Supplemental U.S. Website Privacy Notice

[Last Updated December 31, 2024]

This Supplemental U.S. Website Privacy Notice ("Supplemental Notice") applies only to information collected about U.S. consumers who reside in states with comprehensive data protection laws that apply to maurices, including California (collectively, “U.S. Data Privacy Laws”).

This Supplemental Notice describes Maurices Incorporated’s (“maurices,” “we,” “us,” “our”) practices regarding the collection, use, and disclosure of Personal Information and provides instructions for submitting data subject requests. This Supplemental Notice is parallel in scope to our primary privacy policy.

Some portions of this Supplemental Notice apply only to consumers of particular states. In those instances, we have indicated that such language applies only to those consumers.

1. Definitions
   • “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Information includes “personal data” as that term is defined in the U.S. Data Privacy Laws. Personal Information also includes “Sensitive Personal Information,” as defined below, except where otherwise noted.
   • “Sensitive Personal Information” means Personal Information that reveals a consumer’s social security, driver’s license, state identification card, or passport number; account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin, religious beliefs, or union membership; contents of email or text messages; and genetic data. Sensitive Personal Information also includes processing of biometric information for the purpose of uniquely identifying a consumer and Personal Information collected and analyzed concerning a consumer’s health, sex life, or sexual orientation. Sensitive Personal Information also includes “sensitive data” as that term is defined in the U.S. Data Privacy Laws.
   • “Third Party” has the meanings afforded to it in the U.S. Data Privacy Laws.
   • “Vendor” eans a service provider, contractor, or processor as those terms are defined in the U.S. Data Privacy Laws.

   To the extent other terms used in this Supplemental Notice are defined terms under the U.S. Data Privacy Laws, they shall have the meanings afforded to them in those statutes, whether or not capitalized herein. As there are some variations between such definitions in each of the U.S. Data Privacy Laws, the definitions applicable to you are those provided in the statute for the state in which you are a consumer. For example, if you are a Virginia consumer, terms used in this Supplemental Notice that are defined terms in the Virginia Consumer Data Protection Act (“VCDPA”) shall have the meanings afforded to them in the VCDPA as this Supplemental Notice applies to you.

2. Collection & Processing of Personal Information

   We, and our Vendors, have collected and processed the following categories of Personal Information about consumers in the preceding 12 months:

   1. Identifiers, such as name, alias, online identifiers, account name, physical characteristics or description;
   2. Contact and financial information, including phone number, address, email address, income, salary, and other financial information;
   3. Characteristics of protected classifications under state or federal law, such as age, gender, race, physical or mental health conditions, and marital status;
   4. Commercial information, such as transaction information and purchase history;
   5. Internet or other electronic network activity information, such as browsing history and interactions with our websites or advertisements;
   6. Geolocation data, such as device location;
   7. Audio, electronic, visual and similar information, such as call and video recordings;
   8. Professional or employment-related information, such as work history and prior employer;
   9. Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics; and
   10. Sensitive personal information, including:
       1. Personal Information that reveals:
          1. Account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials for allowing access to an account;
          2. Precise geolocation; or
          3. Racial or ethnic origin, religious or philosophical beliefs.

   Retention of Personal Information. We intend to retain each category of Personal Information described above only for as long as necessary to fulfill the purpose for which it was collected, or a related and compatible purpose consistent with the average consumer’s expectation, and to comply with applicable laws and regulations. We consider the following criteria when determining how long to retain Personal Information: why we collected the Personal Information, the nature of the Personal Information, the sensitivity of the Personal Information, our legal obligations related to the Personal Information, and risks associated with retaining the Personal Information.

3. Categories of Personal Information We Disclose to Vendors & Third Parties

   We disclose the following categories of Personal Information to Vendors and Third Parties, and we have disclosed the below categories of Personal Information for a business purpose to the categories of Third Parties listed in Section F in the past 12 months:

   • Identifiers, such as name, alias, online identifiers, account name, physical characteristics or description;
   • Contact and financial information, including phone number, address, email address, income, salary, and other financial information;
   • Characteristics of protected classifications under state or federal law, such as age, gender, race, physical or mental health conditions, and marital status;
   • Commercial information, such as transaction information and purchase history;
   • Internet or other electronic network activity information, such as browsing history and interactions with our websites or advertisements;
   • Geolocation data, such as device location;
   • Audio, electronic, visual and similar information, such as call and video recordings;
   • Professional or employment-related information, such as work history and prior employer;
   • Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics; and
   • Sensitive personal information, including:
     1. Personal Information that reveals:
        1. Account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials for allowing access to an account;
        2. Precise geolocation; and
        3. Racial or ethnic origin, religious or philosophical beliefs.
4. Sources from Which We Collect Personal Information

   We collect Personal Information directly from consumers, as well as from joint marketing partners, public databases, providers of demographic data, publications, professional organizations, social media platforms, our call center, surveys and sweepstakes, our mobile app, membership programs, and Vendors and Third Parties when they share the information with us.

5. Purposes for Collecting, Processing, and Disclosing Personal Information

   We, and our Vendors, collect, process, and disclose the Personal Information (excluding Sensitive Personal Information) described in this Supplemental Notice to:

   • Operate, manage, and maintain our business;
   • Provide the services and goods requested;
   • Remember and manage your preferences;
   • Provide, develop, improve, repair, and maintain our products and services;
   • Personalize, advertise, and market our products and services;
   • Conduct research, analytics, and data analysis;
   • Maintaining our facilities and infrastructure;
   • Undertake quality and safety assurance measures;
   • Conduct risk and security controls and monitoring;
   • Detect and prevent fraud;
   • Perform identity verification;
   • Perform accounting, audit, and other internal functions, such as internal investigations;
   • Comply with law, legal process, and internal policies;
   • Maintain records;
   • Exercise and defend legal claims; and
   • Otherwise accomplish our business purposes and objectives.

   We, and our Vendors, collect and process the Sensitive Personal Information described in this Supplemental Notice only for:

   • Performing the services or providing the goods reasonably expected by an average consumer who requests those goods or services;
   • Preventing, detecting, and investigating security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted Personal Information;
   • Resisting malicious, deceptive, fraudulent, or illegal actions directed at maurices and prosecuting those responsible for those actions;
   • Ensuring the physical safety of natural persons;
   • Short-term, transient use, including, but not limited to, nonpersonalized advertising shown as part of a consumer's current interaction with us; provided that we will not disclose the consumer's Personal Information to a Third Party or build a profile about the consumer or otherwise alter the consumer's experience outside the current interaction with the business;
   • Performing services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on our behalf;
   • Verifying or maintaining the quality or safety of a product, service, or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured by, manufactured for, or controlled by us;
   • Collecting or processing Sensitive Personal Information where the collection or processing is not for the purpose of inferring characteristics about a consumer.
6. Categories of Entities to Whom We Disclose Personal Information
   • Affiliates & Vendors. We may disclose your Personal Information to our affiliates and Vendors for the purposes described in Section E of this Supplemental Notice. Our Vendors provide us with services for our websites, as well as other products and services, such as web hosting, data analysis, payment processing, order fulfillment, customer service, infrastructure provision, technology services, email delivery services, credit card processing, legal services, and other similar services. We grant our Vendors access to Personal Information only to the extent needed for them to perform their functions, and require them to protect the confidentiality and security of such information.
   • Third Parties.We disclose Personal Information to the following categories of Third Parties:
     • At Your Direction. We may disclose your Personal Information to any Third Party with your consent or at your direction.
     • Marketing & Analytics Providers. We disclose Personal Information to Third Parties via our website, including via cookies and other tracking technologies for purposes of marketing and analytics.
     • Business Transfers or Assignments. We may disclose your Personal Information to other entities as reasonably necessary to facilitate a merger, sale, joint venture or collaboration, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).
     • Legal and Regulatory. We may disclose your Personal Information to government authorities, including regulatory agencies and courts, as reasonably necessary for our business operational purposes, to assert and defend legal claims, and otherwise as permitted or required by law.
7. Data Subject Rights
   • Exercising Data Subject Rights. Depending on their state of residence, some U.S. consumers have certain rights with respect to the collection and use of their Personal Information. Those rights vary by state, and we provide further details regarding those rights below. You may exercise the data subject rights applicable to you by contacting our Privacy Office at 1-888-914-9661 (enter PIN 651699), or by clicking here. Consumers in some states may also authorize an agent to make data subject requests on their behalf.
   • California Residents: Under the CCPA, California consumers have the following data subject rights, among others:
     1. Right to Know:You have the right to know the following details about our privacy practices at or before the point of collection. We have provided such information in this Supplemental Notice. You may also request that we provide you with information about the following aspects of how we have handled your Personal Information:
        • The categories of Personal Information we have collected about you;
        • The categories of sources from which we collected such Personal Information;
        • The business or commercial purpose for collecting, selling, or sharing Personal Information about you;
        • The categories of third parties to whom we disclose Personal Information; and
        • The specific pieces of Personal Information we have collected about you.
     2. Right to Deletion: You may request that we delete any Personal Information about you we that we collected from you.
     3. Right to Correction: You may request that we correct any inaccurate Personal Information we maintain about you.
     4. Right to Opt-Out: You may opt out of the sale and/or sharing of your Personal Information.
     5. Right to Non-Discrimination: You have the right to not be discriminated against based on the exercise of your data subject rights.
   • Colorado Residents: Under the Colorado Privacy Act, you have rights of access, correction, deletion, and data portability. You also have the right to opt out of targeted advertising, sale of Personal Information, and profiling in furtherance of decisions that produce legal or similarly significant effects.
   • Other U.S. Residents: Residents of other U.S. states with U.S. Data Privacy Laws have similar data subject rights to those listed above for California and Colorado residents. Most U.S. Data Privacy Laws provide residents of their states with rights to access, correct, and delete their Personal Information, subject to certain exceptions. You may also have the right under the U.S. Data Privacy Law applicable to you to opt out of targeted advertising, sale of Personal Information, and/or profiling in furtherance of decisions that produce legal or similarly significant effects. You may also have additional rights under the U.S. Data Privacy Law applicable to you regarding profiling in furtherance of decisions that produce legal or similarly significant effects. However, please note that we do not use Personal Information for profiling in furtherance of decisions that produce legal or similarly significant effects.
   • Verification of Data Subject Requests. We may ask you to provide information that will enable us to verify your identity in order to comply with your data subject request. Further, residents of certain U.S. states are permitted by law to authorize an agent to submit data subject rights on their behalf. If that applies to you, you may authorize an agent to submit data subject requests to us on your behalf. In such instances, authorized agents may use the same methods as you to submit the requests on your behalf. To verify your identity and protect your Personal Information, we may ask the requestor to provide information that will enable us to verify your identity, such as asking the agent to provide proof of signed permission from you to submit the request, or asking you to verify your own identity to us or confirm with us that you provided the agent with permission to submit the request. In some instances, we may decline to honor your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.
   • Non-Discrimination. We will not discriminate against you for exercising your data subject rights. For example, we will not deny goods or services to you, or charge you different prices or rates, or provide a different level of quality for products or services as a result of you exercising your data subject rights.
   • Appeals. Residents of certain states have the right to appeal our decisions on their data subject requests. This section does not apply to California or Utah consumers, or to consumers who reside in other states where the applicable U.S. Data Privacy Law does not give them the right to appeal controllers’ decisions regarding data subject rights. To appeal our decision on your data subject requests, you may contact our Privacy Office at 1-888-914-9661 (enter PIN 651699). Please specifically reference our decision on your data subject request, so that we may adequately address your appeal. We will respond to your appeal in accordance with applicable law.
   • Right to Opt Out. We sell, share, and process Personal Information for the purposes of targeted advertising, as the terms “process,” “sell,” “share,” and “targeted advertising” are defined in the U.S. Data Privacy Laws. In the past twelve months, we have sold, shared, and processed for purposes of targeted advertising the below categories of Personal Information to marketing and analytics providers for the purposes listed in Section E:
     1. Identifiers, such as name, alias, online identifiers, account name;
     2. Contact information, including phone number, address, email address;
     3. Commercial information, such as transaction information and purchase history; and
     4. Geolocation data, such as device location.

     For Texas & Florida Residents - NOTICE: We may sell your sensitive personal data.
     We do not sell or share the Personal Information of known minors under 16 years of age without affirmative authorization. We also do not use your Personal Information for profiling in furtherance of decisions that produce legal or similarly significant effects.

   • To opt-out of the sharing of your Personal Information or processing of Personal Information for targeted advertising purposes, click here or call 1-888-914-9661 and enter PIN 651699. The link will take you to an interactive webform that you can complete and submit to make a request to opt out; if you use the telephone number, you will be guided through a process that will allow you to submit a request. Further, with respect to online identifiers such as your IP address, you can opt out of the sale, sharing, or processing for targeted advertising purposes of that Personal Information by clicking Cookie Settings in the footer of our websites and toggling “off” all types of cookies other than strictly necessary cookies.
   • Opt-Out Preference Signals.We recognize the opt-out preference signals that we are required to recognize for compliance with applicable law. Where required by U.S. Privacy Laws, we treat the opt-out preference signals we are required to comply with as a valid request to opt-out of sale, sharing, and processing for purposes of targeted advertising, as applicable, for the browser or device through which the signal is sent and any consumer profile we have associated with that browser or device, including pseudonymous profiles. Further, if we know the identity of the consumer from the opt-out preference signal, we will also treat the opt-out preference signal as a valid request to opt out of sale and sharing for such consumer. Consumers may use opt-out preference signals by downloading or otherwise activating them for use on supported browsers and setting them to send opt-out preference signals to websites they visit. Please note, however, that our sites are not currently configured to recognize the “Do Not Track” signal.
8. Other Disclosures
   • California Residents Under Age 18. Our website is only intended for users over eighteen (18) years of age. However, if you are a resident of California under the age of 18 and inadvertently post content or data to our website, you may ask us to remove content or data that you have posted to the website by using the information in the “Contact Us” section below. Please note that your request does not ensure complete or comprehensive removal of the content or data, as, for example, some of your content or data may have been reposted by another user.
   • Loyalty Programs and Financial Incentives for California and Colorado Consumers.
     • Financial Incentive Disclosures: Under California law, we may provide financial incentives to California consumers who allow us to collect, retain, sell, or share their Personal Information. These incentives may include payments to consumers, a lower price for goods or services, and/or a higher level of goods or services. The incentives we provide are as follows:
     • The incentives we provide are as follows:
       • MyMaurices Rewards, which provides participants points that may be redeemed for products, access to exclusive offers, and additional discounts. We will collect unique identifiers, like an email address, and purchase history, as well as other categories of Personal Information as noted above, if you participate in this incentive program.
       • Our Mailing List, which ensures participants are the first to hear about exclusive offers, fashion trends, and other relevant information. We will collect a unique identifier, like an email address, physical address or phone number, as well as other categories of Personal Information as noted above.
       • maurices Private Label Credit Card, which provides participants access to exclusive offers and additional discounts. We will collect a unique identifier, like a physical address, as well as other categories of Personal Information as noted above.
     • You may withdraw from an incentive program at any time. If you have previously opted-in to the Mailing List and wish to opt-out, click here. If you have previously opted-in to MyMaurices Rewards and wish to opt-out call 1-866-977-1542.
     • To opt-in to any of the above incentive programs, click here.
     • We estimate the value of a participant’s Personal Information in each of the above incentive programs to be as follows:
       • MyMaurices Rewards - $66. We arrived at that value by using the margin related to the higher annual sales of these customers.
       • Our Mailing List - $59. We arrived at that value by using the margin related to the higher annual sales of these customers.
       • maurices Private Label Credit Card – $114. We arrived at that value by using the margin related to the higher annual sales of these customers.
     • Colorado Bona Fide Loyalty Program Disclosures: This section provides details about how we use Personal Information and Sensitive Personal Information for our loyalty programs, as well as how third parties and our loyalty program partners may interact with such information.
       • Through our loyalty programs, we collect the following categories of Personal Information about Colorado consumers that will be sold or processed for targeted advertising purposes:
         • First and Last Name
         • Email address;
         • Phone number; and
         • City, State, Postal Code and Country Code
     • The following categories of entities receive consumers’ Personal Information as part of our loyalty programs:
       • Our affiliates and vendors
       • Third party marketing and analytics providers

       Further, we do not disclose Personal Information collected via our loyalty programs to data brokers.

     • We have the following loyalty program partners, who provide loyalty program benefits in partnership with us:
       • Comenity Bank issues maurices Credit Card Accounts for consumers who have a maurices Private Label Credit Card.
     • If you ask us to delete the Personal Information we maintain about you, we may no longer be able to provide the loyalty program(s), if any, in which you participate. This is because we need to be able to process certain Personal Information about you, such as your email address, other contact information, and purchase history, to facilitate your participation in our loyalty program(s). We comply with applicable law when we process consumer deletion requests and we will allow you to continue to receive any loyalty program benefit(s) in which you are enrolled for which the deleted Personal Information is not necessary.
   • Changes to our Supplemental Notice. We reserve the right to amend this Supplemental Notice at our discretion and at any time. When we make material changes to this Supplemental Notice, we will notify you by posting an updated Supplemental Notice on our website and listing the effective date of such updates.
   • Contacting Us. If you have any questions, comments, requests, or concerns related to this Supplemental Notice, maurices information practices, or how to access this policy in another format, please contact us at Maurices Incorporated, dba maurices, Privacy/Online Customer Service, 425 W Superior Street, Duluth, Minnesota 55802, or at customerservice@maurices.com for assistance.

Back to top