Automated License Plate Recognition

At some of our stores, and when allowed by law, we use cameras with automated license plate reader (“ALPR”) technology near and around parking areas. These systems use cameras to automatically capture images of vehicles and their license plates, along with the date, time, and general location. We use this technology for limited, authorized purposes. Data is collected through ALPRs to prevent theft and fraud, help ensure security,  and maintain the  safety of individuals and our properties.

Associate and Independent Contractor Access

Trained Asset Protection associates, information security staff, and select service providers who maintain or improve the system may use or access ALPR data. Each person must complete Macy’s ALPR training before gaining access. Associates receive training on the appropriate access and use of the ALPR system and using ALPR information in compliance with applicable privacy and security policies and laws. 

Sharing with Law Enforcement

We only disclose your data if required by law or legal process, or when we believe doing so will help protect the safety, property, or rights of individuals or Macy’s. Examples include:

• Protecting the health or safety of individuals.
• Addressing crimes committed on Macy’s property.
• Identifying and addressing fraud or financial risk.
• Responding to a request from state or local law enforcement.
• A search warrant, other judicial order, or valid legal process.
• Assist with fraud prevention and potential criminal activity.

Sale and Sharing with Others

ALPR data is not sold, but may be disclosed when we believe it is appropriate to comply with the law or to protect the rights, property, or safety of our company, our customers, or others.

How We Keep the Data Secure

Our ALPR systems are monitored by our Asset Protection team to ensure data is handled properly and lawfully. Access is role-based and audited, and system activity is regularly reviewed to confirm proper use.

Oversight and Custodianship

Macy’s Vice President of Asset Protection is the official
custodian responsible for overseeing Macy’s ALPR systems, ensuring compliance
with this notice, and coordinating with our Legal Team for periodic reviews.

Data Accuracy and Correction

We take reasonable steps to ensure that ALPR data is accurate and current. Data validation is done prior to entering the information in ALPR. Associates follow established investigation guidelines when utilizing ALPR to initiate or supplement an investigation. 

Data Retention

Macy’s retains ALPR data only as long as necessary for the reasons described above — typically no more than 30 days, unless it’s needed for an active investigation or to comply with a legal obligation. After that, the data is permanently deleted.

Questions

If you have questions about this Macy’s ALPR Notice, please send an email to privacy.master@macys.com.