Privacy
Statement

Effective Date: September 2024
Welcome to the TJX marketing website privacy statement (“this Privacy Statement” or “this Statement”) for The TJX Companies, Inc. (“TJX”) or one its divisions such as Marshalls, T.J. Maxx, Sierra Trading Post, Inc. (“Sierra”), HomeGoods, Homesense and other affiliates. These divisions  along with TJX may be referred to throughout this statement as the “TJX Businesses”, “we”, “us”, or “our”. We use the words “you” and “your” to mean you, the reader, and other visitors to this marketing website (the “Site”) who are, in all cases, over the age of 18.

This Statement serves to give you notice about the types of personal information we collect on this Site, which was created by a TJX Business for a marketing initiative, contest, promotion, sweepstakes or program (collectively, the “Program”). Additionally, in the sections below we describe how we use your personal information, who we share it with and why, and what we do to try and protect it. Portions of this Site may involve the collection of personal information by third partes which will be governed by a privacy policy separate from this Privacy Statement as further described in the External Online Services And Features Section and as identified on the Site.

What Information We Collect

This information we collect on this Site or as part of the Program includes:

  • Contact information (such as name, email address, postal address, and phone number), and other information that we use to ensure that you receive relevant marketing;
  • visual and audio information;
  • Automatically collected information such as identifiers, device identifiers, cookies, beacons, pixel tags, mobile ad, and other similar technology identifiers, IP address, geolocation data, the address of the web page that referred you to our websites, the dates and times of website visits and how much time was spent on certain pages, browsing history, search history, and other related device or electronic activity information; and
  • other personal information you may provide to us.

How We Collect Your Information

We collect information from or about you in a number of different ways, including:

  • Directly from you such as when you sign up to receive Program communications or attend Program events;
  • From third parties such as other TJX Businesses or business partners (e.g., for promotions or advertising); and
  • Via technology used on the Site such as cookies and pixels.

How Long We Retain Your Information

We will store and retain your personal information in accordance with applicable law and for as long as necessary to carry out the purposes described in this Statement in accordance with our internal data retention procedures and the duration of the Program.

How We May Use Your Information

When we collect your information, we use it for a number of purposes, including to:

  • Invite you to participate in customer research;
  • Notify you about new products, services, features, promotions, events, and special offerings relating to the TJX Businesses that we think you will find valuable;
  • Secure our operations and protect against, identify and help prevent crime, fraud, unauthorized activity, claims and other liabilities and minimize credit risk;
  • Comply with and enforce applicable legal requirements, industry standards, our policies, and our Terms of Use or Program rules;
  • Administer your participation in the Program; and
  • Operate/manage, evaluate, and improve our business (including measuring and managing our communications and the advertising effectiveness of our online and offline advertisements and events, performing market research, and administering and securing our Sites such as by customizing users’ visits to our Sites, delivering content, including advertising tailored to users’ interests and the manner in which users browse or interact with us).

How We Share Your Information

Business Sale/Purchase

Your information may also be transferred as an asset in connection with a merger or sale (including any transfers made as part of a reorganization, dissolution, or liquidation) involving all or part of the TJX Businesses or as part of a stock sale or other change in corporate control.

Third-Party Service Providers

We also may share certain personal information we collect about you with partners or third parties who perform services for us or with whom we contract for the purposes described in this Privacy Statement. For example, we may use third parties to host our websites or mobile apps, operate certain of its features, send emails, print or send mailings, run our sweepstakes, contests, or other promotions, conduct customer research, and manage and analyze data and our advertising effectiveness.

Legal Requirements and to Prevent Harm

We also may disclose information about you as is required by law or legal process such as subpoenas or court or agency orders. Additionally, we may disclose information that we may reasonably determine to be necessary or appropriate to protect our rights or the rights of others, to avert loss or harm to persons or property, to enforce our Terms of Use or this Privacy Statement, or in connection with an investigation of suspected or actual fraudulent or illegal activity.

Children's Privacy

This Site is intended for those who are eligible to participate in the Program and are not directed to children. We do not knowingly collect personal information online from children under the age of 13.

External Online Services And Features

For your convenience and information, this Site may provide links to other online services, and may include third-party features such as online forms, apps, tools, widgets, and plug-ins (“Third-Party Online Services”). These Third-Party Online Services may operate independently from us. The privacy practices of the relevant third parties, including details on the information they may collect about you, is subject to the privacy policies of these parties, which we strongly suggest you review. To the extent any linked Third-Party Online Services are not owned or controlled by TJX, we are not responsible for these third parties’ information practices.

How We Protect Your Information

We maintain administrative, technical, and physical safeguards designed to protect against loss, misuse, or unauthorized access, disclosure, alteration, or destruction of your personal information. However, we cannot guarantee the effectiveness of these safeguards, and nothing in this Statement shall be construed as an express or implied warranty against loss, misuse, or unauthorized access, disclosure, alteration, or destruction.

Your Options

Do Not Track

Some browsers have a “do not track” feature that lets you tell websites that you do not want to have your online activities tracked. At this time, we do not specifically respond to browser “do not track” signals. However, we do process Global Privacy Control (“GPC”) signals as a valid opt-out request under the California Consumer Privacy Act as further described below.

Opt Out From/Restrict Cookies and Online Behavioral Advertising

Your web browser may tell you how to be notified when you receive certain types of cookies and how to restrict, reject or disable certain cookies. If you would like to opt out of the sale or sharing of your personal information/targeted advertising, please view our Notice of Opt-Out of the Sale or Sharing of Personal Information/Targeted Advertising. Additionally, you may directly opt out of data collection from the particular companies that we use to collect information from users of our Sites as specified below:

  • We use Google to collect and analyze information about the use of our websites. This information helps us serve relevant advertisements to you on Google, and helps us to measure the effectiveness of our marketing campaigns. If you have a Google account, you can Manage Your Advertising Settings. Otherwise, you can manage these settings through your web browser as described above.

To update your preferences, ask us to remove your information from our mailing lists, or submit a request, you may contact us at dataprivacy@tjx.com, 1‑800‑926‑6299 or by submitting an Online Request.

Contact Information

If you have questions regarding this Privacy Statement or our privacy practices, or if you wish to update the personal information you have provided to us, you may do so by contacting us at dataprivacy@tjx.com, 1‑800‑926‑6299 or by submitting an Online Request.

Changes To This Statement

This Privacy Statement may be updated periodically and without prior notice to you to reflect changes in our information practices. We will post a prominent notice on the site to notify you of any significant changes to our Privacy Statement and indicate when it was most recently updated.

U.S. State Privacy

Notice To Residents of California, Oregon and Texas

Collection and Disclosure

For residents of California, Oregon and Texas, during the prior 12-month period we have collected the following categories of personal information and sensitive personal information about you:

  • Identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers, and similar technology; telephone number and other forms of persistent or probabilistic identifiers), online identifier, Internet Protocol address, email address and other similar identifiers; and
  • Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements;

For residents of California, during the prior 12-month period we have:

  1. Collected personal information about you from the following categories of sources:
    • From you or your devices, for example, through your interactions with on our Sites;
    • Our affiliates and other TJX Businesses;
    • Our vendors and consultants;
    • Our business partners;
    • Publicly available sources;
    • Social media networks; and
    • Online advertising companies.
  2. Collected personal information about you for the following business or commercial purposes (in addition to the purposes listed above in the How We May Use Your Personal Information Section):
    • Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, providing analytics services, or providing similar services; and
    • Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;
  3. Sold or shared (as both are defined under the CCPA and other state privacy laws) the following categories of personal information about you:
    • Identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers, and similar technology; telephone number and other forms of persistent or probabilistic identifiers), online identifier, Internet Protocol address, email address and other similar identifiers; and
    • Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements;
  4. Sold your personal information to, or shared your personal information with, the following categories of third parties:
    • Vendors who provide services on our behalf;
    • Our business partners such as joint marketing partners; and
    • Third-party marketers (who may combine your personal information with their own records, and records available from other sources), for their own direct marketing purposes, and the direct marketing purposes of other third-party marketers.

To opt out of the sale or sharing of your personal information/targeted advertising, please view our Notice of Opt-Out of the Sale or Sharing of Personal Information/Targeted Advertising.

  1. Business or commercial purposes for selling or sharing your personal information:
    • Performing services, such as providing advertising, marketing services or analytics services.
  2. Disclosed for a business purpose the following categories of personal information about you:
    • Identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers, and similar technology; telephone number and other forms of persistent or probabilistic identifiers), online identifier, Internet Protocol address, email address, and other similar identifiers; and
    • Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications, or advertisements;
  3. Disclosed your personal information for a business purpose to the following categories of third parties:
    • Our affiliates and other TJX Businesses;
    • Vendors who provide services on our behalf; and
    • Our business partners such as joint marketing partners;
  4. Business or commercial purposes for disclosing your personal information:
    • Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, providing analytics services, or providing similar services;
    • Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;

We do not sell or share the personal information of consumers under the age of 16 if we have actual knowledge of the individual’s age.
We do not use or disclose sensitive personal information for purposes other than those specified in the California Consumer Privacy Act Regulations § 7027(m).
We will store and retain your personal information in accordance with applicable law and for as long as necessary to carry out the purposes described in this Statement in accordance with our internal data retention procedures and the duration of the Program.

Privacy Rights of California Residents

California residents have the below-listed rights with respect to their personal information:

  • Right to Know about what personal information we collected about you
  • Right to Delete the personal information we collected about you
  • Right to Correct inaccurate personal information we maintain about you
  • Right to Opt Out of the Sale or Sharing of your personal information
  • Right to Not Receive Discriminatory Treatment

These rights, and how you can exercise them, are described in greater detail below.
You have the right to request the following information about the personal information we have collected about you:

  • The categories and specific pieces of personal information we have collected about you;
  • The categories of sources from which we collected the personal information;
  • The business or commercial purpose for which we collected, sold, or shared the personal information;
  • The categories of third parties with whom we disclosed the personal information; and
  • The categories of personal information about you that we sold or disclosed for a business purpose, and the categories of third parties to whom we sold or disclosed that information for a business purpose.

Additionally, you have the right to request that we delete the personal information we have collected from you, subject to certain exceptions, or correct inaccurate personal information that we maintain about you.

We will not deny, charge different prices for, or provide a different level or quality of goods or services if you choose to exercise these rights.
As stated above, we do not use or disclose sensitive personal information for purposes other than those specified in the California Consumer Privacy Act Regulations § 7027(l)(1).

You can exercise most of these rights by submitting a verifiable request to dataprivacy@tjx.com, 1‑800‑926‑6299 or via our Online Request Form.

As stated above in the Your Options section of this Statement, we process GPC signals as a valid opt out request under the CCPA. Please note that GPC signals are browser and device specific. To opt out of the sale or sharing of your personal information/targeted advertising, please view our Notice of Opt-Out of the Sale or Sharing of Personal Information/Targeted Advertising.
To help protect your privacy and maintain security, we take steps to verify your identity before granting you, or a third party acting on your behalf, access to your personal information or complying with your request. If someone is making a request on your behalf, we require proof of authorization as part of our identity verification process.

Notice To Residents of Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, Oregon, New Hampshire, New Jersey, Texas, Utah and Virginia

When we collect personal information from residents of Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, Oregon, New Hampshire, New Jersey, Texas, Utah and Virginia, we become subject to, and those residents have certain rights under, the privacy law of their particular state. This section supplements the Privacy Statement and applies solely to residents in these states. Please note that, depending on the state in which you are located, we may sell or share (as those terms are defined under the law of the state in which you are located) all of the categories of personal information identified in the What Information We Collect section to or with the categories of third parties identified in the How We Share Your Information section. Please also note that Marshalls is registered as “Marshalls of MA, Inc.” in the state of Oregon.

Privacy Rights of Residents of Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, Oregon, New Hampshire, New Jersey, Texas, Utah and Virginia

Residents of these states may have some or all of the below-listed rights with respect to their personal information:

  • Right of Access to confirm whether we are processing your personal information and to access such personal information
  • Right to Delete the personal information we collected about you
  • Right to Correct inaccurate personal information we maintain about you
  • Right to Opt Out of the Sale of your personal information or Targeted Advertising,
  • Right to Opt Out of Profiling in furtherance of decisions that produce legal or similarly significant effects concerning you
  • Right to Data Portability to obtain a copy of your personal information in a portable format
  • Right to Obtain Further Information on the Third Parties with which we have disclosed personal information

You can exercise most of these rights by submitting a verifiable request to dataprivacy@tjx.com or via our Online Request Form.
We sell certain personal information to third parties and use it for targeted advertising. To opt out of the sale of your personal information or targeted advertising, please view our Notice of Opt-Out of the Sale or Sharing of Personal Information/Targeted Advertising. As stated above in the Your Options section of this Statement, we process GPC signals as a valid opt-out request. Please note that GPC signals are browser and device specific.

To help protect your privacy and maintain security, we take steps to verify your identity before granting you, or a third party acting on your behalf, access to your personal information or complying with your request. If someone is making a request on your behalf, we require proof of authorization as part of our identity verification process.

Appeals Process

If we were unable to fulfill your request, you may, depending on the jurisdiction in which you are located, have the right to appeal our decision by emailing us at dataprivacy@tjx.com. Please include “Appeal Request” in the subject line and a detailed reason for your appeal, as well as your state of residence. We will review the circumstances of your appeal and inform you of any actions taken or not taken in response to your appeal. We will also provide you an explanation of the reasons for the decisions.

Nevada Privacy

We do not sell your personal information in exchange for monetary compensation.

Contact Information

If you have questions regarding this Privacy Statement or our privacy practices, or if you wish to update the personal information you have provided to us, you may do so by contacting us at dataprivacy@tjx.com, 1‑800‑926‑6299 or by submitting an Online Request.