Privacy Policy
This Privacy Policy describes how Bed Bath & Beyond and its affiliates collect, use, and share personal information, unless a particular affiliate has a different Privacy Policy posted on its website, in which case that Privacy Policy shall describe that affiliate's collection, use, and sharing of personal information. The "affiliates" referred to in this Privacy Policy includes concepts such as buybuy BABY, Harmon Face Values, Decorist, and such other affiliates as we may acquire or launch from time to time.
Table of Contents
- Types of Information We Collect
- Use And Processing Of Your Personal Information
- Sharing Of Personal Information
- Your Choices
- How We Protect Personal Information
- How Long We Retain Information
- Information for California Residents
- Information for Non-US Residents
- Third Party Applications/Websites
- Contact Information
- Changes To This Privacy Policy
- California Information Sharing Disclosure
Types of Information We Collect
Personal information means information that allows someone to identify or contact you or your household. Non-personal information means information that does not directly identify you or your household. We collect both types of information about you.
The following provides examples of the types of information that some of our concepts collect about you and how we use the information.
| Context | Types of Information | Primary Purpose for Collection and Use of Information |
| Account Registration | We collect your name and contact information when you create an account. | We have a legitimate interest in providing account relating functionalitiesto our users. Accounts can be used for easy checkout and to save your preferences and transaction history. |
| BEYOND+ Membership Program | If you sign up for our BEYOND+ membership program, we collect your name, contact information (such as e-mail address and phone number), billing address, and payment card information. We use reasonable efforts to protect such payment card information from unauthorized access, use, or disclosure (for more information please see the section below titled “How We Protect Personal Information”). | We have a legitimate interest in administering our BEYOND+ Membership Program, including, among other things, processing your payment for the membership, communicating with you about program benefits, providing you with membership benefits, detecting security incidents, and protecting against malicious, deceptive, fraudulent, or illegal activity. |
| Brand Credit Cards | If you apply for one of our brand credit cards, we collect your name, address, last 4 digits of your social security number, social insurance number, and income information. When you use your brand credit card, we also receive information from the financial institutions that we partner with, such as transaction history (including credit card number) and account profile. We use reasonable efforts to protect such credit card information from unauthorized access, use, or disclosure (for more information please see the section below titled “How We Protect Personal Information”). | We use your information to perform our contract to provide you with the benefits associated with our credit cards, such as tracking the rewards/points you earn for purchasing products. We also have a legitimate interest in performing audits and maintaining business records associated with our credit card programs. |
| Demographic Information | We may collect information from you, such as your age or location. | We have a legitimate interest in understanding our users and providing tailored services and products. |
| Distance Information | When you use one of our Apps we collect your location from the GPS, Wi-Fi, and/or cellular technology in your device to determine your distance from a store. | We have a legitimate interest in understanding our users and providing tailored services and products. In some contexts, our use is also based upon your consent to provide us with geolocation information. |
| Email Interconnectivity | If you receive email from us, we use certain tools to capture data related to when you open our message, click on any links or banners it contains, and make purchases. | We have a legitimate interest in understanding how you interact with our communications to you. |
| Employment | If you apply for a job, we collect information necessary to process your application or to retain you as an employee. Employees are provided a separate privacy notice that relates to employment data. | In some contexts, we are required by law to collect information about our employees. We also have a legitimate interest in using your information to have efficient staffing and work force operations. |
| Feedback/Support | If you provide us feedback or contact us for support, we will collect your name and e-mail address and possibly other personal information, as well as any other content that you send to us in order to reply. | We have a legitimate interest in receiving, and acting upon, your feedback or issues. |
| Loyalty or Rewards Programs | If you sign up for one of our loyalty or rewards programs, we collect your name and contact information (such as email address and telephone number). | We have a legitimate interest administering our loyalty and rewards programs. That administration includes, among other things, communicating with you about program benefits, providing you with membership benefits, detecting security incidents, and protecting against malicious, deceptive, fraudulent, or illegal activity. |
| Mailing List | When you sign up for one of our mailing lists, we collect your email address or postal address. | Where required by law, we have obtained your consent to share information about our products or services, and we use your email address or postal address to share such information. We also have a legitimate interest in sharing information about our products or services, and we use your email address or postal address to share such information. |
| Mobile Devices | We collect information from your mobile device such as unique identifying information broadcast from your device when visiting our website or when visiting one of our stores. | We have a legitimate interest in identifying unique visitors, and in understanding how users interact with us on their mobile devices. |
| Order Placement | We collect your name, billing address, shipping address, e-mail address, phone number, and payment card information when you place an order. We use reasonable efforts to protect such payment card information from unauthorized access, use, or disclosure (for more information, please see the section below titled “How We Protect Personal Information”). | We use your information to perform our contract to provide you with products or services. |
| Partner Promotion | We collect information that you provide as part of a co-branded promotion with another company. | We have a legitimate interest in fulfilling our promotions. |
| Surveys | When you participate in a survey, we collect additional information that you provide through the survey. If the survey is provided by a third-party service provider, the third party's privacy policy applies to the collection, use, and disclosure of your information. | We have a legitimate interest in understanding your opinions and collecting information relevant to our organization. |
| Sweepstakes or contests | When you participate in a sweepstakes or contest, we collect information about you which includes contact information to notify you if you are selected. | We have a legitimate interest in operating the sweepstakes. In some contexts, we are also required by law to collect information about those who enter into our sweepstakes. |
| Third Party Tracking | We participate in behavior-based advertising. This means that a third party may use technology (e.g., a cookie (further described below)) to collect information about your use of our website so that they can provide advertising about products and services tailored to your interests. That advertising may appear either on our websites, or on other websites. You can opt-out of receiving advertising based upon your browsing behavior from some network advertising companies by going to the Network Advertising Initiative and the Digital Advertising Alliance websites. Cookies may be managed by following instructions provided by your browser. | We use this information to provide advertising about products and services tailored to our users’ interests. |
| Web logs | We collect information from you, including your browser type, operating system, Internet Protocol (IP) address (a number that is automatically assigned to your computer when you use the Internet), domain name, click-activity, referring website, and/or a date/time stamp for your visit. | We have a legitimate interest in monitoring our networks and the visitors to our websites. Among other things, it helps us understand which of our services is the most popular. |
| Cookies | "Cookies" are small pieces of information that a website sends to your device while you are viewing a website. We use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your device until you delete them). Among other things, cookies allow us to provide you with a more personal and interactive experience tailored to your interests and to improve our marketing efforts. Cookies may be managed by following instructions provided by your browser. If you choose to disable cookies, some areas or features of our websites may not work properly. | We use this information to make our websites operate efficiently, to improve user experience on our websites, and to understand website traffic and how our websites are being used. |
In addition to the information that we collect from you directly, we may also receive information about you from other sources, including third parties, business partners, our affiliates, or publicly available sources.
Use and Processing of Your Personal Information
In addition to the uses described above, we use your personal information in the following ways:
- To identify you when you visit our websites or our stores.
- To provide the products and services you request, or to process returns.
- To improve our services and product offerings.
- To streamline your checkout process.
- To conduct analytics (e.g., to enhance user experience on our website).
- To respond to your inquiries related to support, employment opportunities, or other requests.
- To send marketing and promotional materials, including information relating to products, services, sales, or promotions.
- For internal administrative purposes, as well as to manage our relationship with you.
- To detect security incidents, and protect against malicious, deceptive, fraudulent, or illegal activity, including attempts to manipulate or violate our policies, procedures, or terms and conditions.
- To comply with legal obligations, to establish or exercise our rights, to defend against a legal claim, and to investigate, prevent, or take action regarding possible misconduct.
Your Choices
You can make the following choices regarding your personal information:
- Promotional Emails. You may choose to provide us with your email address for the purpose of allowing us and our affiliates to send free newsletters, surveys, offers, and other promotional materials to you, including targeted offers from third parties. You can stop receiving promotional emails by following the unsubscribe instructions in e-mails that you receive. If you decide not to receive promotional emails, we may still send you transactional communications, such as those about your account, to fulfill orders you have made, to ask you to rate the product you purchased, or other service-related communications.
- Promotional Mailings. If at any time you do not want to receive offers and/or circulars from us, you can remove yourself from our mailing lists by emailing us (our contact information is below) with "NO SNAIL MAIL" in the subject line along with your name, address and zip code or postal code. Please note that our mailings are prepared in advance of being sent. Although we will remove your name from our mailing list after receiving your request, you may still receive mailings from us that had been initiated prior to your name being removed.
- Changes to Your Personal Information. We rely on you to update and correct your personal information. Most of our websites allow you to modify your account profile. Note that we may keep historical information in our backup files as permitted by law.
- Online Tracking. We do not currently recognize a broadcast "Do Not Track" browser signal.
How We Protect Personal Information
No method of transmission over the Internet, or method of electronic storage, is fully secure. While we use reasonable efforts to protect your personal information from unauthorized access, use, or disclosure, we cannot guarantee the security of your personal information. In the event that we are required by law to inform you of any unauthorized access to your personal information, we may notify you electronically, in writing, or by telephone, if permitted to do so by law.
Some of our websites permit you to create an account. When you do so, you will be prompted to create a password. You are responsible for maintaining the confidentiality of your password, and you are responsible for any access to or use of your account by someone else that has obtained your password, whether or not such access or use has been authorized by you. You should notify us of any unauthorized use of your password or account.
How Long We Retain Information
We retain your personal information for the period necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Information for California Residents
- California Information Sharing Disclosure. California law indicates that organizations should disclose whether certain categories of information are collected, “sold” or transferred for an organization’s “business purpose” (as those terms are defined under California law). You can find a list of the categories of information that we collect and share at the end of this Privacy Policy. Please note that because this list is comprehensive it may refer to types of information that we share about people other than yourself. If you would like more information concerning the categories of personal information (if any) we share with third parties or affiliates for those parties to use for direct marketing, please submit a written request to us using the information in the "Contact Information" section below.
-
Rights with Respect to Personal Information. If you are a resident of California, you may have additional rights under applicable data protection laws,
with respect to your personal information including:
- Request Access. If required by law, upon request, we will grant reasonable access to the personal information that we hold about you, including in some cases the right to data portability. You can exercise this right by completing and submitting a Request Form or by contacting us at 1-800-GO-BEYOND (1-800-462-3966) between 7:00 am and 1:00 am EST, seven (7) days a week.
- Request Deletion. In certain circumstances, you may request that we delete your personal information. If required by law, we will delete your personal information after such a request is made. We may also decide to delete your data if we believe that the data is incomplete, inaccurate, or that our continued use and storage are contrary to our obligations to other individuals or third parties. When we delete personal information, it will be removed from our active database, but it may remain in archives where it is not practical or possible to delete it. You should note that there are some situations in which we may decline to delete your personal information. For example, we may keep your personal information as needed to comply with our legal obligations, where permitted by law, to resolve disputes, and/or to enforce any of our agreements. You can exercise this right by completing and submitting a Request Form or by contacting us at 1-800-GO-BEYOND (1-800-462-3966) between 7:00 am and 1:00 am EST, seven (7) days a week.
-
Annual Data Requests. The following chart contains statistics about consumer data requests received in 2021. This chart will be updated annually.
Total received requests Complied with in whole or in part Denied (e.g. unable to verify the identity of the requestor) Mean (average) days to respond Access Requests 78 47 31 23 Deletion Requests 1067 747 320 21 Opt-out of Sale Requests N/A (we do not “sell” your personal information)
You can exercise these rights by completing and submitting a Request Form or by contacting us at 1-800-GO-BEYOND (1-800-462-3966) between 7:00 am and 1:00 am EST, seven (7) days a week. We do not discriminate against California residents who exercise any of their rights described in this Privacy Policy. When we receive a request to access or delete information, we take steps to verify the identity of the individual making the request. Our verification may include asking that you confirm your email address by clicking on a link that we send to you. If you do not have an email address, we may ask you to provide a photo ID confirming your identity. Following a request, we will use reasonable efforts to supply or delete personal information about you in our files.
If you are an authorized agent submitting a request on behalf of an individual, please submit the following information through our Request Form : the consumer’s name, email address, mailing address, phone number, request type, and applicable affiliate(s). After an authorized agent submits a request, we will communicate directly with the consumer to verify the consumer’s identity and respond to the request.
Information for Canadian Residents
You fully understand and unambiguously consent to the collection, use, retention and disclosure of personal information in accordance with this Privacy Policy. Such consent shall constitute a legitimate interest as described herein. We may also use, store, or share personal information we collect in the course of our operations in Canada outside of Canada. For example, your personal information will be stored and processed on our computers in Canada and the United States. We may also provide your personal information to our associates and to third-party service providers acting as our authorized agents or partners in providing our services or co-branded services to you. Our associates and third-party service providers may be located outside of Canada. Please refer to the contact information below to find out information about (i) our practices with respect to the use of service providers outside Canada, and (ii) questions you may have about the collection, use, disclosure, or storage of personal information by such service providers located outside Canada.
Third Party Applications/Websites
We have no control over the privacy practices of websites or applications that we do not own. For example, to enhance your experience on this Site, we use Google Maps APIs including at account and registry creation, and at checkout. Google has specifically requested that we inform you that your use of such services is subject to the Google Maps/Google Earth Additional Terms of Service (including the Google Privacy Policy).
Contact Information
If you have any questions, comments, or complaints concerning our privacy practices, please contact us at the address below. We will attempt, where practical, to respond to your requests and to provide you with additional privacy-related information.
privacy.information@bedbath.com
Bed Bath & Beyond Inc.
Attn: Customer Service – Privacy
650 Liberty Avenue
Union, New Jersey 07083
Changes to this Privacy Policy
We may change our Privacy Policy and practices over time. To the extent that our Policy changes in a material way, the Policy that was in place at the time that you submitted personal information to us will generally govern that information.
Updated and Effective: June 08, 2022
California Information Sharing Disclosure
California Civil Code Sections 1798.115(c), 1798.130(a)(5)(c), 1798.130(c), and 1798.140 indicate that organizations should disclose whether the following categories of personal information are collected, transferred for “valuable consideration,” or transferred for an organization’s “business purpose” (as those terms are defined under California law). The table below indicates the categories of personal information we collect and transfer in a variety of contexts. Please note that because this list is comprehensive, it may refer to types of information that we collect and share about people other than yourself. For example, while we transfer credit card or debit card numbers for our business purpose in order to process payments for orders placed with us, we do not collect or transfer credit card or debit card numbers of individuals who submit questions through our website’s “contact us” page. We do not “sell” your personal information. In addition, we may disclose information when requested to government entities, auditors, lawyers, consultants, and other parties as required by law concerning any category (e.g., in response to a subpoena).
| Categories of Personal Information that We Collect | Categories of Third Parties to Whom We Disclose Personal Information for Business Purpose |
| Identifiers – such as name, postal address, phone number, unique personal identifier, online identifier, internet protocol (IP) address, device ID, email address, account name, signature, social security number (the last 4 numbers in connection with processing your application for a credit card with us), driver’s license number (e.g., in some cases to process product returns), passport number (if needed to verify your identity), or other similar identifiers. |
|
| Financial information – such as bank account number, credit or debit card number, or other financial information. |
|
| Commercial information – such as information about products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
|
| Network activity data – internet or other electronic network activity information, such as browsing history, search history, and information regarding an individual’s interaction with an internet website, application, or advertisement. |
|
| Geolocation data – such as when you use our App, or the IP address assigned to your computer when you use the Internet and visit our website. |
|
| Electronic and sensory data – such as audio, electronic, visual, thermal, olfactory, or similar information (e.g., pictures, security video surveillance footage). |
|
| Professional/employment information – such as occupation and professional references or estimated information provided by a third party for marketing purposes. |
|
| Education information – such as information contained in education records, if you have a college registry, or estimated information provided by a third party for marketing purposes. |
|
| Inferences – drawn from any of the information listed above to create a profile. |
|
Notice of Financial Incentive under California Law. We offer our customers rewards programs that provide certain benefits, such as rewards, promotions, and exclusive offers (the “Rewards Programs”). When you sign up for a Rewards Program, we will ask you to provide your name and email address. Because the Rewards Programs involve the collection of personal information, they might be interpreted as a “financial incentive” program under California law. The value of your personal information to us is related to the value of the free or discounted products or services that you obtain in connection with the Rewards Programs, and it is based on the expense related to offering those free or discounted products or services. You may withdraw from participating in a Rewards Program at any time through your account or by calling customer service at 1-866-532-6826. Visit the Rewards Program’s Terms and Conditions to view full program rules, including how to join.
YOUR FIRST ROOM DESIGN
Decorist online interior design makes it easy and affordable to design your home.