California Privacy Rights Summary Notice
Bath & Body Works respect your concerns about privacy. If you are a California consumer, the information on this California Privacy Rights Summary Notice (the “Summary Notice”) page applies to you. This Summary Notice explains the categories of personal information that we collect and how we use it; delivers information on certain California opt-out rights (under both the California Consumer Privacy Act, or “CCPA,” and the “Shine-the-Light” law) concerning disclosures or “sales” of information to third parties; and provides information on other California privacy rights.
Personal Information Collection
We may collect (and may have collected during the 12-month period prior to the effective date of this Policy) the following categories of personal information about you:
- Identifiers (personal) (including, for example, name, alias, postal address, unique personal identifier, online and device identifier, IP address, email address, account name and number, social security number, telephone number, postal address, or other similar identifiers).
- Identifiers (Government-Issued Identification Information) (including, for example, driver's license number or state identification card number).
- Commercial Information (including, for example, records of personal property; products or services purchased, obtained, or considered; marketing histories; purchasing histories or tendencies; purchase profiles; shopping and retail browsing channel preferences; online browsing and website interaction histories; and direct marketing histories).
- Personal characteristics, histories, and associations (including, for example, signature; physical characteristics or description; and characteristics of protected classifications under California or federal law).
- Computing or mobile-device information and internet or other electronic-network-activity information (including, for example, login credentials; online advertisement engagements; and cookies, tags, and similar device or user identifying information).
- Education and professional information.
- Financial information (including, for example, banking details and income level).
- Geolocation information.
- Inferences (including, for example, predictive information, purchase profiles, shopping profiles and characteristics (e.g., loyalty shopper, cardholder, or online shopper).
- Payment card and transaction information (including, for example, credit card number; debit card number, and other financial information).
- Household information (including, for example, family size and composition).
- Incident-related information (including, for example, statements; or insurance, or similar claims).
- Audio and visual information (including, for example, videos you upload with a review or in-store security cameras).
Personal Information Uses
During the last 12 months, we may have used the personal information we collect for the following business or commercial purposes:
- Facilitate accounting, auditing, and reporting.
- Deliver analytics (machine generated through computing/mobile devices for performance, monitoring, personalization, and order processing).
- Deliver advertising through technology (including, for example, to facilitate personalized content, remarketing, online display ads, and interest-based ads).
- Deliver advertising through direct or mass media (including, for example, via email, SMS, telephone, post, and broadcasts).
- Facilitate affiliate marketing.
- Administer claims management, handling, and insurance.
- Respond to incidents.
- Deliver customer service.
- Pursue legal matters.
- Deliver website, mobile-app, and e-commerce services.
- Facilitate information security.
- Facilitate fraud monitoring and prevention.
- Deliver logistics (including, for example, order management, shipping, and fulfillment).
- Develop customer information for personalization.
- Process, fulfill, and ship orders.
- Deliver shopping and customer engagement (including events and experiences, such as contests, sweepstakes, previews, and shows).
- Deliver social media engagement.
- Conduct surveys.
- Administer technology and ensure technology integrity (including, for example, by maintaining and improving networks; and identifying and fixing problems).
- Process transactions and payments.
- Develop, review, and test products and services.
- Deliver WiFi and similar online services (including in store-service).
- Perform miscellaneous services.
Opting Out of “Sales” Information
You also have the right to opt out of the “sale” of your personal information, as that term is defined under the CCPA. To specify your opt-out preferences, visit Do Not Sell My Personal Information. We will not deny, charge different prices for, or provide a different level or quality of goods or services, if you choose to exercise these rights.
Opting Out of Information Disclosures to Unaffiliated Third Parties
In addition to the rights mentioned above under California law, we provide you with a cost-free means to opt-out of our sharing your information with third parties with whom we do not share the same brand name, if that third party will use it for its own direct marketing purposes.
If you would like to exercise this right under California law, please submit a written request using our Third-Party Direct Marketing Opt-out Form by Clicking Here and select California Privacy Opt-Out for the Topic, then complete the form.
If you have general questions about this Summary Notice, contact us via:
ATTN: Privacy Matter
L Brands, Inc.
3 Limited Parkway
Columbus, OH 43230
This Summary Notice was last updated on July 1, 2020.