to respond to your questions or inquiries, troubleshoot where necessary, and address any issues you have with the Services.

   

• Complete a tenant leasing application. For a tenant leasing application, we will collect, through our application tracking service provider portal, the applicant’s personal identifiers (name, physical address, email address, date of birth, telephone number, and signature), financial information (assets, liabilities, loans, mortgage account number, amounts, and tax information), sensitive identifiers (Social Security number, driver’s license number), and commercial information (property purchased, credit score). We use this personal information to assess your application, communicate with you, and conduct a credit check. We will share name, address, date of birth, and Social Security number with our third-party credit check provider. We will receive your personal identifiers (name), commercial information (loans, payment history, and status), and credit score from our third-party credit check provider. We use this personal information to assess your tenant leasing application.

 

• Pay rent. When you make a rent payment, we will collect your personal identifiers (name and address) and your customer records information to process your payment. Please note our payment processor collects and processes this personal information directly and Brixmor only maintains historical billing/collection information.

 

• Submit a lease inquiry. If you submit a leasing request, we will collect your personal identifiers (name, telephone number, and email address). We use this personal information to respond to your request and to communicate with you.

 

• Submit a maintenance request. If you submit a maintenance request, we will collect your personal identifiers (name, email address, and telephone number) and any additional information you choose to include in your request. We use this personal information to assess and process your maintenance request and to communicate with you.

 

• Subscribe to updates. When you subscribe to Brixmor email marketing updates we will collect your personal identifiers (email address). We use this personal information to send you email marketing updates from Brixmor. Our emails also contain cookies and other technologies that allow us to determine certain actions taken by the recipient, such as opens and clicks, and to provide targeted marketing (see Interact With Online Services section below for more information). To do so, our email provider collects Internet or other electronic network activity information associated with the email, such as IP address, time of retrieval, browser type, and operating system. You can disable this tracking at any time by blocking automatic loading of images in your email. If you no longer wish to receive our email marketing communications, you can click the “Unsubscribe” button at the bottom of each email.

 

• CCTV. When you enter certain properties or corporate offices, your visual information (recording of your movements) will be recorded on our CCTV security cameras. This information is collected to protect other individuals and our property. In the event of a crime committed on the property during the time your visual information is recorded on our CCTV security cameras, your visual information may be shared with law enforcement.

 

• Information collected from third party sources. We purchase aggregated and anonymized data of consumers from our advertising provider for data analytics and actionable insights. We use this aggregated and anonymized data to understand preferences and foot traffic to improve our Services. Our provider receives consumer information from mobile applications that have integrated with our provider’s technology. To change your consent to these practices, please visit your mobile application settings or location settings within your mobile device.

 

• Interact with the Online Services. In addition to the personal information you provide directly to us, we also collect information from you automatically as you use our Online Services via cookies, pixel tags, and similar tracking technologies. This includes the following internet or other electronic network activity information.
  • We use essential, performance, and analytics cookies, and similar technologies to collect your usage, device, and geolocation information (determined through your IP address) when you interact with the Online Services.  We use this information to: (i) provide the Services; (ii) track you within the Services; (iii) enhance user experience; (iv) conduct analytics to improve the Services; (v) prevent fraudulent use of the Services and detect unlawful activity; (vi) diagnose and repair the Services, and, in cases of abuse, track and mitigate the abuse; and (vii) provide targeted advertising. To opt out of targeted advertising or the sale of your personal information, please visit Do Not Sell or Share my Personal Information.
  • In general, you can also disable cookies by setting your browser to refuse cookies or indicate when a cookie is being sent. Please note, if you opt out of these targeted advertising cookies, your opt-out will be specific to the web browser, app, or device from which you accessed the opt-out. If you use multiple devices or web browsers, you will need to opt out of each browser or device that you use. To opt-out of interest-based advertising generally or to learn more, you can visit the Network Advertising Initiative or the Digital Advertising Alliance.
  • Particular online tracking technologies to note for users of our Online Services are below. To opt-out of the sale/sharing of your information through these tracking technologies, please visit Do Not Sell or Share My Personal Information.
    • DoubleClick. We utilize DoubleClick by Google to serve ads based on a user’s prior visits to our Job Portal. Each visitor to our Job Portal receives a different cookie, and the information collected by the cookie is used to generate conversion statistics and allows us to see the total number of individuals who clicked on our ads. DoubleClick enables Google and its partners to serve ads to you based on your visits to our Job Portal in addition to other websites on the Internet. Please review Google’s Privacy Policy for additional information on how Google uses the information collected. To opt out of the sale or sharing through cookies, please visit Google’s Ad Center.
    • Bing Ads.  Bing Ads is a remarketing service provided by Microsoft. We use Bing Ads to serve you advertisements based on your past visits to our Website. You can visit Microsoft to learn more about its privacy practices. To opt-out of Bing Ads, you can follow these instructions.
    • Pubmatic. This cookie is used to correlate IDs with those of Pubmatic partners (such as demand side platform clients or other advertising technology companies). Pubmatic passes information stored by the partner in this cookie to the partner when it is considering whether to purchase advertisements. This enables the partner to make better decisions about whether to display an advertisement to you.
    • Eventbrite. This cookie is associated with Eventbrite and is used to deliver content tailored to the end user’s interests and improve content creation. This cookie is also used for event-booking purposes.
    • Aggregate Knowledge. Aggregate Knowledge provides a data management platform which enables real time targeting and consumer profiling functionality.
    • Google reCAPTCHA Enterprise. Google’s reCAPTCHA Enterprise application is implemented on the Services. When you interact with the Services, reCAPTCHA Enterprise automatically collects your internet or other electronic network activity information (browsing history, mouse movements, clicks, time spent completing forms,) and your online identifiers (IP address, device information, operating system). This information is transmitted to Google to determine whether you are genuinely human or an automated “bot.” Google uses this information in accordance with its Privacy Policy and Terms of Service. We use this information only to protect the Services from unwanted spam and abusive, automated behavior.
    • Pippio. We use this cookie vendor to collect anonymous data related to the user’s visits to the website, such as the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.
    • Intentiq. Intentiq operates in the online advertising space, providing services that include user profiling and targeted advertising.
    • Rubicon Project. The cookie is used for recognizing the browser or device when users return to their site or one of their partner's sites. This cookie is set by rubiconproject.com. The cookie is used to store user data in an anonymous form such as the IP address, geographical location, websites visited, and the ads clicked.
    • Datonics. This domain is owned by Datonics, a USA based data broker selling data for online advertising segmentation.
    • TripleLift. This domain is owned by TripleLift, a USA based business providing programmatic native advertising services.
    • StickyAdsTV. This domain is owned by StickyAdsTV, a French company providing online video advertising services.
    • Unruly Media. This domain is owned by Unruly Media, part of News Corp.  It provides an online video advertising platform and services.
    • Lijit. This domain is owned by Federated Media Publishing. The main business activity is advertising.
    • RhythmOne. This domain is owned by RhythmOne, A USA-based targeted advertising company which also offers cross-device user tracking services.
    • YouTube. YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites.
    • Tapad. This domain is owned by Tapad Inc. a US based company that provides technology to track users across devices to enhance targeting capabilities.
    • Exelate. This domain is owned by Exelate. The main business activity is advertising data aggregation.
    • Simpli.fi. This domain is owned by simpli.fi. The main business activity is advertising.
    • Bombora. This domain is associated with Bombora, a company that provides B2B intent data for marketing and sales.
    • AppNexus. This domain is owned by AppNexus Inc. The company provides a range of online advertising technology and services.
    • Blue Kai. This domain is owned by Blue Kai. The main business activity is advertising/audience targeting.
    • OpenX. This domain is owned by OpenX. The main business activity is advertising.
    • Outbrain. This domain is owned by Outbrain, which describes itself as a content discovery platform.  It provides technology to help distribute content targeted to individual’s interests.
    • Sharethrough. This domain is owned by Sharethrough, a USA based company providing an online native advertising technology platform and services.
    • Lotame. This domain is owned by Lotame. The main business activity is data management platform – targeting/advertising.
    • Facebook Pixel. We use Facebook Pixel to customize our advertising and to serve you ads on your social media based on your browsing behavior. This allows your behavior to be tracked after you have been redirected to our Online Services by clicking on the Facebook ad. The Facebook Pixel stores a cookie on your device to enable us to measure the effectiveness of Facebook ads for statistical and market research purposes. We do not have access to the information collected through the Facebook Pixel. However, the information collected via the Facebook Pixel is also stored and processed by Facebook. Facebook may link this information to your Facebook account and also use it for its own promotional purposes in accordance with Facebook's Data Usage Policy. The Facebook Pixel also allows Facebook and its partners to show you advertisements on and outside of Facebook. You can opt-out of displaying Facebook ads and sharing by visiting your Facebook Ad Settings, and you can clear and control the information third parties share with Facebook in your Off-Facebook Activity page. If you do not have a Facebook account, you can opt-out of Facebook ads through the Digital Advertising Alliance. This may be a “sale” under the CPRA. To opt out of this sharing, please visit Do Not Sell or Share My Personal Information.
    • LinkedIn Insight Tag. We use the LinkedIn Insight Tag to receive campaign reporting and to help us gain insight about visitors to our Online Services. We use this information to track conversions and provide targeted advertising. You can opt-out of the LinkedIn Insight Tag in your LinkedIn settings page. This may be a “sale” under the CPRA. To opt out of this sharing, please visit Do Not Sell or Share My Personal Information. 
    • Google Analytics. We use Google Analytics to collect information on your use of our Online Services to improve our Online Services. In order to collect this information, Google Analytics may set cookies on your browser, or read cookies that are already there. Google Analytics may also receive information about you from applications you have downloaded that partner with Google. We do not combine the information collected through the use of Google Analytics with personally identifiable information. Google’s ability to use and share information collected by Google Analytics about your visits to our Online Services or to another application which partners with Google is restricted by the Google Analytics Terms of Use and Privacy Policy. To prevent your data from being used by Google Analytics, you can download the Google Analytics opt-out browser add-on. This may be a “sale” under the CPRA. To opt out of this sharing, please visit Do Not Sell or Share My Personal Information.
    • Google Tag Manager. Google Tag Manager is a tag management system to manage tags used for tracking and analytics on our Online Services. Tags are small code elements that, among other things, are used to manage traffic and visitor behavior and to test and optimize websites. We utilize Google Tag Manager to manage and organize all third-party tags on our Website and to control when those tags are triggered. You can view more information about Google Tag Manager’s privacy practices.

 

In our processing of your personal information, we may also use your personal information to defend our rights and the rights of others, to efficiently maintain our business, to comply with the law, and for other limited circumstances as described in HOW WE SHARE YOUR INFORMATION.

 

DATA RETENTION

 

When we determine that it is no longer reasonably necessary to retain your personal information for one or more disclosed operational purposes described above, we will delete your personal information. However, we may need to use and retain your personal information for longer than the periods indicated above for purposes of:

 

• Compliance with our legal obligations. For example, retaining your records for the purpose of accounting, dispute resolution, and compliance with labor, tax, and other laws and regulations.
• Meeting our safety and security commitments. Such as keeping our properties secure and preventing fraud.
• Exercising or defending legal claims. We also may need to retain information for longer than the terms in order to meet with legal process or enforceable governmental request.

 

 

HOW WE SHARE YOUR PERSONAL INFORMATION

 

A. General Sharing

 

In the preceding 12 months, Brixmor shares personal information in the following instances:

 

• Within Brixmor. We may share your personal information within the Brixmor corporate family, including with subsidiaries or affiliates, for legitimate business purposes, to efficiently carry out our business, and to the extent permitted by law.

 

• In the event of a corporate reorganization. In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as a reorganization, merger, acquisition, sale, joint venture, assignment, consolidation, transfer, change of control, or other disposition of all or any portion of our business, assets or stock, we would share personal information with third parties, including the buyer or target (and their agents and advisors) for the purpose of facilitating and completing the transaction. We would also share personal information with third parties if we undergo bankruptcy or liquidation, in the course of such proceedings.

 

• For legal purposes. We will share your personal information where we are legally required to do so, such as in response to court orders, law enforcement or legal process, including for national security purposes; to establish, protect, or exercise our legal rights, as required to enforce our terms of service or other contracts; to defend against legal claims or demands; to detect, investigate, prevent, or take action against illegal activities, fraud, or situations involving potential threats to the rights, property, or personal safety of any person; or to comply with the requirements of any applicable law.

 

B. Sharing in the Preceding Twelve (12) Months

 

For a Business Purpose. In the preceding twelve (12) months, Brixmor has disclosed the following categories of personal information for a business purpose to the following categories of third parties:

 

• With service providers for a business purpose. We have shared your personal identifiers, internet and other electronic network activity information, and financial information with service providers that assist us in providing the Services. These service providers include our payment processor, legal counsel, utility providers, communication provider, credit check provider, IT support, and website host.

 

• With IT support for a business purpose. Brixmor has disclosed your personal identifiers and internet and other electronic network activity information to our IT support to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, identify and repair errors, and to maintain and improve the Online Service.

 

For a sale/share.  Brixmor has sold or shared your internet or other electronic network activity information collected via cookies and other tracking technologies with data analytics providers and advertising partners. Such sharing may be deemed a sale under the California Consumer Privacy Act.  To opt-out of this sharing, please visit Do Not Sell or Share My Personal Information.

 

CORRECT OR VIEW YOUR PERSONAL INFORMATION

 

You can access your account to correct or view certain personal information of yours in our possession and which is associated with your Brixmor account.

 

MARKETING COMMUNICATIONS

 

You may opt-out of receiving marketing emails from us by clicking the “unsubscribe” link provided with each email. Please note that we will continue to send you emails necessary to the Services or any assistance you request. You may also unsubscribe on our website.

 

RIGHTS OF CALIFORNIA RESIDENTS

 

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (“CPRA”) (collectively, “CPRA”) grants certain rights to California residents. If our processing of your personal information is subject to the CPRA, you are entitled to the following rights:

• Right to access/know. You have the right to request what personal information we have collected, used, disclosed, and sold/shared about you within the preceding 12 months, unless doing so proves impossible or would involve disproportionate effort. You may only make a request for access twice within a 12-month period.
• Right to deletion. You have the right to request the deletion of your personal information that we collect or maintain, subject to certain exceptions. For example, if we are required by law to retain the information that you are asking be deleted, we would not be able to delete the information until we are legally permitted to delete it.
• Right to Correct. You have the right to correct inaccurate personal information that we collect or maintain.
• Right to opt-out of Sale/Sharing. You have the right to opt-out of the sale of your personal information to third parties. We do not share your personal information for money, however, we do share personal information with certain third parties, which may be considered a sale under the CCPA. Brixmor does not have actual knowledge that it sells personal information of minors under the age of 16 years.
• Right to non-discrimination. You have the right to not receive discriminatory treatment if and when you exercise your rights to access, delete, or opt-out under the CCPA.
• Right to Limit Use of Sensitive Personal Information. You have the right to limit the use of your sensitive personal information when such use goes beyond that which is necessary for providing the Services or certain other permissible purposes like fraud, customer service or quality control. Sensitive information includes Social Security number, driver’s license number, biometric information, precise geolocation, and racial and ethnic origin.  We do not use your sensitive information for any purpose other than the purpose for which it was collected.
• Right to Data Portability. You have the right to ask that we transfer the personal information you gave us, to you, or in certain cases, directly to another organization, in a format that is easily understandable and to the extent technically feasible, in a structured, commonly used, machine-readable format.
• Right to Opt Out of Targeted Advertising. You have the right to opt out of the processing of your personal information for targeted advertising purposes. To exercise your right, you may submit a request by completing our webform or by telephone at 800.468.7526.
• Right to limit use of sensitive personal information. You have the right to limit the use of how we use your sensitive personal information. We do not collect sensitive personal information, except financial account information, which we only use to process your purchase. However, Brixmor’s use of your sensitive personal information, if any, does not give rise to this right.
• Right to Appeal and File a Complaint. You have the right to appeal an action taken (or not taken) by Brixmor in response to your request. We will inform you of any action we have taken in response to your request without delay and, in any event, within forty-five (45) days after we receive your request. You can submit an appeal by completing our webform [hyperlink] or by telephone at 800.468.7526. If you believe your privacy rights have been violated, you can submit a complaint to the California Privacy Protection Agency at https://cppa.ca.gov/webapplications/complaint, or the California Attorney General at https://oag.ca.gov/contact/consumer-complaint-against-business-or-company.

 

To exercise your right to access/know, correct, or delete your personal information, you may submit a request by completing our webform or by telephone at 800.468.7526. To opt-out of the sharing of your internet or other electronic network activity information collected via cookies and other tracking technologies with data analytics providers and advertising partners, please visit Do Not Sell or Share My Personal Information, or, for California residents, utilize the opt out preference signal to instruct us to not sell or share any of your personal information collected online. The opt out preference signal will apply to the device, platform, or browser in which you utilize it. You can utilize the opt out preference signal by turning on the signal in your device, platform, or browser settings.

 

For requests submitted via telephone, you must provide us with sufficient information that allows us to reasonably verify you are the person about whom we collected the personal information and describe your request with sufficient detail to allow us to properly evaluate and respond to it. If we are not able to verify your identity for access and deletion requests with the information provided, we may ask you for additional pieces of information. The interactive webform contains the information we require to process your request.  

 

Only you, or a person that you authorize to act on your behalf, may make a request related to your personal information. If you are an authorized agent making a request on behalf of another individual, you must provide us with signed documentation that you are authorized to act on behalf of that individual.

 

DO NOT TRACK

 

We do not support Do Not Track (DNT). Do Not Track is a preference you can set to inform websites and applications that you do not want to be tracked.

 

SECURITY OF YOUR PERSONAL INFORMATION

 

We implement and maintain reasonable security measures to protect the personal information we collect and maintain. These security measures include encryption, access controls, and employee training. However, no security measure or modality of data transmission over the Internet is 100% secure and we are unable to guarantee the absolute security of the personal information we have collected from you.

 

AGE RESTRICTIONS

 

The Services are not intended for individuals under the age of eighteen (18). If we learn that we have collected or received personal information from a child under the age of eighteen (18), we will delete that information. If you believe we might have any information from or about a child under the age of eighteen (18), please contact us at [email protected].

 

CHANGES TO THIS PRIVACY POLICY

 

We may amend this Privacy Policy in our sole discretion. We will post the changes to this page, and will indicate the date the changes go into effect. We encourage you to review our Privacy Policy to stay informed. If we make changes that materially affect your privacy rights, we will notify you by prominent posting on our Online Services or obtaining your consent, if required.

 

CONTACT US

 

If you have any questions regarding this Privacy Policy, please contact us at [email protected].