Bath & Body Works Online Privacy and Security

Transcription

1 Bath & Body Works Online Privacy and Security This privacy policy explains what personal information is collected through this Web siteour various online channels, how that information is used, to whom it's disclosed, and how it's safeguarded. This policy applies only to personal information collected through the Web site, microsites,online channel where this policy is displayed or linked, such as the Web site or Site ( our mobile websites, microsites; Bath & Body Works pages on social media sites, such as Facebook, Twitter or YouTube ( BBW social media page ); and mobile sites of Bath & Body Works that display or link to this policy. By "personal information" we mean your identifying information (like name, home address, and address), and possibly descriptive information (like tastes and preferences) if coupled with your identifying information ("personally identifying information"). We may refer to Bath & Body Works as BBW, "we," "us," or "our" throughout this privacy policy. This privacy policy answers these questions: What personal information is collected at our Web site or online channel where this policy is displayed or linked, and how is it used? How does this sitemay you interact with third-party Web sites and content? What information do we share with third parties (or what information may they access because of the services they provide to us)? What choices do you have over how your information is used? Does our policy differ for visitors from outside the U.S.? How may you access and update your personal information? How do we address children's privacy? How do we secure your information on our site? Whom do you contact with questions or concerns? Who is responsible for administering this policy? When was this policy last updated? WHAT PERSONAL INFORMATION IS COLLECTED AT OUR WEB SITE OR ONLINE CHANNEL WHERE THIS POLICY IS DISPLAYED OR LINKED AND HOW IS IT USED? 1. Information Collected Directly from You and Others through this Site or online channel We collect personal information directly from you to do all the things typically associated with electronic and mobile commerce Web sites. Examples of the information we collect include name, address, telephone number, mobile phone number, address, personal preferences, credit card number, purchase and ordering information, demographical information, and sizing information. This information is collected at various places: for instance, when you check out with your online order; subscribe to mailers, offers, and mobile messaging offers; participate in surveys, contests, or sweepstakes; or interact with special-event or program offers. We collect information about you. And, when you provide it, we collect information about those you know. For example, we collect your gift recipient's contact information to process your gift orders.

2 On our BBW social media pages we collect information about you and, if you allow, about your friends on the social media site, through (1) an application or form accessed through a BBW social media page which links to this privacy policy, and (2) through the BBW shopping page located on a BBW social media pages. We use this collected information to do things like: Process your online orders. Open an online account at your request. Personalize your online experience with content and offers that are tailored to your interests. Provide customer service, whether it's responding to a request or following up on an order. Include you in surveys and contests. Facilitate networks of online social activity centered around our products and services. Manage and develop Bath & Body Works' business and operations. Enable you to interact with third-party content service providers, whether by linking to their sites, viewing their content within our Web environment, or by viewing our content within their Web environment. Market our products and services (for instance, by adding you to our or mailing list when you make an online purchase). WeIn addition, Customer Conversations or Stories are available on the Website and may be available on other BBW online channels where this policy is displayed or linked. These features enable you to post your content, such as comments, product reviews, images, and other content on sites like our Customer Conversations and Stories. This content may include your comments, product reviews, audio, video,audio and similar content. If your content complies with our rules and terms of use, any portion of it may be published on our Web site(s), and in our stores, s, online marketing, mobile sites, BBW social media pages, microsites, mailers, and other media. This published content could identify details concerning you. 2. Information We Observe or Collect through Technology a. Navigational and Location Information When you visit this Web site or an online channel where this policy is linked, we collect navigational information, such as browser type and version, service-provider identification, IP address, the site from which you came, and the site to which you navigate. Navigational information is largely anonymous in the sense that it doesn't contain your name, address, phone number, address or other information that directly identifies you. However, we may associate this navigational information with your personal information if you provide it. When collecting the IP address, we may also be able to determine location information such as city, state, country, a designated marketing area and the ISP being used. We will also collect the type of mobile device you are using when connecting to our mobile website so we can provide the mobile website version best suited for your device.

3 b. Cookies and Clear gifs To better understand what you do while on our site, we use a browser feature known as a cookie. A cookie is a small data file that's stored by your Web browser on your computer or device. It's used to do things like see how you navigate our Web site, mobile site, microsite or BBW social media page, and remember you and your online purchases when you return. This helps us improve our site, provide better customer service, personalize your online experience, and personalize offers to you based on your unique tastes, location and/or purchase history. We also use clear-gifs (also known as a Web beacon or Web bug) on our Web site, mobile site, microsites, and BBW social media pages and in our s. A clear gif is a nearly invisible pixel-sized graphic image on a Web page, Web-based document or message. It helps us do things like view the URL of the page on which the clear gif appears and the time our Web site or in question is viewed. Clear gifs in s help us confirm the receipt of, and response to, our s, including those that you forward to friends and family; and they help deliver a more personalized online experience. Overall, these technologies may be used to help us see which of our interactive experiences online users like most: for example, by keeping track of the number of times a video, widget or other media is accessed or embedded on social networking sites; and on which social networking sites it is embedded, based on inquiries that are sent to our Web site. Cookies and clear gifs also allow us to associate your online navigational or transactional information with any personal information you provide or we otherwise collect (such as name, address, phone number, and address, and IP address). We'll associate this information only for our purposes: to deliver products and services to you; to improve our business; to transact business; and to market our products and services through a variety of media like , mobile advertising, and direct mail. As an example, we may use cookies to keep track of what you put into your shopping bag. That can help us contact you if your online session is disrupted in mid-purchase, resulting in an abandoned cart. We can also use this technology to determine whether you'd be interested in participating in special events, given your preferences. The end-result is a more personalized experience that's tailored to your needs and tastes. 3. Information Others Observe or Collect through Technology Third-party service providers help us analyze our visitors' site and purchase preferences, and other service providers may help us deliver ads to you about our products through banner ads when you visit other web sites (often referred to as "online network advertising"). The following provides more information about these service providers and the choices you have with respect to their services. a. Analysis We contract with analytics companies to better understand your use of our Web sites, mobile sites, microsites, BBW social media pages and Web capabilities like embeddable widgets. They accomplish this

4 by using some or all of the technologies described in Information We Observe or Collect Through Technology. b. Advertising We contract with third-party advertising companies that, in turn, collect non-personally identifying information by placing cookies on your browser when you visit us hereat our Web site and we may also use these third-party advertising cookies on our mobile sites, microsites, and BBW social media pages. These companies may use information (not including your name, address, credit card information, e- mail address, or telephone number) about your visit to deliver our ads on this and other Web sites through their online advertising networks. These companies also provide this information to us which we, in turn, use to gauge how effective our ads are. If you'd like more information about how online network advertising works and what your choices are for the information that's collected via these thirdparty cookies, please see What Choices do you have Over how Your Information is Used? HOW DOES THIS WEB SITEMAY YOU INTERACT WITH THIRD-PARTY WEB SITES AND CONTENT? We may enable you to navigate to third-party sites and services, or otherwise display third-party content. We do this for your convenience. We don't endorse, or generally have any affiliation with, these third parties. And we don't control and aren't responsible for their Web practices. Whether their content appears within our Web environment (like a map frame), or you leave our Web site for another site to view it, those service provider'sthe terms, conditions, and privacy policies of those third-party sites govern your online experience (unless there's a conspicuously posted statement by us that says otherwisewe have also linked our privacy policy and/or terms and conditions to some portion of the third-party site). Please view their terms of service and privacy policies if you have any question about their practices. Here's a partial list of the sites or content of these third parties: 1. Interactive Maps We may facilitate easy access to the online maps of content providers like Google, Microsoft, and Yahoo! There you can get quick location, driving, and contact information for our stores. 2. Sweepstakes, Contests, and Survey Sites We may rely on the expertise of third-party service providers to run sweepstakes, contests, and surveys. Navigation to these sites may be seamless so that it appears you're still in our Web site environment. In these cases, the third-party's privacy policy may apply to any personal information you provide in connection with the event. So please take note of who's running the event in question; and the terms, conditions, and policies that apply. 3. Social Networking or Other User-Generated-Content Sites, and Other Websites

5 We may at times facilitate easy access to third-party sites, like social networking sites and other sites that host user-generated content. This may include easy click-through access or even "single-sign on" to these sites. The third-party's privacy policy applies to any personalprivacy policies of these third parties apply to the information you providecollected by the third parties at these sites. Our privacy policy, too, will apply at these sites if we display our content and feature our privacy policy there but only to the extent that you directly provide us with your personal information, or we collect or observe this information through technology (as described above in Information We Observe or Collect through Technology). In these cases, we will display or link our privacy policy and terms and conditions. For example, you may find a third-party social media site (e.g., Facebook) where you can interact with us through a frame, e.g., you may virtually enter the frame to buy BBW products. In this example, our displayed or linked privacy policy would apply to activities within that frame; the thirdparty s privacy policy would apply otherwise. Check all applicable policies when visiting such sites. Note too, the social media sites where Bath & Body Works has it social media pages may provide aggregate information and analysis to us about visitors use of these social media pages. The analysis that is provided allows us to better understand and analyze our user growth, general demographic information about the users of our social media pages and interaction with content on our social media pages. 4. Third-Party Rewards or Membership Programs We may interact with certain unrelated companies that offer their customers memberships to participate in programs, which may include rewards for purchases from us. If you become a member of one of these programs or purchase something from us at this Web site through such a program, we may provide the company administering the membership program enough information about you or your purchase (like contact information, transaction date, transaction amount, and order number), to enable it to honor your membership. We are not responsible for the privacy practices of the companies sponsoring these membership programs. Their terms, conditions, and policies apply to any information that's provided to them to further their programs. WHAT INFORMATION DO WE SHARE WITH THIRD PARTIES OR AFFILIATES (OR WHAT INFORMATION MAY THEY ACCESS BECAUSE OF THE SERVICES THEY PROVIDE TO US)? 1. Our Affiliates We may also share the information described in this policy, like postal and address, customer preferences, and purchase history within our corporate family so that our affiliates may market to you. Our affiliates include Beauty Avenues, Inc., C.O. Bigelow, Henri Bendel, the La Senza family of brands (including La Senza Girl, La Senza Express, and La Senza Spirit), MAST Industries, Inc., Slatkin & Co., the

6 Victoria's Secret family of brands (including Victoria's Secret Beauty, Victoria's Secret Pink, and Victoria's Secret Sport) and White Barn Candle. 2. Contractors We use third-party "back-office" contractors to help handle parts of our business because of their expertise, resources, or scale. They help us do things like fulfill orders, process payments, monitor and analyze site activity, maintain databases, administer and monitor s, administer and send mobile messages, and provide consulting services. Contractors may also assist us in hosting microsites and, our mobile Webweb sites and BBW pages on social media sites where you may provide personal information about you and others you know; and where they may observe information about you in the same way as described above (see What Personal Information Is Collected At Our Web Site or Online Channel Where this Policy is Displayed or Linked, and How Is It Used?). 3. Other Marketers We may share your name, postal address, and summary purchase information with other merchants and merchant exchanges. Other merchants may, in turn, use this information to send you offers on their products and services. If you don't want this information shared with these merchants and exchanges, please click here. 4. Law Enforcement and Emergency Response We may disclose specific information about our Web-site visitors if we have a good-faith belief that it's necessary or authorized under the law to protect our customers, the public, or our business. 5. Sale or Merger In the event we sell or transfer all or a portion of our business assets, consumer information may be one of the business assets that are transferred as part of the transaction. WHAT CHOICES DO YOU HAVE OVER HOW YOUR INFORMATION IS USED? 1. If at any time you'd like to stop future delivery of our offers, simply follow the removal instructions located at the bottom of each message This will stop future offers from us, but won't stop operational or transactional messages such as confirmations of your online orders, or customer service communications. You may also click here or call us at We may occasionally provide you with the opportunity to opt in to receive messages from third parties. If you do opt in, we'll share your address with the specific third party with which you have opted in. Please review their privacy policies to see how they treat your personal information.

7 2. Mobile Messaging If you've signed up for mobile messaging (e.g., SMS and MMS) offers but later decide you no longer wish to receive them, simply follow the opt-out instructions included in the mobile message. You may also click here or call us at Postal Mailers If you'd like to specify your preferences for offers by postal mail, simply follow the instructions on each catalog, or call us at Cookies, Clear Gifs, and Online Network Advertising You may always choose to block cookies or even clear cookies from your computer. Simply follow your browser's instructions on how to block and clear cookies. Note that blocking cookies may not block the "first-party" cookies that are placed on your computer when you visit this site. By first-party cookies, we mean those cookies (whether placed by us or a contractor) that help us see how visitors use our site, and enable us to deliver our ads on our site (as opposed to ads on an online advertising network of third-party Web sites). Clearing cookies after each visit here will prevent observations from multiple sessions being aggregated over time. Please consider the consequences of blocking or clearing cookies. Many Web sites rely on their cookies to provide you with services or features that you have requested or expect. If you want more information about online network advertising, in general, including access to some online network advertisers that allow you to designate your preferences, click here (you'll leave this site for a centrally managed online site where you can specify your preference) 5. Other Marketers If you don't want your basic contact and purchase information shared with other marketers (other than our affiliates), you may request a third-party direct marketing opt-out form. Contact us at bbwrequest@bbw.com or Bath & Body Works, P.O. Box , Columbus, OH , US, and we'll send you a form which you may complete and return to opt out of any such marketing. 6. Our Affiliates If you would like to request that our affiliates do not use your name, postal address, address and purchase information for marketing purposes, please contact us at to make a request. WHAT IS THE POLICY FOR VISITORS FROM OUTSIDE THE U.S.? This is aall our online channels are based in the U.S. Web-commerce site. This privacy policy governs the information collected at this site or the online channel where this policy is displayed or linked, irrespective of where you're located when you access it, browse it, interact with it, and make purchases

8 through it (including those that are shipped to addresses outside the U.S.). This means your personal information may be stored outside of the province, state, and/or country in which you reside, and processed by us, an affiliate or a third-party service provider as described in this privacy policy. Moreover, U.S. governmental bodies that have jurisdiction (e.g., the courts and law enforcement agencies) may be entitled to access your personal information. HOW MAY I ACCESS AND UPDATE MY PERSONAL INFORMATION? We prefer to keep your personal information accurate and up-to-date. You may update or modify your billing- and shipping-related information by logging onto Your Account, or by calling us at HOW DO WE ADDRESS CHILDREN'S PRIVACY? We do not knowingly collect or maintain information provided by children under the age of 13. HOW DO WE SECURE YOUR INFORMATION ON OUR SITE? This Web site has the following types of security measures: limited access data-centers, firewall technology, and secure-socket-layer (SSL) certificate authentication. SSL is encryption technology that provides security for information that's transmitted over the Internet. This site accepts orders only from Web browsers that permit communication through SSL technology for example, 4.0 versions or higher of Netscape Navigator, versions 5.01 or higher of Internet Explorer, versions 0.8 or higher of Firefox, and versions 1.2 or higher of Safari. While we implement the above security measures on this site, you should be aware that 100% security is not always possible. WHOM MAY YOU CONTACT WITH QUESTIONS OR CONCERNS? If you have questions or concerns with respect to our Privacy Policy, please feel free to contact us. WHO ADMINISTERS THIS POLICY? Our Associate Vice President (AVP) of Limited Brands, Inc., administers this policy. You may write to this person at:

9 AVP, Privacy Legal and Compliance Services Limited Brands, Inc. 3 Limited Parkway Columbus, OH US WHEN WAS THIS POLICY LAST UPDATED? Please click here to view any material and substantive changes made since the last revision of this privacy policy. If you're concerned about how your personal information is used, please visit our site often for this and other important announcements about BathandBodyWorks.com. This privacy policy is effective September 3, 2009.May 20, 2011.