bluemercury

This Notice of Privacy Practices explains:

Why We Collect & Use Information

Safeguarding Information

Categories of Information We Collect and How We Collect It

Who We Share Your Information With

Our Use of Information Technologies

Managing Your Preferences

California Residents

Managing Customer Privacy (NV/VA)

Ownership of Customer Data

Additional Disclosures

Your access to and use of our services means you agree to the terms in this Notice and our Terms and Conditions.

This Notice may be updated from time to time. Bluemercury will notify you of any changes by posting an updated Notice on this page. We encourage you to refer to this Notice periodically so that you understand our current privacy practices. If you have any questions about this Notice, please contact our Customer Service department:

Via email at: privacymaster@bluemercury.com
By phone at 1-800-355-6000
By mail at:
Bluemercury Customer Service
ATTN: Privacy Office
7250 Woodmont Ave, Bethesda, MD 20814

Why We Collect & Use Information

We at Bluemercury understand that you entrust your data to us. We value that trust.

Your Personal Information will be retained only as long as necessary to carry out the purposes outlined in this Notice.

We may combine information collected from different sources. Below is a summary of the primary ways we collect and use information:

Primary Reasons for Data Collection	Uses
Product and Service Fulfillment (Fulfillment)	Fulfill, manage, and communicate with you about transactions. Establish and service your profile on our websites. Provide customer service and alert you to product or shipping information. Provide personal services. Manage loyalty programs (e.g., BlueRewards).
Marketing, Promotions and Advertising (Advertising)	Deliver information about products, services, and promotions. Provide interactive features on websites. Identify product and shopping preferences using information we collect from you and about you. Administer contests, sweepstakes, promotions, surveys, and focus groups.
Internal Operations (Operations)	Improve the effectiveness of our websites, stores, merchandise assortment, and customer service. Conduct business analysis, such as analytics, projections, and identifying areas for operational improvement.
Fraud Prevention, Security and Compliance (Security)	Protect our assets and prevent fraudulent transactions. Validate credentials and authenticate customers when logging into your online profile, or transacting in-store. Protect the security and integrity of our services and our data. Assist law enforcement and respond to legal/regulatory inquiries.

Back To Top

Safeguarding Information

Bluemercury has implemented procedural, technical, and administrative measures to safeguard the information we collect and use. For your protection, we designed our technology-enabled services to accept orders only from secured web and mobile browsers.

No security safeguards or standards are guaranteed to provide 100% security. You should always use appropriate self-protection measures and practice safe browsing on all websites. For more information on how you can securely shop with us, the National Cybersecurity Alliance provides comprehensive information to stay safe online.

Back To Top

Categories Of Information And How We Collect It

Bluemercury collects certain information from you and about you. Information is collected directly from your, or through other means.

We may collect or use the information made available to us through third-party platforms, online databases, and directories, or other means. We specify that data sourced from these third parties must be legitimately obtained. Note that this information may be governed by the privacy statement of the third party.

This may include:

Categories and Examples of Personal Information Collected	Categories of Sources from which Personal Information is Collected
Sensitive Personal Information Driver's license number, account log-in, password, debit/credit card number, geolocation, ethnic origin, health information Sensitive Personal Information below is denoted with an asterisk (*).	Information you provide Placing an order, taking advantage of other programs online or in-store such as visiting our Spa, completing surveys.
Identifiers real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name	Information You Provide Creating a profile, placing an order, creating a wish list, signing up for events, or taking advantage of other programs online or in-store. Information We Collect Through Data Collection Technologies When you visit our websites, shop in our stores, or interact with our other technologies. This information is either automatically collected or is customer-initiated. Information From Other Sources We may provide and receive information about you, with or from our service providers and vendors.
Commercial Information products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies	Information You Provide Placing an order, creating a wish list, signing up for events, or taking advantage of other programs online or in-store. Information From Other Sources We may provide and receive information about you, with or from our service providers and vendors.
Biometric Information* voice recordings, facial recognition	Information You Provide Calling, chatting, emailing, or otherwise contacting our customer service team. Information We Collect Through Data Collection Technologies Fraud and security activities when visiting our stores or placing online orders.
Internet or Other Electronic Network Activity Information browsing history, search history, information regarding a customer's interaction with an Internet website application, or advertisement	Information We Collect Through Data Collection Technologies When you visit our websites, shop in our stores, or interact with our other technologies, tagging Bluemercury on your social platforms, or interacting with our social platforms. This information is either automatically collected or is customer-initiated.

Back To Top

Who We Share Your Information With

We may share your information in the following ways:

Who We Share With	Categories of Information	Business or Commercial Purposes	Sold/Share Y/N	Disclosed Y/N
Internally with any Bluemercury Brand, Website, and Info You Post on our Social Media	Identifiers, Commercial Information and Information you Post Such as information you post in our reviews feature or share on your wish list	Offer products and services that may be of interest or to fulfill our obligations to you	N/A	N/A
Our Service Providers	Identifiers, Commercial, Biometric Information, Internet or Other Electronic Network Activity, Sensitive Personal Information, or any information you post with third parties who facilitate operations and perform services on our behalf	Provide services to Bluemercury so we can provide products and services to you	N	Y
Our Business Partners	Identifiers, Commercial Information, Internet or Other Electronic Network Activity, Sensitive Personal Information	Provide products and services that enhance our offering portfolio to help us serve you better	N	Y
Third Parties for Marketing Purposes	Identifiers, Commercial, Internet or Other Electronic Network Activity Information, or Sensitive Personal Information	Marketing purposes, including with third parties whose products or services we believe you may be interested in and for third parties' own marketing purposes. These third parties may also share your information with others and may include delivery of Interest-based advertising.	Y	Y
Any Successors to All or Part of Our Business	All Categories of Personal Information you have entrusted to Bluemercury	If Bluemercury merges with, acquires, or is acquired by another business entity your Personal Information may be shared with the new company. This may include an asset sale, corporate reorganization, or other change of control.	N/A	N/A
Any Compliance or Legislative Organization, as Required	All Categories of Personal Information you have entrusted to Bluemercury	When responding to a court order or subpoena, if a government agency or investigatory body requests information, or when we are investigating potential fraud. We may also share information if you are the winner of sweepstakes or other contests.	Y	Y

Back To Top

California Residents

California Shine the Light Law: If you reside in California, you have the right to ask us one time each year if we have shared Personal Information with third parties for their direct marketing purposes. To make a request please submit an inquiry to the following address: bluemercury's Customer Service, Attn: Privacy Office,7250 Woodmont Ave, Bethesda, MD 20814. In your request, please specify that you want a "Your bluemercury California Shine the Light Notice." Please allow 30 days for a response.

If you are a minor under 18 and have a profile on bluemercury.com, you may ask us to remove reviews or other content that you posted on the site by writing to privacy@bluemercury.com. We will begin to process your request within 30 days. Please note that processing your request does not ensure complete or comprehensive removal of the content that you posted.

Back To Top

Managing Customer Privacy (NV/VA)

This section describes rights residents Nevada and Virginia have regarding the management of your Personal Information. There may be situations where Bluemercury cannot grant a request, for example to complete a transaction to you or comply with law. These options do not apply to publicly available information from government records nor to deidentified or aggregated information.

Identity Verification

As required by law, we may require you take steps to verify your identity and/or legal authority prior to processing any request Bluemercury receives from or about you. In response to all requests, we will send a message to the email address provided in the request. Please follow the instructions to verify your request. We will use the information provided to match the identifying information we have to verify your identity before processing the request. No action will be taken on requests not verified within 7 days.

Back To Top

Ownership Of Customer Data

If Bluemercury or any of its subsidiaries is sold to or otherwise acquired by a third party, all Bluemercury data assets will become the property of the acquiring party. Such a party will be subject to any consent(s), opt-outs, or other customer conditions on data. A change in data ownership may or may not include a notice on the primary online sites of Macy's, Inc., or the affected subsidiary sites.

Back To Top

Additional Disclosures

1. Information About Children Under 13
   • The Children's Online Privacy Protection Act imposes requirements on Web sites that collect personal information about children under 13 years old (for example - name, address, email address, social security number, etc.). Our current policy is not to collect any personal information on any person under 13 years old online. For this reason, our sweepstakes and other promotions conducted online are restricted to entrants who are at least 13 years old.
   • If this policy changes, we will revise this portion of our Notice of Privacy Practices and will comply with the requirements of the Children's Online Privacy Protection Act, which includes providing notice and choice to each child's parent or guardian before collecting any Personal Information.


2. Opt-In Consent for Minors
   • bluemercury's services are offered to the customers who are of the age 16 years and above. No programs, services or offerings are intended for children under the age of 16.

Back To Top