Privacy Notice
Effective: March 14, 2023
If you are not a U.S. resident, please see our Privacy Notice here .
INTRODUCTION
This Privacy Notice describes the types of personal information Westfield, LLC and its affiliates (“ Westfield”) collect, how that personal information is used and disclosed, and your rights and choices regarding our use of your personal information, including how you can access, correct, and delete your personal information.
This Privacy Notice applies if you are a U.S. resident. It explains our privacy and information practices for our websites, mobile applications, emails, and other online services we control (together “ Online Services”), our physical shopping centers (“ Centers”) (together, the “ Services”), and other locations we control subject to this Privacy Notice. Some regions provide additional rights by law. For California-specific terms, please click here .
Your use of the Services is also governed by the Terms and Conditions , and any other applicable terms and agreements, such as the SMS Terms and Conditions .
Please read the complete Privacy Notice below, and contact us if you have any questions.
PERSONAL INFORMATION WE COLLECT
In this section, we describe how we collect personal information about you. By personal information, we mean any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. Personal information does not include anonymous or non-personal information (i.e., information that cannot be associated with or traced back to a specific individual or household). We collect personal information about you as set out below.
Information You Provide through the Online Services
When using our Online Services, you may be asked to provide personal information directly to us. We collect personal information when you:
The categories of personal information we collect include:
Please do not provide any information that we do not request.
Information Collected from your Browser or Device when You Use the Online Services
We automatically collect personal information from your browser or device when you use our Online Services. We use cookies and other tracking technologies to collect this personal information. For details on cookies and tracking technologies, see the Cookies and Tracking Technologies section below .
The categories of personal information we automatically collect include:
Information Collected when you visit Our Centers
When visiting our Centers, you may be asked to provide personal information directly to us. We collect personal information in the following scenarios:
We also automatically collect personal information about you or from your browser or device when you visit our Centers. We automatically collect personal information in the following scenarios:
Information Collected from Professional and Client Relationships
In the course of professional or client interactions involving the purchasing of advertising or the leasing of retail or other real estate space, we may collect personal information about you such as your name, position, entity name and other details surrounding the transaction or potential transaction.
Information Collected from Other Sources
We obtain personal information about you from other sources. The categories of other sources from which we obtain personal information include:
Information We Infer
We infer new information from other personal information we collect, including using automated means to generate information about your likely preferences or other characteristics. We do not use sensitive personal information to make such inferences.
HOW PERSONAL INFORMATION IS USED
We use the personal information we collect in accordance with the practices described in this Privacy Notice. Our purposes for collecting and using information include:
Sometimes we aggregate or de-identify information so that it can no longer identify you, as defined under applicable laws. We can use and disclose this aggregated or de-identified information for any purpose, unless an applicable law says otherwise.
HOW WE DISCLOSE YOUR PERSONAL INFORMATION
We disclose the personal information we collect in accordance with the practices described in this Privacy Notice. The categories of persons to whom we disclose information include:
COOKIES AND TRACKING TECHNOLOGIES
Cookies and Pixels
Cookies are small text files which are placed on your browser when you visit a website. Cookies are widely used to make websites work and for other purposes. Pixels (also known as web beacons) are code embedded in a service that sends information about a browser or device to a server. Pixels provide similar functionality to cookies, but are not always browser-based. When you access a service that contains a pixel, the pixel may permit us or a third party to drop or read cookies on your browser, or collect other information about your browser or device.
We use cookies and pixels for the following purposes:
The cookies management module available on our website allows you to control the use that we and our partners make of the cookies present on the website. You can choose at any time to accept, refuse, or set them all according to our choices by clicking on the appropriate button in the cookies management module, except for cookies strictly necessary for the use of the website that you cannot deactivate.
In addition, most browsers allow you to manage your cookies preferences by changing your browser settings. You may set your browser to:
Your browser's "Help" function should tell you how to do this. Your ability to limit cookies is subject to your browser settings and limitations.
Certain third parties offer opt-out tools relating to cookies and pixels:
Please note that cookie management only applies to our website and not our apps or other parts of the Services. If you use multiple browsers, you will need to instruct each browser separately. If you delete or reset your cookies, you will need to reconfigure your settings.
For app-specific pixels, you can stop all collection of information via an app by uninstalling the app. For Apple iOS, we will only receive access to your device’s Ad ID (known as an IDFA) if you provide consent. You can reset your device’s Ad Id at any time through your device settings, which is designed to allow you to limit the use of information collected about your device. To opt out of receiving Interest-based Advertising from participating companies with the DAA, please visit https://www.aboutads.info/appchoices .
We are not responsible for the effectiveness of any third party opt outs.
Precise-Location Technologies
With your consent when you launch our app, we may get access to the precise location technologies on your device (such as GPS or Bluetooth) and collect precise-location data from your browser or device. You can stop all collection of precise-location data through an app by uninstalling the app or withdrawing your consent through your device settings.
YOUR RIGHTS AND CHOICES
Region-Specific Rights
Some regions provide additional rights by law. For California-specific terms, please click here .
Account Management
You may access, update, or delete certain personal information that you have provided to us through your account by visiting your account settings. Please note that we will retain personal information in accordance with our data retention practices.
Communications
You may opt out of email marketing communications by clicking "unsubscribe" at the bottom of the email, following instructions provided in the communication, or changing your preferences within your account. If you have opted-in to text messages, to opt-out, text “STOP” in response to any text you receive from us or contact us and specify you want to opt-out of text messages. See Westfield’s SMS Terms and Conditions for details. If you have opted-in to push notifications, you can opt-out through your device settings.
Cookies and Tracking Technologies
For rights and choices relating to cookies and tracking technologies, see the Cookies and Tracking Technologies section above.
CHILDREN
Our Services are not directed to children under the age of 13 and Westfield does not knowingly collect personal information from children under the age of 13. Children under the age of 13 are not permitted to use Wi-Fi networks in Centers. If you have reason to believe that a child under the age of 13 has provided personal information to Westfield, please contact us and we will delete that information from our databases.
HOW LONG WE KEEP YOUR PERSONAL INFORMATION
Westfield retains the personal information we collect for as long as necessary to provide the products and services you have requested, or for other essential purposes such as complying with legal obligations, general archival purposes, resolving disputes, and enforcing our agreements. If you have any questions about the retention of your personal information, please contact us .
HOW WE PROTECT YOUR PERSONAL INFORMATION
The security of your personal information is important to us. While we follow generally accepted security standards to safeguard the personal information submitted to us, it is not possible to guarantee the security or integrity of personal information. Therefore, we encourage you to take precautions to protect your personal information, including protecting your passwords, using secure networks to access the Internet, and logging out of your account for the Online Services when you are away from your device.
THIRD PARTIES
Westfield's products and services may contain links or references to other websites and services operated or controlled by third parties. For example, we may link to social media networking sites. Links or advertisements do not imply that Westfield endorses or has reviewed such third parties or their privacy practices. For a description of how social networking and other sites handle your personal information, please refer to their privacy policies and terms of use, which may permit you to modify your privacy settings.
In addition, we integrate tracking technologies operated or controlled by third parties into parts of our Service. For details on cookies and tracking technologies, see the Cookies and Tracking Technologies section above . , We also work with third parties in our Centers. This Privacy Notice does not apply to those third parties, and we do not control (and are not responsible for) the actions of such third parties. Visit those third parties' websites or contact them directly for details regarding their data practices.
CALIFORNIA PRIVACY RIGHTS
This California Privacy Rights section applies solely to residents of the State of California (“ consumers” or “ you”). We adopt this notice to comply with California law, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (“ CPRA”). Any undefined terms in this section shall have the meaning as defined in either the Privacy Notice or the CPRA. If you are a current or former employee, please contact us for a copy of our employee Privacy Notice.
Notice at Collection
At or before the time of collection of your personal information, you have a right to receive notice of our data practices.
The Personal Information We Collect section above sets out the categories of personal information we have collected and the sources from which we have obtained personal information in the past 12 months.
The How Information Is Used section above sets out how we collect and use this personal information for our business and commercial purposes.
The How We Disclose Your Personal Information section above set out the categories of persons to whom we disclose this personal information.
The How Long We Keep Your Personal Information section above sets out how long this personal information is retained.
We do not sell your personal information as that term is traditionally understood. However, some of our disclosures of personal information may be considered a “sale” or “share” as those terms are defined under the CPRA. A “sale” is broadly defined under the CPRA to include a disclosure for something of value, and a “share” is broadly defined under the CPRA to include a disclosure for cross-context behavioral advertising. We collect, sell, or share the following categories of personal information for commercial purposes: contact identifiers, characteristics or demographics, commercial or transactional information, device identifiers, device information, internet activity, non-precise geolocation data, and inferences drawn from non-sensitive personal information. The categories of third parties to whom we sell or share your personal information include, where applicable, vendors and other third parties involved in cross-context behavioral advertising. For details about your rights regarding sales and shares, please see the “Right to Opt-Out” section below. We do not knowingly sell or share the personal information of minors under 16 years old who are California residents.
Some of the personal information we collect (as detailed Personal Information We Collect section above) may be considered sensitive personal information. For example, precise-location data. To the extent any of the personal information we collect is sensitive personal information, we collect, use, and disclose such sensitive personal information only for the permissible business purposes for sensitive personal information under the CPRA or without purpose of inferring characteristics about consumers. We do not sell or share sensitive personal information.
CPRA Rights
This section describes your CPRA rights and explains how to exercise those rights.
Right to Know, Correct, and Delete
You have the right to request the following from us:
In addition you have the right to correct or delete the personal information we have collected from you.
To exercise any of these rights, please do one of the following:
We will confirm receipt of the request within 10 business days and provide information on how the business will process the request. We endeavor to respond to verifiable consumer requests within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. You may only make a verifiable consumer request for your personal information twice within a 12-month period. Please note these rights are subject to exceptions.
In order for Westfield to verify your identity, we will request that you provide us with your email address and name. We will then send you a verification email for you to respond to. We may require additional information for verification purposes. Please note that we cannot respond to your request or provide you with personal information if we cannot verify your identity or your authority to make the request and confirm the personal information that relates to you. We will only use personal information provided in a verifiable consumer request to verify the request’s identity or authority to make the request.
Only you, or a person you authorized in writing may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor.
Right to Opt-Out of Sales and Sharing
To the extent we “sell” or “share” your personal information to third parties as those terms are defined under CCPA, you have a right to opt-out from the sale or sharing, which you can exercise through this Do Not Sell or Share My Personal Information link or the link in the footer of our website. In addition, you may exercise this right by turning on a recognized opt-out preference signal, such as Global Privacy Control , in your browser or extension.
Note that when you submit an opt-out, your opt-out will only apply to sales and shares of personal information through tracking technologies from the specific browser from which you submitted the opt-out because the connection between your browser identifiers and other personal information we have about you is not known to us.
Authorized Agent
You can designate an authorized agent to submit requests on your behalf. Requests must be submitted through the designated methods listed above. If any authorized agent submits a consumer request on your behalf, we may request additional information as permitted by CPRA to verify the request.
Non-Discrimination
You have the right not to receive discriminatory treatment by us for the exercise of your CPRA rights.
Financial Incentives
We may offer you certain financial incentives permitted by the CPRA that can result in different prices, rates, or quality levels. Any CPRA-permitted financial incentive we offer will reasonably relate to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt in consent to a separate notice of financial incentives, which you may revoke at any time.
CPRA Request Metrics
For metrics about the requests we received from consumers in 2022, please see below.
Request Type |
Total Requests Received |
Number Complied With |
Number Denied |
Median Number of Days to Respond |
Know |
4 |
4 |
0 |
11 |
Correct |
NA |
NA |
NA |
NA |
Delete |
48 |
40 |
8 |
14 |
Opt-out of sale/sharing |
NA |
NA |
NA |
NA |
Other California Privacy Rights
Do Not Track Signals
California residents are entitled to know how Westfield responds to "Do Not Track" browser settings. Accordingly, unless and until the law is interpreted to require us to do so, we do not monitor or take actions with respect to “Do Not Track” signals.
Shine the Light
California’s "Shine The Light" law permits California residents to request and obtain from Westfield once a year, free of charge, information about the personal information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year. If applicable, this information would include a list of the categories of personal information that was shared and the names and addresses of all third parties with which we shared information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please contact us and specify you are making a “California Shine the Light Request.” Please be aware that not all information shared is covered by the "Shine the Light" requirements and only covered information will be included in our response.
CHANGES TO THIS PRIVACY NOTICE
We may update this Privacy Notice to reflect changes to our personal information practices. If we make any material changes we will notify you by email (sent to the email address specified in your account) or by means of a notice on our website. We encourage you to periodically review this page for the latest information on our privacy practices. Your continued use of Westfield products or services after any changes or revisions to this Privacy Notice shall indicate your agreement with the revised terms.
CONTACT US
If you have questions regarding this Privacy Notice, please contact us as follows:
By email : privacy@westfield.com
By mail :
ATTN: Privacy
Westfield, LLC
2049 Century Park East, 40th Floor
Century City, CA 90067
United States of America
For more information about how users with disabilities can access this Privacy Notice in an alternative format, please click on the accessibility icon located at the bottom right corner of the screen.