Privacy Policy

Last revised: October 16, 2026This Privacy Policy describes the information collection, use, retention, and sharing practices of Brixmor Property Group (“Brixmor”, “we”, “our”, or “us”) when you interact with us through any websites (“Websites”) other digital products that link to this Privacy Policy, as well as when you interact with us offline such as when you visit any of the properties listed below (the “Properties”) or contact us by telephone or other offline means (collectively, the “Services”). For information regarding Brixmor’s general privacy practices, please visit its main Privacy Policy. The Properties are: • LaCenterra at Cinco Ranch • Pointe Orlando • Block 59 • Wynnewood Village • Roosevelt MallAPPLICABILITY OF PRIVACY POLICYThis Privacy Policy applies only as described above. It does not apply to the various retail, dining, and other entities that have leased space at the Properties. Your interactions with these entities are governed by the privacy practices of those entities. Please refer to a particular entity’s privacy policy for information on its privacy practices.PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONGAs used in this Privacy Policy, the term “personal information” means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular person. Information We Collect From YouWe collect personal information as you engage with the Services, including when you: • Contact us. When you contact us, we collect, from you, your personal identifiers (name, email address, telephone number) and any other information you choose to include in your correspondence. We use this personal information to respond to your questions or inquiries, troubleshoot where necessary, and address any issues you have with the Services. • Request leasing information. When you request leasing information from us, we collect, from you, your personal identifiers (name, email address, telephone number) and commercial information (store name and lease details). We use this personal information to assess your request and respond to your inquiry. • Submit an RFP (for events). When you submit an RFP (for events), we collect, from you, your personal identifiers (name, email address, telephone number), professional or employment-related information (company, address), and details about the event (e.g., preferred date, number of individuals). We use this personal information to assess your request and respond to your inquiry. • Participate in our SMS/MMS messaging programs. If you consent to participate in any of our SMS/MMS messaging programs, you agree to receive automated SMS/MMS messages to the telephone number provided (personal identifier) for the purposes disclosed at the time you provided your consent, which may include both marketing and transactional messages. You may provide your consent through website forms or other available consent mechanisms. Consent is not a condition of any purchase, service, or transaction with Brixmor. Message and data rates may apply. Message frequency varies. You can opt out at any time by replying STOP to any SMS or MMS message and can reply HELP for help. For more information, please see our Terms of Service. Your personal information, including your mobile telephone number and opt-in data and consent information, will not be sold or shared with third parties or affiliates for marketing or promotional purposes. We will disclose your information to service providers solely to facilitate the delivery of SMS/MMS messages on our behalf; however, those service providers are not permitted to use your information for their own marketing/promotional purposes. • Connect to Wi-Fi. When you connect to our Properties’ guest Wi-Fi network, we collect, from you, your personal identifiers (email address), as well as collect information from you automatically, including your internet or other electronic network activity information (device ID). We use this information to facilitate access to our guest Wi-Fi network and to protect it from unauthorized use. • Interact with our AI chatbot. When you interact with our AI chatbot, we collect, from you, your internet or other electronic network activity information (location, IP address, device identifiers) and any additional information you choose to provide in the chat. We use this information to respond to your questions or inquiries and troubleshoot where necessary. • Sign up for marketing emails. When you sign up for marketing emails, we collect, from you, your personal identifiers (name, email address, zip code). We use this information to send you email marketing updates relevant to the Properties and other products or services that may be of interest to you. If you no longer wish to receive our email marketing communications, you can click the “Unsubscribe” button at the bottom of each email. However, we will continue to send you service-related messages. We, through our service provider, use tracking pixels to determine whether you open emails, the time of opening, information about the device you use (including IP address), whether you interacted with the email, the topic of the email, whether it was delivered, sender and recipient addresses. We use this information to measure and improve the effectiveness of our communications. You can avoid downloading the pixel by rejecting the download of images in the email. • Interact with us on social media. When you interact with our social media pages on social networking websites, such as Facebook (Meta), TikTok, LinkedIn, and Instagram (each a “Social Media Page” and collectively, “Social Media Pages”), we collect basic engagement metrics and use those metrics to tailor content and improve user experience. Please note that we do not control the use or storage of the information that you have posted to any social networking websites. This information is collected and processed by the social networking websites for their own purposes, including marketing. For more information on how Facebook, TikTok, LinkedIn, and Instagram use your personal information, please see Facebook’s Privacy Policy, TikTok’s Privacy Policy, LinkedIn’s Privacy Policy, and Instagram’s Privacy Policy. • Interact with the Websites. In addition to the personal information you provide directly to us, we also collect information from you automatically as you use the Websites via cookies, pixel tags, and similar tracking technologies. This includes the following internet or other electronic network activity information.We use essential, performance, and analytics cookies, and similar technologies to collect your usage, device, and geolocation information (determined through your IP address) when you interact with the Websites. We use this information to: (i) provide the Websites; (ii) track you within the Websites; (iii) enhance user experience; (iv) conduct analytics to improve the Websites; (v) prevent fraudulent use of the Websites; (vi) detect and mitigate unlawful activity; (vii) diagnose and repair technical errors; and (viii) provide targeted advertising.Our use of third party marketing and analytics cookies may be considered a sale/sharing under California law. To opt out, please visit Do Not Sell or Share My Personal Information or click the blue icon located at the bottom-left footer of the Websites.In general, you can also disable cookies by setting your browser to refuse cookies or indicate when a cookie is being sent. Please note, if you opt out of these targeted advertising cookies, your opt-out will be specific to the web browser, app, or device from which you accessed the opt-out. If you use multiple devices or web browsers, you will need to opt out of each browser or device that you use. To opt-out of interest-based advertising generally or to learn more, you can visit the Network Advertising Initiative or the Digital Advertising Alliance. Particular online tracking technologies to note for users of the Websites are as set forth below. o We use Google Analytics to collect information on your use of the Websites for its improvement. To collect this information, Google Analytics installs cookies on your browser or reads cookies that are already there (for more information about how Google collects and uses the information see here). Google Analytics also receives information about you from applications you have downloaded or services that you use that partner with Google. Google’s ability to use and share information collected by Google Analytics about your visits to our Websites or to another application which partners with Google is described by the Google Analytics Terms of Use and Privacy Policy. To prevent your data from being used by Google Analytics, you can download the Google Analytics opt-out browser add-on, which can be accessed here. You can also adjust your Ad Settings or change settings in your Google My Activity if you are signed into your Google Account.Information Collected From Third Party Sources • If you submit a leasing application, we will receive your personal information from our credit check provider. This includes your personal identifiers (name), commercial information (loans, payment history, and status), criminal history, and credit score. We use this personal information to assess your leasing application. We also purchase aggregated and anonymized data of consumers from our advertising provider for data analytics and actionable insights. We use this aggregated and anonymized data to understand preferences and foot traffic to improve our Services. Our provider receives consumer information from mobile applications that have integrated with our provider’s technology. To change your consent to these practices, please visit your mobile application settings or location settings within your mobile device.We de-identify and/or aggregate the data we collect and use and share it, in de-identified and/or aggregated form, for benchmarking purposes, advertising, and internal analytics. We maintain and use this data in de-identified form. We will not attempt to reidentify the data unless it is necessary to determine whether our deidentification processes satisfy applicable data protection laws.In our processing of your personal information, we may also use your personal information to efficiently maintain our business, to comply with the law, and for other limited circumstances as described in HOW WE SHARE YOUR INFORMATION.DATA RETENTIONUnless otherwise stated in this Privacy Policy, we retain your personal information as long as reasonably necessary to retain it for the purpose for which it was collected or until we receive a valid request to delete the information, in which case we will delete or anonymize the information (unless there is a reason to retain the information for longer as explained below). This includes maintaining a customer account with us (if applicable) or until the information is no longer needed for a service provider or contractor’s operational purpose(s). Billing, tax, audit, and transaction-related records may also be retained for longer where reasonably necessary for accounting, dispute resolution, chargeback management, tax, audit, and legal compliance purposes.We use the following criteria to determine whether it remains reasonably necessary to retain your personal information for such purposes or a service provider or contractor’s operational purpose(s): (i) any retention period required by applicable law or regulation; (ii) actual or threatened litigation requiring preservation of the information; (iii) statutes of limitations for potential legal claims; (iv) responding to legal process or enforceable governmental requests; (v) enforcing our contracts (including investigating potential violations); (vi) keeping our properties and assets secure and preventing fraud; and (vii) showing proof of performance. When we determine that it is no longer reasonably necessary to retain your personal information based on the above criteria, we will delete or anonymize your personal information.HOW WE SHARE YOUR PERSONAL INFORMATIONBrixmor generally shares personal information in the following instances: • Within Brixmor. We may share your personal information within the Brixmor corporate family, including with subsidiaries or affiliates, for legitimate business purposes, to efficiently carry out our business, and to the extent permitted by law. • In the event of a corporate reorganization. In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as a reorganization, merger, acquisition, sale, joint venture, assignment, consolidation, transfer, change of control, or other disposition of all or any portion of our business, assets or stock, including without limitation bankruptcy or liquidation, we would share personal information with third parties, including the buyer or target (and their agents and advisors) for the purpose of facilitating and completing the transaction. • For legal purposes. We will share your personal information where we are legally required to do so, such as in response to court orders, law enforcement or legal process, including for national security purposes; to establish, protect, or exercise our legal rights, as required to enforce our terms of service or other contracts; to defend against legal claims or demands; to detect, investigate, prevent, or take action against illegal activities, fraud, or situations involving potential threats to the rights, property, or personal safety of any person; or to comply with the requirements of any applicable law.B. Sharing in the Preceding Twelve (12) MonthsIn the preceding twelve (12) months, Brixmor has disclosed the following categories of personal information for a business purpose to the following categories of service providers or contractors: • With service providers. We have disclosed your personal information to service providers that assist us in providing the Services. These service providers assist us with the following: information technology (“IT”) support; website hosting; cloud storage; data analysis; customer relationship management; email delivery; marketing; external auditors; and similar services. • With IT support. Brixmor has disclosed your internet and other electronic network activity information to our IT support to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, identify and repair errors, and to maintain and improve the Websites.C. Sale of Personal InformationIn the preceding twelve (12) months, Brixmor has shared your internet or other electronic network activity information collected via cookies and other tracking technologies with our data analytics providers and ad networks as described in PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG to provide targeted advertising. Such sharing may be deemed a sale under the California Consumer Privacy Act. To opt out, please visit Do Not Sell or Share My Personal Information or click the blue icon located at the bottom-left footer of the Websites.All the above categories exclude SMS/MMS messaging originator opt-in data and consent. This information will not be sold or shared with third parties or affiliates for marketing or promotional purposes. We will disclose this information to service providers solely to facilitate the delivery of SMS/MMS messages on our behalf; however, those service providers are not permitted to use your information for their own marketing/promotional purposes.MARKETING COMMUNICATIONSYou may opt-out of receiving marketing emails from us by clicking the “unsubscribe” link provided with each email. Please note that we will continue to send you emails necessary to the Websites, the Services, or any assistance you request.RIGHTS OF CALIFORNIA RESIDENTSThe California Consumer Privacy Act, as amended (collectively, “CCPA”), grants certain rights to California residents. If our processing of your personal information is subject to the CCPA, you are entitled to the following rights: • Right to Access/Know. Unless an exception applies, for example, if granting this right would require us to reveal a trade secret, you have the right to (i) receive confirmation of whether we process your personal information, (ii) receive a list of categories of personal information we have collected, used, disclosed, and sold about you, (iii) receive a list of the categories of third parties to which we have sold your personal information, and (iv) access your personal information. You may only make a request for access twice within a 12-month period. • Right to Deletion. You have the right to request the deletion of your personal information that we collect or maintain, subject to certain exceptions. For example, if we are required by law to retain the information that you are asking be deleted, we would not be able to delete the information until we are legally permitted to delete it. • Right to Correct. You have the right to correct inaccurate personal information that we collect or maintain. • Right to Opt-Out of Sale/Sharing. You have the right to opt-out of the sale/sharing of your personal information. Brixmor does not have actual knowledge that it sells or shares personal information of minors under the age of 18 years. • Right to Non-Retaliation. You have the right not to be retaliated against for exercising your privacy rights under the CCPA. • Right to Data Portability. You have the right to ask that we transfer the personal information you gave us, to you, or in certain cases, directly to another organization, in a format that is easily understandable and to the extent technically feasible, in a structured, commonly used, machine-readable format. • Right to limit use of sensitive personal information. You have the right to limit the use of how we use your sensitive personal information. We do not collect sensitive personal information, except financial account information, which we only use to process your purchase. However, Brixmor does not process personal information in a manner that gives rise to this right. To exercise your right to access/know, correct, or delete your personal information, you may submit a request by completing our webform or by telephone at 800.468.7526. To opt out, please visit Do Not Sell or Share My Personal Information or click the blue icon located at the bottom-left footer of the Websites. If the browser or extension that you (or your authorized agent) are using supports Global Privacy Control (GPC) (see here for more information), you may utilize the GPC opt out preference signal to instruct us to not sell or share any of your personal information collected online. The GPC opt out preference signal will apply to the device, platform, or browser in which you utilize it. You can utilize the opt out preference signal by turning on the signal in your device, platform, or browser settings. Please note that you must opt out of each device and each browser.When submitting a request to know/access, correct, or delete your personal information, you must provide us with sufficient information that allows us to reasonably verify you are the person about whom we collected the personal information and describe your request with sufficient detail to allow us to properly evaluate and respond to it. In doing so, we will take steps to verify your request by matching the information provided by you with the information we have in our records. If we are not able to verify your identity for know/access, correction, or deletion requests with the information provided, we may ask you to provide additional information.Only you, or a person that you authorize to act on your behalf may make a request related to your personal information. If you are submitting a request on behalf of another person, you must provide us with written permission, signed by the person whom the request pertains to, that shows you are authorized to submit the request on behalf of that person. DO NOT TRACKWe do not support Do Not Track (DNT). Do Not Track is a preference you can set to inform websites and applications that you do not want to be tracked.SECURITY OF YOUR PERSONAL INFORMATIONWe implement and maintain reasonable security measures to protect the personal information we collect and maintain. These security measures include encryption, access controls, and employee training. However, no security measure or modality of data transmission over the Internet is 100% secure and we are unable to guarantee the absolute security of the personal information we have collected from you.AGE RESTRICTIONSThe Services are not intended for individuals under the age of eighteen (18). If we learn that we have collected or received personal information from a child under the age of eighteen (18), we will delete that information. If you believe we might have any information from or about a child under the age of eighteen (18), please contact us at [email protected] TO THIS PRIVACY POLICYWe may amend this Privacy Policy in our sole discretion. We will post the changes to this page and will indicate the date the changes go into effect. We encourage you to review our Privacy Policy to stay informed. If we make changes that materially affect your privacy rights, we will notify you by prominent posting on our Website.CONTACT USIf you have any questions regarding this Privacy Policy, please contact us at [email protected].