1.    Information You Provide

When you visit our Services, you may provide us with certain personal information, such as your name, address, phone number, email address, personal preferences, payment card number, purchase and ordering information, demographic information, responses to survey questions, sizing information and any other information you choose to provide. Our Services may also give you the option to upload product reviews.

We collect this information at various places on our Services, such as when you check out with your online order, subscribe to email offers, and mobile messaging offers; participate in surveys; enter contests or sweepstakes; or interact with special-event or program offers.

We may also collect information that you provide on our Services about people you know. For example, we collect your gift recipient's contact information to process your gift orders. We may also collect contact information about your friends and family members when you participate in one of our refer-a-friend programs. In these instances, we may send a message to your friend or family member on your behalf (so please only submit email addresses of individuals with whom you have a personal or family relationship and who would want to receive the message from you).


2. Information Your Devices Provide Automatically
When you interact with our Services, we obtain certain information by automated means, including the following:

A. Location Information
We may obtain information about your location when you access or use our Services: for example, via your browser information and other similar device or browser attributes (like IP address), or our mobile applications. For more details, please see the Your Choices section below.

B. Navigational Information

When you access our Services, your computer, phone, or other device may provide navigational information, such as browser type and version, service-provider identification, IP address, the site or online service from which you came, and the site or online service to which you navigate.

C. Device Information 

We also may obtain information about the computer or mobile device you use to access our Services, such as the hardware model, operating system and version, identification numbers assigned to your mobile device, such as the ID for Advertising (IDFA) on Apple devices, and the Advertising ID on Android devices, mobile network information, and website or app usage behavior.

D. Cookies, Clear Gifs and Similar Technologies

To better understand how you interact with our Services, we may collect information using cookies, clear-gifs (also known as web beacons or web bugs) and similar technologies.

o A cookie is a small amount of data that's stored by your browser on your device. It's used to do things like see how you navigate our Services, what you click on, remember you and your online purchases when you return, and recognize you and honor a special deal for you, when you redeem one of our offers from a third party's site. This helps us improve and deliver our Services, provide better customer service, tailor and improve your online experience, and tailor offers to you based on your unique tastes and a combination of your online interactions and purchase history.

o A clear gif is a nearly invisible pixel-sized graphic image on a web page, web-based document or email message. It helps us do things like view the URL of the page on which the clear gif appears and the time the site, document or email in question is viewed; and recognize you and honor a special deal for you, when you navigate from a third party's site to redeem one of our offers that may have appeared there. Clear gifs in emails help us confirm the receipt of, and response to, our emails, including those that you forward to friends and family; and they help deliver a more personalized or better online experience.

o In addition to cookies and clear gifs, we may also use device identifiers, web storage, and other technologies to collect information about your interactions with our content and Services.

These technologies, illustrated above, may be used to help us see which of our interactive experiences online users like most. Cookies, clear gifs, and similar technologies also allow us to associate your online navigational information and purchases and interactions with personal information you provide (such as name, address, phone number, survey responses, and email address). We associate this information to deliver products and services to you; improve our business; transact business; and market our products and services on this and other online services, and through a variety of media like email, mobile advertising, and direct mail.

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.

For information about your options with respect to cookies, see Your Choices About Use of Your Personal Information below.
We use the following cookies on our Services.

Cookies Necessary for the Functioning of the Services

Reporting and Analytics

3. Information Derived Through or Provided by Others

Affiliated entities, sister brands, vendors, social media networks, and advertising networks may provide us with, or supplement, information about you. We may use this information for a variety of operational or marketing purposes, such as to correct shipping information, market to you, deliver more relevant offers through customer insights, improve our business, and transact business.


4. How We Use the Information We Obtain
 We use the personal information we obtain through the Services to:

A. deliver our Services
B. process your online orders;
C. facilitate payment and transactions;
D. create and manage your online account;
E. personalize your online experience with content and offers that are tailored to your interests;
F. provide customer service and respond to your inquiries and requests;
G. include you in surveys and contests;
H. enable you to post your content, such as reviews and comments;
I. facilitate networks of online social activity centered around our products and services;
J. improve our Services, the manner in which offers are made on our Services, and the interactions and experience visitors have with our Services;
K. enable you to interact with third-party content service providers, whether by linking to their sites, viewing their content within our online environment, or by viewing our content within their online environment;
L. market our products and services that may be of interest to you;
M. create aggregated, pseudonymized or anonymized information for statistical purposes

5. Third Party Analytics and Personalization Services
We may use third-party analytics and personalization services to analyze Services metrics and performance, analyze our visitors’ preferences, and to serve personalized content to you through the use some or all of the technologies described below, such as cookies and clear gifs.
We use Google Analytics to help us understand how our customers use the Site.

You can read more about how Google uses your Personal Information here: https://policies.google.com/privacy?hl=en

You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout

The “Do Not Track” or DNT header refers to a proposal for how individuals might broadcast their preferences for being tracked online. As the DNT standard was never finalized or widely adopted, our Services do not respond to it.

On our Services, we and third parties may collect information about your online activities to provide you with advertising about products and services tailored to your interests.
We contract with third-party advertising companies, which may collect information about your use and interactions with the Services, over time and across third-party websites and online services, for use in delivering tailored online display and banner advertising to you on other websites and online services. To serve this advertising, these third-party companies place, use, or rely on the technologies described above, including cookies, clear gifs, device identifiers and similar technologies to obtain information about customer interactions with us through our Services and interactions with other online services. These companies use the information they collect to serve you ads that are targeted to your interests

You can specify your preferences over the use of some of these technologies by opening Cookie Preferences to view or change your preferences (to address future cookie placement).
You may also specify your preferences through a centralized registry. To learn about how to opt out of interest-based advertising, in general, click the following: NAI Opt Out or, DAA Opt Out. Your mobile device settings may allow you to prohibit mobile app platforms (such as Apple and Google) from sharing certain information obtained by automated means with app developers like us and other businesses.

The “Do Not Track” or DNT header refers to a proposal for how individuals might broadcast their preferences for being tracked online. As the DNT standard was never finalized to widely adopted out Services do not respond to it.

We link to third-party sites and services, or otherwise display third-party content through our Services, for your convenience and information. These third-party sites and services may operate independently from us. The privacy practices of the relevant third parties, including details on the information they may collect about you, is subject to the privacy statements of these parties, which we strongly suggest you review. To the extent any linked third-party sites and services are not owned or controlled by us, we are not responsible for these third parties’ information practices.

Here are examples of the types of third-party content and services available through or via our Services:

Sweepstakes, Contests, and Survey Sites

We may work with third-party service providers to run sweepstakes, contests, and surveys. Navigation to these sites may be seamless so that it appears you're still using our Services. In these cases, the third-party's privacy policy may apply to any personal information you provide in connection with the event. Please take note of who's running the event in question; and the terms, conditions, and policies that apply.

Social Networking and other Third-Party Sites and Services

We may at times facilitate easy access to third-party sites and online services, like social networks and other services that host user-generated content. This may include easy click-through access, the ability for you to share content on third-party services, or even "single sign-on" to these services. The third-party's privacy policy applies to any information or content you provide through these services.

We may share information about you with certain third parties, as described below, and as otherwise described in this Policy. We do not sell or otherwise share personal information about you, except as described in this Policy.

1. Our Sister Brands
We may share the information we collect about you, such as your postal and email address, customer preferences and purchase history, with affiliated entities that operate our sister brands so they may market to you. Such sister brands include Victoria’s Secret and Victoria’s Secret Pink. We will obtain your consent to this sharing to the extent required by applicable law. If you don’t want this information shared with our sister brands, follow the instructions below in  Your Choices About Use of Your Personal Information .

2. Service Providers and Contractors

We may share personal information with third-party service providers and contractors whom we engage to provide services to us, such as fulfilling orders; processing payments; providing customer service through chat features; monitoring activity on our Services; delivering surveys and related analysis (which could be combined with Services usage analytics); maintaining databases; hosting and operating our websites, mobile websites; administering, sending and monitoring emails and text messages; serving online advertisements as described above; and providing consulting services.

3. Law Enforcement and Emergency Response

We also may disclose personal information about you (a) if we are required to do so by law or legal process (such as a court order or subpoena); (b) in response to requests by government agencies, such as law enforcement authorities; (c) to establish, exercise, or defend our legal rights; (d) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; (e) in connection with an investigation of suspected or actual illegal activity; or (f) otherwise with your consent.

4. Sale or Merger

We reserve the right to transfer your information in the event we sell and/or transfer all or a portion of our business assets (including, without limitation, in the event of a merger, acquisition, joint venture, reorganization, dissolution, or liquidation).

4. Other Disclosures with your Consent

We may ask if you would like us to share your information with other unaffiliated third parties who are not described elsewhere in this Policy.

We offer you certain choices in connection with the personal information we obtain about you.

1. Email
You may opt out of the Happy Nation email list by following the instructions located at the bottom of each commercial email. You may also submit your request on our email opt-out page. If you opt out of the Happy Nation email list, we may still send you operational or transactional messages, such as password-reset or account related information.

2. Location Information
You may have the ability to turn location-based services on and off by adjusting the settings of your Internet browser or mobile device or, for some devices, by adjusting the permission settings for our mobile apps to access your location information.

3. Cookies and Clear Gifs
You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible. Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as www.allaboutcookies.org.

You can also visit Use of Technology to Serve our Advertisements on Other Online Services and Your Choices to learn about how to specify your preferences over our use of cookie and similar technologies in connection with online advertising.

Postal Mail
If you'd like to specify your preferences for our postal mail, simply follow the instructions on the mailer, or contact customer care. 

4. Our Sister Brands
If you don't want your information shared with our sister brands for those brands’ own direct marketing purposes, please submit your request here.

5. Privacy Rights
If you reside in California, Colorado, Connecticut, Virginia or Utah, you may have certain rights regarding your personal information. If you are a California resident, for more information about your privacy rights, please see the Supplemental Privacy Notice for California Residents. 

If you are a Colorado, Connecticut, Virginia or Utah resident and you use the Services or interact with us in an individual or household capacity (and not in a commercial or employment context), you may have certain rights regarding your personal information, as described below. 

•    To submit a request to access, correct, or delete your personal information, please visit the Your Data Rights webform and select your state of residence and the nature of your request, or call us at 1-877-610-8080.  We will comply with your request if required to do so by law. 

•    To submit a request to opt out of the processing of your personal information for purposes of targeted advertising or the sale of your personal information, please visit the Do not sell or share my personal information webpage or call us at 1-877-610-8080.

To submit a request as an authorized agent on behalf of a consumer, please visit the Your Data Rights webform. On the form, add your email address and information about the individual for whom you are submitting the request in the other required fields. Please add your name and phone number in the Request Details field and an indication that you are submitting the request as an authorized agent. 

Appeals: We will make every reasonable effort to fulfill Your Data Rights request. However, if we are unable to fulfill your request, whether because we cannot verify you or if you believe we did not adequately respond to your request, we will provide you instructions to appeal. If you are submitting your appeal by email, please explain your concerns and provide us your reference number so we may properly review your data rights request history. We may also have a person from our Privacy Team reach out to you with additional questions or to address your specific concerns.

You may update or modify your billing- and shipping address related information, by logging onto our Services (e.g., Your Account on the Happy Nation’s website).

No method of transmission over the Internet, or method of electronic storage, is fully secure. While we use reasonable efforts to protect your personal information from unauthorized access, use, or disclosure, we cannot guarantee the security of your personal information. In the event that we are required by law to inform you of any unauthorized access to your personal information, we may notify you electronically, in writing, or by telephone, if permitted to do so by law.

Some of our websites permit you to create an account. When you do so, you will be prompted to create a password. You are responsible for maintaining the confidentiality of your password, and you are responsible for any access to or use of your account by someone else that has obtained your password, whether or not such access or use has been authorized by you. You should notify us of any unauthorized use of your password or account.

Our Services are designed for a general audience and are not directed to children. We do not knowingly collect or solicit personal information from children under the age of thirteen (13) (or other relevant ages, which may apply by virtue of applicable law) through our Services. If we become aware that we have collected personal information from a child under such age, we will promptly delete the information from our records. If you believe a child under such age may have provided us with personal information, please contact us as specified in the Contact section of this Policy.

We will retain your personal information for the time period reasonably necessary to achieve the purposes described in this Privacy Policy, or any other notice provided at the time of data collection, taking into account applicable statutes of limitation and records retention requirements under applicable law, as well as our records retention requirements and policies.

Our Services do not respond to "Do Not Track" signals.

This Policy may be updated periodically to reflect changes in our personal information practices. Changes to the Policy will be posted on this page. For significant changes, we will notify you by posting a prominent notice on our Services indicating at the top of the Policy when it was most recently updated.

If you have general questions about our Policy, or if you would like to make a complaint, please contact us through customer care or by postal mail using the details provided below:

ATTN: Happy Nation Privacy Matter
Victoria’s Secret & Co. Legal Department
4 Limited Parkway
Reynoldsburg, OH 43068
US

If you are a California resident, the information below (the “California Supplement") also applies to you, in addition to our Privacy Policy. Certain terms used in this section have the meaning given to them in the California Consumer Privacy Act, as amended by the California Privacy Rights Act, found at California Civil Code § 1798.100 et seq and its implementing regulations (collectively the “CCPA/CPRA”). For clarity, the information below applies to personal information we collect about California residents both on our Services and offline, such information we collect when you call us. This California Supplement does not apply to Happy Nation personnel or job applicants

Collection, Use and Disclosure of Personal Information

During the 12-month period prior to the effective date of this California Supplement, we may have collected and disclosed the following categories of personal information about you for a business purpose to the following categories of third parties, as described in the table below:

We may use (and may have used during the 12-month period prior to the effective date of this California Supplement) the categories of personal information listed above for the purposes described in our Privacy Policy and for certain business purposes specified in the CCPA/CPRA, such as:

•    Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing services, providing analytics services, providing storage or providing similar services

•    Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance

•    Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of your current interaction with us

•    Helping to ensure security and integrity to the extent the use of your personal information is reasonably necessary and proportionate for these purposes

•    Debugging to identify and repair errors that impair existing intended functionality

•    Undertaking internal research for technological development and demonstration

•    Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us

•    Providing advertising and marketing services, except for cross-context behavioral advertising (which is addressed in the “Disclosures of Personal Information” section of this California Supplement)

We do not sell your personal information in exchange for monetary compensation. We may share your personal information by allowing certain third parties to collect your personal information via automated technologies on our Services for cross-context behavioral advertising purposes. This kind of sharing may be considered a “sale” under the CCPA/CPRA when the personal information is exchanged for non-monetary consideration. You have the right to opt out of these types of disclosures of your information. We do not have actual knowledge that we sell or share personal information of consumers under the age of 16. We do not sell or share sensitive personal information.

In addition to the categories of third parties identified above, during the 12-month period prior to the effective date of this Policy, we may have disclosed personal information about you to the following additional categories of third parties: governmental entities and third parties in connection with corporate transactions (e.g., mergers, acquisitions, joint venture, reorganization, divestitures, dissolution or liquidation).

Collection and Use of Sensitive Personal Information 

We also collect a subset of personal information that is deemed “sensitive personal information” under California law. The following describes the categories of sensitive personal information we collect and our purposes for collecting it.  We do not sell or share for cross-context behavioral advertising sensitive personal information that we collected. We collect debit or credit card number to process order and facilitate payment and transactions. 

Retention of Personal Information 

We will retain your personal information for the time period reasonably necessary to achieve the purposes described in the Privacy Policy and this California Supplement, or any other notice provided at the time of data collection, taking into account applicable statutes of limitation and records retention requirements under applicable law, as well as our records retention requirements and policies. 

California Consumer Privacy Rights

You have certain choices regarding your personal information, as described below.

•    Access: You have the right to request, twice in a 12-month period, that we disclose to you the personal information we have collected, used, disclosed and sold or shared about you during the past 12 months.

•    Correction: You have the right to request that we correct the personal information we maintain about you if that information is inaccurate.

•    Deletion: You have the right to request that we delete certain personal information we have collected from you.

•    Opt-Out of Sale or Sharing: You have the right to opt out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising purposes.

•    Shine the Light Rights: Under California law, we also provide you with a cost-free means to opt-out of our sharing your information with third parties with whom we do not share the same brand name, if that third party will use it for its own direct marketing purposes. 

•    Right to Non-Discrimination for Exercise of Privacy Rights: Under the CCPA/CPRA, you have the right to not receive discriminatory treatment if you exercise your privacy rights under the CCPA/CPRA.

How to Submit a Request 

•    To submit an access, correction or deletion request, visit Your Data Rights or call us at 1-877-610-8080

To submit a request as an authorized agent on behalf of a consumer, visit Your Data Rights. On the form, add your email address and information about the individual for whom you are submitting the request in the other required fields. Please add your name and phone number in the Request Details field and an indication that you are submitting the request as an authorized agent. To submit a Shine the Light request, follow the instructions here to make your request.

To opt out of the sale or sharing of your personal information, visit the Do Not Sell or Share My Personal Information webpage or call us at 1-877-610-8080.

Verifying Requests 

To help protect your privacy and maintain security, we take steps to verify your identity before granting access to information or complying with a request. These steps include first verifying the email address you submit with your request. You will receive an email from us with instructions on completing this step. You will then be contacted to provide additional verification information, which may include your phone number, billing or shipping address, order history, a copy of a utility bill, emails showing order/shipping confirmation, and/or a signed declaration under penalty of perjury that you are the individual whose personal information is the subject of the request.  If you designate an authorized agent to make a request on your behalf, we may require you to provide the authorized agent written permission to do so and we may require you to verify your identity directly with us (as described above).

To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.

Financial Incentive Notice: We sometimes offer exclusive price discounts, rewards, offers, deals, coupons, services and other perks for (1) customers who enjoy our loyalty and rewards programs; (2) recipients of our mailing lists who were presented with a financial incentive to sign up; (3) app subscribers who were presented with a financial incentive to download the app; and (4) applicants or registrants who were presented with a financial incentive for their application or registration (collectively “programs”). Through these program offerings, consumers may provide us with some personal information (e.g., name, postal address, email address, phone number, birth day and month, and other similar forms of personal information) when they opt-in to our programs. There is no obligation to opt in and consumers may opt out. The details of each program are contained in the program offering. We offer these programs to, among other things, enhance our relationship with customers. The value to our business, in the aggregate, of customers’ personal information depends on specific facts, such as whether and to what extent they take advantage of any offerings. We do not calculate the value of the customers’ information for our accounting statements. To the extent we would, however, such valuation could be directly or reasonably related to the cost associated of acquiring or developing such information.

You may opt-in to our programs by signing up in the manner invited for an individual program. And you can opt out of these programs by contacting our Customer Care team via Contact Us at https://happynation.com/pages/contact-us