Highlights of Macy's Privacy Practices

Updated October 2025

This Notice applies to Personal Information collected, processed, or stored by Macy's, macys.com, Macy’s Backstage, and Market by Macy’s. Personal Information may be shared between or processed by any of these brands. View the complete Notice of Privacy Practices.


To view your separate Citibank, N.A. Privacy Statement for your Macy's credit card or to learn more about our credit services, please Click Here.

Why we collect and use information

We may use the information we collect for the following primary reasons:

  • Product & Service Fulfillment
  • Marketing, Promotions & Advertising
  • Internal Operations
  • Fraud Prevention, Security & Compliance
  • Credit Card & Banking

We may combine information collected from different sources. Learn More about some of the ways we use information.

Safeguarding information

As a matter of policy, we do not disclose details regarding our security measures as this could be useful information for criminals and other bad actors.  For more information on how you can securely shop with us, please review our Security Tips or visit the Customer Protection Center.

Categories of Information We Collect and How We Collect It

Information We Collect

We collect various categories of Personal Information such as identifiers, payment information, commercial information, demographic information, device information, and internet and other network activity information. We also may collect biometric information, sensitive personal information and geolocation including precise geolocation information.

Learn More about the types of information we may collect and share.


How We Collect

We collect information from a variety of sources, including information provided by you, transaction information, technology-enabled collections, and information we collect about you from third-party sources.


Learn More about how we collect your Personal Information.


Who We Share Your Information With


We may share your Personal Information with our Affiliates, Service providers, Business partners, Third parties and/or Data Brokers for Marketing Purposes and any Compliance or Legislative Organization as required.



Learn More about how we share your Personal Information.

Our Use of Information Technologies

Macy’s uses cookies, pixels, software development kits (SDKs) and other tracking technologies to deliver, monitor, and improve our websites, mobile-enabled web, mobile apps and display content. Approved third parties may also place cookies on your web or mobile browser when you use our online services. You can change your online tracking preferences by using the Cookie Preferences link located at the bottom of the macys.com website and updating your Privacy Settings in your Macy's mobile app.

Macy’s uses a third-party privacy tool to recognize if you are broadcasting the global privacy control (GPC) signal.

Managing your preferences

Learn More about Managing your preferences



California Residents

The California Consumer Privacy Act of 2018 as amended (CCPA) provides California residents with specific rights regarding their Personal Information.


You have the right to request access to your Personal Information that Macy's collects, uses, sells, shares or discloses to third parties,

  • You have the right to request the deletion of your Personal Information that Macy's collects about you. and,
  • You have the right to limit use and disclosure of sensitive personal information to a third party if Macy’s uses that information for any purpose other than the designated purpose agreed to.
  • You have the right to correct inaccurate personal information that Macy’s has collected about you.
  • You have the right to opt-out of the selling or sharing of your Personal Information to third parties.
  • You have the right to opt-out of automated decision making including profiling against any information Macy’s has collected about you.

Learn More about your rights and how to exercise them.


Managing Customer Privacy (CO/CT/NV/UT/VA/OR/TX/MT/IA/DE/NH/NE/NJ/MN/TN/MD)

This section describes rights residence in Colorado, Connecticut, Nevada, Utah, and Virginia, Oregon, Texas, Montana, Iowa, Delaware, New Hampshire, Nebraska, New Jersey, Minnesota, Tennessee and Maryland residents have regarding the management of their Personal Information. There may be situations where Macy’s cannot grant a request, for example to complete a transaction to you or comply with law. These options do not apply to publicly available information from government records nor to deidentified or aggregated information.

  • You have the right to request access to your Personal Information that Macy's collects, uses, sells, shares or discloses to third parties.
  • You have the right to request the deletion of your Personal Information that Macy's collects about you.
  • You have the right to withdraw the consent to processing of your Personal Information. (CO/CT/OR/MT/DE/NH/NJ/MN/MD Residents Only)
  • You have the right to limit use and disclosure of sensitive personal information to a third party if Macy’s uses that information for any purpose other that the designated purpose agreed to.
  • You have the right to correct inaccurate personal information that Macy’s has collected about you. ( CO/CT/VA/OR/TX/MT/DE/NH/NE/NJ/MN/TN/MD Residents Only)
  • You have the right to opt-out of the selling or sharing of your Personal Information to third parties.
  • You have the right to opt-out of automated decision making including profiling against any information Macy’s has collected about you. (CO/CT/VA/OR/TX/MT/DE/NH/NE/NJ/MN/TN/MD Residents Only)
  • You have the right to appeal should Macy’s be unable to take action on your Privacy Request. (CO/CT/VA/OR/TX/MT/IA/DE/NH/NE/NJ/MN/TN/MD Residents Only)
  • You have the right to request Macy’s provide a list of specific third parties, other than natural persons, to which your personal information has been disclosed. (OR/MN Residents Only)
  • You have the right to request Macy’s provide a list of the categories of third parties to which your personal information may have been disclosed. (DE Residents Only)
  • Macy’s will never discriminate nor retaliate against you if you choose to exercise any of these privacy rights.

Learn more about managing customer privacy for CO/CT/NV/UT/VA/OR/TX/MT/IA/DE/NH/NE/NJ/MN/TN/MD residents

Additional Disclosures

The Children's Online Privacy Protection Act imposes requirements on websites that collect Personal Information about children under 13 years old (for example - name, address, email address etc.). Our current policy is not to collect any Personal Information on any person under 13 years old online. For this reason, our sweepstakes and other promotions conducted online are restricted to entrants who are at least 13 years old.


If this policy changes, we will revise this portion of our Notice of Privacy Practices and will comply with the requirements of the Children's Online Privacy Protection Act, which includes providing notice and choice to each child's parent or guardian before collecting any Personal Information.

International Customer Privacy

Learn More about the types of information regarding our International Customer Privacy Policy


Ownership of Customer Data

If Macy's or any of its subsidiaries is sold to or otherwise acquired by a third party, all Macy's data assets will become the property of the acquiring party. Such a party will be subject to any consent(s), opt-outs, or other customer conditions on data. A change in data ownership may or may not include a notice on the primary online sites of Macy's, Inc., or the affected subsidiary sites.