PRIVACY & COOKIE POLICY
Thank you for shopping at Tillys!
At Tillys, our relationship with our customers is very important to us. That is why we work hard to protect your privacy and security. We prepared this Privacy Policy to explain how we collect, use, protect, and disclose information and data when you use the Tillys website and mobile applications (collectively, the “Sites”) and when you shop at our stores or otherwise interact with Tillys. We collect customer specific information in an effort to communicate details about our products, services, contests, and promotions and for other reasons described below. This Privacy Policy applies to personal information, defined as information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
What Personal Information We Collect and How It is Used and Shared:
For the 12-month period prior to the data of this Privacy Policy, we explain here what categories of personal information we have collected, where we got it from, and with whom we have shared it:
|
Category of Personal Information Collected |
Source of information |
Purpose for Collection |
Categories of recipients |
|---|---|---|---|
|
Contact information: such as your name, billing address, shipping address, email address, telephone numbers, or other contact information
|
From you; the decision to provide this information is typically optional, however, if you choose not to provide the requested information, you may not be able to use some or all of the features of our Sites or mobile app. |
To communicate with you, to send you a catalogs, information, newsletters, promotional materials and other offerings from Tillys or on behalf of our partners and affiliates, to offer a sweepstakes, contest or other promotion, when you contact us, when you request customer service or support, to complete your registration on our Sites, to administer your account(s) with us, and to provide you with offers that may be of interest to you
|
Our co-marketing partners, including select partners and affiliates that we believe may have offers or be of interest to you |
|
Purchase and order information: contact information, together with purchase details online and in store through e-receipts, delivery details, payment details, any communications we have received about your order or purchase |
From you |
To validate, confirm, verify, deliver, install, and track your order, including to arrange for shipping, handle returns and refunds, maintain a record of the purchases you make, to service products you purchased from us, and to provide you offers that may be of interest to you |
Our service providers who process, fulfill and ship orders |
|
Other delivery information: name and address of recipient for delivery, if different from customer’s |
From you |
To deliver to the person at the address which you have requested |
Our service providers who process, fulfill and ship orders |
|
Payment information: name, card issuer and card type, credit or debit card number, expiration date, CVV code and billing address |
From you and your payment card issuer |
To check that the right person is using the right card or account, meet the requirements of the card brands or account issuers, and to make sure we are paid for what you buy |
Our service providers who process payments for us; these third-party service providers are prohibited from using personal information for any other purpose and are contractually required to comply with all applicable laws and requirements, which may include Payment Card Industry Data Security Standards if they are processing payments for Tillys |
|
Rewards information: your rewards account number, birthday, gender, age, purchase history and information on rewards or other benefits |
From you when you sign up for our rewards program and from our rewards service provider |
To administer your rewards account and provide you with offers that may be of interest to you |
Our service providers who administer our rewards program and our co-marketing partners |
|
Information you provide about a third party: if you send someone else a communication from the Services (such as sending a gift or virtual gift card), we may collect information such as that person's name, telephone number, email, and/or shipping address.
|
From you |
To deliver to or communicate with the person at the address which you have requested |
Our service providers and our co-marketing partners |
|
Social Media: information about you, including Usage Data and personal information such as lists of your friends, "likes", comments you have shared, groups and location
|
From third parties, particularly social media platforms |
To enhance your online shopping experience, including as a way to recognize you and welcome you to the Sites, to provide you with customized Sites content, targeted offers, promotions and advertising on the Sites, through other third party sites or apps, via email, text messages, or app push notifications that are offered by Tillys or other marketing partners that might be of interest to you. |
Our service providers and our co-marketing partners |
|
Legal information: fraud checks or flags raised about your transactions, the payment card you want to use, payment card refusals, suspected crimes, complaints, claims and accidents |
From you, the police, crime and fraud prevention agencies, payment card providers, the public, regulators, your and our professional advisors and representatives |
To protect you, other customers and our business against criminal activities and risks, make sure we understand and can meet our legal obligations to you and others and can defend ourselves |
Our service providers who help us with fraud protection and credit risk reduction, law enforcement and other governmental authorities in accordance with applicable law. |
|
Preference information: your marketing preferences, your account settings including any default preferences, any preferences you have indicated, the types of services/offers that interest you, or the areas of our Sites that you visit |
From you, from our Sites technology interaction with your browser/devices and cookies and other similar technologies tracking the pages you visit, the marketing messages you open and the links you follow, including your interactions with social media |
To enhance your online shopping experience, including as a way to recognize you and welcome you to the Sites, to provide you with customized Sites content, targeted offers, promotions and advertising on the Sites, through other third party sites or app, via email, text messages, or App push notifications that are offered by Tillys or other marketing partners that might be of interest to you.
|
Third party vendors and other service providers that perform website analytic services for us |
|
Communications: communications we have with you. Please note that we record calls to our customer service team |
From you |
To handle your requests, to contact you when necessary or requested, including responding to your questions and comments and providing customer support, and to obtain customer feedback and improve our customer service and customer shopping experience |
Our service providers who assist us with customer service |
|
In-store privacy: CCTV images of you in and around entrances and exits to our stores and offices, and your customer journey around our store |
From you, our CCTV |
To keep you, other customers, our staff, buildings, systems and data safe and secure, to investigate potential theft, fraud or misconduct |
Our service providers who help us with fraud protection, law enforcement and other governmental authorities in accordance with applicable law. |
|
Device information: IP address, internet provider, operating system and browser used, type of device, such as laptop or smart phone, device cookie settings and other device details, such as MAC address and geolocation, if you use our Sites and permit it to obtain your precise geolocation |
From you and from our Sites technology’s interaction with your browser or devices |
To make sure our Sites, including app technology, works properly with your device and make sure you can see and use our intended website and apps on the device you are using, and for analytical and demographic purposes and to provide offers that may be of interest to you We also will use this information to protect the security or integrity of the Sites and our business, such as by protecting against and preventing fraud, unauthorized transactions, and managing risk exposure, including by identifying potential hackers and other unauthorized users. |
Our service providers who help us with fraud protection, and third party vendors and other service providers that perform website analytic services for us |
|
Usage Data: when you use the Sites, some data is automatically transferred from your browser to our server, including your browser type, operating system type or mobile device model, viewed webpages, links that are clicked, IP address, mobile device identifier or other unique identifier, sites or apps visited before coming to our Sites, the amount of time you spend viewing or using the Sites, the number of times you return, or other click-stream or site usage data, emails we send that you open, forward, or click through to our Sites |
From you and from Sites technology’s interaction with your browser or devices, for more information see “Cookies,” below |
We will use this information in an aggregated non-specific format for analytical and demographic purposes. We also will use this information to protect the security or integrity of the Sites and our business, such as by protecting against and preventing fraud, unauthorized transactions, and managing risk exposure, including by identifying potential hackers and other unauthorized users
|
Third party vendors and other service providers that perform website analytic services for us |
|
Accident information: details about any accident or injury on our premises, or health incident |
From you, witnesses or observed about you |
To get you the help you need, deal with the emergency services, insurance and claims |
Law enforcement and other governmental authorities in accordance with applicable law, and our professional advisors. |
|
Suspected crime information: details of your identity, image, name and address, suspected or alleged thefts, fraud, assault or other criminal behavior |
From crime and fraud prevention agencies, from you, witnesses, and from the police |
To protect customers, the public and our business against risks and crime |
Law enforcement and other governmental authorities in accordance with applicable law, and our professional advisors. |
Combined Information
We may combine your information, including Usage Data, with information from third parties in order to enhance our ability to communicate with you and provide you opportunities to purchase products or services that we believe may be of interest to you. In addition, from time to time, we may establish relationships with other people or entities whom we believe to be trustworthy and whom we have asked to confirm that their privacy practices are consistent with ours. In this context, we may disclose to third parties your Usage Data and other personal information that you provide to us, so long as combined and used in aggregate form and in a manner that does not identify you.
Cookies
Cookies are small files saved to your computer. Cookies can be used for several important purposes. For example, they allow us to distinguish you from other users on our website which help us to provide you with a great online experience as well as improve our website. Cookies allow us to gauge where our visitors come from (i.e. Google), recognize and count the number of visits to our site, as well as how visitors move around the site. Cookies help us to improve not only the way our website works, but to ensure you find what you’re looking for easily as well. Tillys uses persistent cookies, either directly or indirectly through one of our third-party providers. We also use other tracking technology such as pixel tags or web beacons. These Technologies assist us with your requests and make your browsing experience easier (i.e. by remembering which language you prefer) this way you enjoy a seamless experience. Persistent cookies assist us with understanding how you use our website. It also allows us to target you with specifically tailored advertising based on your visit(s) along with carry out business analytics, other statistic activities and traffic. Depending on your browser’s settings, your computer may alert you when a cookie is being placed on your computer. You can choose to accept the cookie or not or you can choose to turn off cookies via your browser’s settings. If you do decide to turn off your cookies you may not have access to some of the features that make your experience easier and some services may not function properly. Access to the information available through these technologies will also be provided to our third-party providers, advertisers, advertising networks and platforms, agencies and patterns through these technologies, and has been provided to these third parties with the preceding 12 months for business purposes. If you choose to participate in our use of cookies but later change your mind you can simply opt out at any time by going through your browser settings. Your browser settings will also allow you to delete the cookies that have already been set and change your browser settings to block all or part of any further cookies. You can start with these sites to learn more about your browser’s privacy controls:
If you would like to learn more about Cookies you can do so by visiting www.allaboutcookies.org, this site includes additional useful information on Cookies and can show you how to block Cookies using different types of browsers. Please be aware that if you disable or reject Cookies, some features and Services may not work properly. For example, if you disable or reject Cookies, we may not be able to recognize and associate you with your purchase, If you choose to make a purchase using the Tillys Guest access checkout feature rather than logging into your Tillys Account.
Mobile Application
The collection and means of collecting information through any currently existing or future App are previously discussed in this policy. The sharing of any information is also previously discussed in this policy. In addition, by using the App you may be asked for permission to access data on your mobile device, such as photos. We will only access this data with your consent. Please note that some functions of the App are only available if you allow access to requested content. You can opt-out of certain functions of the App by changing the settings on your mobile device. For specific instructions, please refer to the instructions provided for your mobile device.
Data Security and Credit Card Safety
Protecting the safety of your credit card information is important to us. We use Secure Sockets Layer (SSL) technology to help protect the security of your credit card information as it is transmitted to us. SSL is a highly sophisticated method of scrambling data as it travels from your computer to our Sites' servers. To make sure you are accessing our secure server before you submit personal financial information, look at the lower left-hand corner of your Web browser. If you see an unbroken key or a closed lock (depending upon your browser), then SSL is active. To double-check for security, look at the URL or “Address” line of your Web browser. If you have accessed a secure server, the first characters of the address in that line should change from "http" to "https". We use industry-standard security techniques on the Sites to help protect against the loss, misuse or alteration of information collected from you on the Sites. When you access your account information or transmit personally identifiable data to the Sites, that information is stored on servers that the Sites has attempted to secure from unauthorized access or intrusion. That said, no data transmission over the Internet or other network can be guaranteed to be 100% secure. As a result, while we strive to protect information transmitted on or through the Sites, we cannot and do not guarantee the security of any information you transmit on or through the Sites, and you do so at your own risk.
Your Information Choices
We will occasionally send members of our distribution list information and valuable offers by mail or e-mail, or text message if you have expressly agreed to receiving text messages. You may unsubscribe from our marketing lists at any time. To unsubscribe from receiving marketing e-mails, please click on the appropriate link at the bottom of any marketing e-mail from Tillys or by signing into your account on the Sites and changing your e-mail preferences. If you have opted in to receive text messages from us, you can unsubscribe from receiving text messages at any time by: (1) replying to the text message with the word "STOP"; (2) sending the text message "STOP" to 38714; or (3) contacting us. You can also contact us directly to unsubscribe from mail, e-mail, or text communications by e-mailing us at customerservice@tillys.com.
Personal Information You Make Available to Others
By using the Sites, you may make certain of your personal information available to others. For example, when you post a comment or a photo on the Sites other users may see your name, the city you live in and other information that you choose to make available to others.
Service Providers
From time to time, we may contract with other businesses whom we believe to be trustworthy and who have confirmed that their privacy practices are consistent with ours to perform services for or on behalf of Tillys (“Service Providers”). For example, we may contract with Service Providers to provide certain services, such as hosting and maintenance, data storage and management, and marketing and promotions. Some of our Service Providers may use their own cookies or other tracking technology in connection with the services they perform on our behalf. We only provide our Service Providers with the information necessary for them to perform these services on our behalf. Each Service Provider must agree to use reasonable security procedures and practices, appropriate to the nature of the information involved, in order to protect your personal information from unauthorized access, use, or disclosure. Service Providers are prohibited from using personal information other than as specified by Tillys.
Advertising & Do Not Track
We may allow third-party companies to serve ads or collect certain information about you when you visit the Sites. These companies may use browsing information (e.g., click stream information, Web browser type, time and date, subject of advertisements clicked or scrolled over) during your visits to the Sites and other web sites in order to provide advertisements about products and services likely to be of interest to you. These companies typically use a cookie or other technology to collect this information. Our systems do not recognize Do Not Track (DNT) signals from browsers. DNT is a privacy preference that users can set in some web browsers, allowing users to opt out of tracking by websites and online services. However, many third-party services that collect this type of information permit you to opt out through a separate system. To learn more about this behavioral advertising practice or to opt-out of this type of advertising from participating third parties’ providers, you can visit http://www.networkadvertising.org . In addition, please see the Your Information Choices section to learn how to manage what marketing or other information you receive directly from us. In addition, Tillys uses Google Analytics to monitor activity on the Sites. To learn how Google Analytics collects and processes data, please visit: “How Google uses data when you use our partners’ sites or apps” located at www.google.com/policies/privacy/partners.
Other Transfers
We may share personal information and Usage Data with businesses controlling, controlled by, or under common control with Tillys. If Tillys is merged, acquired, or sold, or in the event of a transfer of some or all of our assets, we may disclose or transfer personal information and Usage Data in connection with such transaction.
Compliance with Laws and Law Enforcement
Tillys cooperates with government and law enforcement officials to enforce and comply with the law. We may disclose personal information and any other information about you if we believe it is reasonably necessary to respond to legal requests (including court orders and subpoenas), to protect the safety, property, or rights of Tillys, to prevent or stop any illegal, unethical, or legally actionable activity, or to comply with the law.
Be Careful Sharing Information with Others
Please remember that when you share information with third parties or on any public area of the Sites, that information may be passed along or made public by others. This means that anyone with access to such information can potentially use it for any purpose, including sending unsolicited communications. You are solely responsible for keeping your login credentials and any other account numbers or access codes secure.
Links to Other Web Sites
Our Sites may contain links to other web sites, or allow others to send you such links. A link to a third party’s web site does not mean that we endorse it or that we are affiliated with it. We do not exercise control over third-party web sites. You access such third-party web sites or content at your own risk. You should always read the privacy policy of a third-party web site before providing any information to the web site.
Children’s Privacy
Our Sites and communications are intended for those who are at least 13 years old and older. Tillys will not knowingly accept personal information from anyone under 13 without verifiable parental consent. If we become aware that we have inadvertently received personal information from a child under the age of 13, we will make reasonable efforts to delete such information from our records. If a parent, guardian, or anyone else becomes aware of personal information we have collected from an individual under the age of 13, please contact us at (866)484-5597 or via email at customerservice@tillys.com. Minors in California may remove, or request and obtain removal of content or information that they have publically posted on the Sites by e-mailing us at customerservice@tillys.com. Please note that most of the user content that appears on the Sites is stored and controlled by third party providers. As a result, complete or comprehensive removal of the content or information may not be possible.
Your California Privacy Rights
This Policy describes how we may share your information for marketing purposes. You may contact us with any questions and, to the extent applicable, to request once a calendar year a list of third parties to whom we may disclose information for their own marketing purposes and the categories of information we may disclose. Please contact us at (866)484-5597 or via email at customerservice@tillys.com. If you are a California resident, as of January 1, 2020, California law provides you with the following rights with respect to your personal information: • The right to know what personal information we have collected, used, disclosed and sold about you. To submit a request to know, you may call us at 866-277-3301 or by visiting this page. You also may designate an authorized agent to make a request for access on your behalf on our website by clicking here. • The right to request that we delete any personal information we have collected about you. To submit a request for deletion, you may call us at 866-277-3301 or by visiting this page. You also may designate an authorized agent to make a request for deletion on your behalf on our website by clicking here.
When you exercise these rights and submit a request to us, we will verify your identity by asking for information about your relationship with Tillys, such as email address on file, loyalty/customer number, recent order number, or the last four digits of your credit or debit card. Your exercise of these rights will have no adverse effect on the price and quality of our goods or services. For the 12-month period prior to the date of this Privacy Policy, Tillys has not sold any Personal Information about its customers; nor does it have any plans to do so in the future.
Your Nevada Privacy Rights
Nevada residents have the right to submit a request to opt-out of sale of their personal information. Tillys does not sell personal information. For further questions about your Nevada privacy rights, please contact us as described below.
Use of the Sites Outside of the United States
The Sites are operated in the United States under the laws of the United States. We do not intentionally offer goods and services to individuals residing outside of the United States. If you reside in another country, please be aware that your Personal Information and communications may be transferred to and maintained on servers or databases located outside your state, province, or country. We process and store information in the United States. The laws in the United States may not be as protective of your privacy as those in your location. By using the Sites, you agree that the collection, use, transfer, and disclosure of your personal information and communications will be governed by the applicable laws in the United States.
Contact Us
If you have any questions about this Privacy Policy, your dealings with Tillys, wish to unsubscribe from any of our marketing lists, or want to update your information, you can contact us at:
Customer Service Tillys 10 Whatney Irvine, CA 92618 customerservice@tillys.com 1-866-484-5597 Monday – Friday: 6am-7pm PST Saturday-Sunday: 8am-5pm PST
Privacy Policy Changes
We may change this Privacy Policy from time to time. If we decide to change this Privacy Policy, we will inform you by posting the revised Privacy Policy on the Sites or in another manner as appropriate. Those changes will go into effect on the “Revised” date shown in the revised Privacy Policy. By continuing to access or use the Sites, you consent to the revised Privacy Policy. We recommend that you frequently check the website for recent changes. Revised: December 30, 2019