Privacy Statement

Effective Date: January 2024

Welcome to the privacy statement (“this Privacy Statement”, “ this statement ”, or “our statement”) for HomeGoods, a division of The TJX Companies, Inc. (“TJX”). HomeGoods may be referred to throughout this statement as “HomeGoods”, “we”, “ us”, or “our”. Sometimes we may refer to HomeGoods along with TJX and TJX companies such as Marshalls, Homesense, T.J. Maxx, Sierra, and other affiliates as the “TJX Businesses.” We use the words “ you” and “your” to mean you, the reader, and other visitors, users, or customers to our stores, websites, and mobile apps who are, in all cases, over the age of 13.

This Privacy Statement pertains to the personal information we collect about you in our stores or on our websites, via our mobile apps, and anywhere else online or offline where we may interact with you and collect your personal information.

The Privacy Statement describes:


What Information We Collect

We may collect certain information from or about you in connection with your interactions with HomeGoods, such as when you use our websites or mobile apps or shop in our stores. This information may include:


How We Collect Your Information

We collect information from or about you in a number of different ways including:

To learn more about what information we collect in our stores and how we collect it, view our TJX-In Store Privacy Notice.

How Long We Retain Your Information

We will store and retain your personal information in accordance with applicable law and as long as necessary to carry out the purposes described in this statement in accordance with our internal data retention procedures. The criteria used to determine the retention periods include:


How We May Use Your Information

When we collect your information, we may use it for a number of purposes, including to:

We also may use the information in other ways for which we provide specific notice at the time of collection.

In order for us to maintain the accuracy of your personal information and improve our communication with you, we may also supplement the information we collect with other public demographic information.


How We Share Your Information

Affiliates

We may share your personal information among the TJX Businesses. They may use this information to offer products and services to you consistent with the purposes identified in this statement.

Business Sale/Purchase

Your information may also be transferred as an asset in connection with a merger or sale (including any transfers made as part of a reorganization, dissolution or liquidation) involving all or part of the TJX Businesses or as part of a stock sale or other change in corporate control.

Contests and Promotions

If a contest, sweepstakes, or promotion is jointly sponsored by us and one or more other sponsors, your information may be shared with such sponsors. We do not control other sponsors' use of your personal information, and their use of your information will be in accordance with their own privacy policies. If you do not wish for your information to be shared in this manner, you may choose not to participate in such jointly sponsored contests, sweepstakes or promotions. Such offerings may also be subject to additional rules and regulations governing your participation.

Third-Party Service Providers

We also may share certain personal information we collect about you with partners or third parties who perform services for us or with whom we contract for the purposes described in this Privacy Statement. For example, we may use third parties to host our websites or mobile apps, operate certain of its features, send emails, print or send mailings, run our sweepstakes, contests or other promotions, conduct customer research, authorize and process your payments, manage and analyze data and our advertising effectiveness, and fulfill orders. Such third-party service providers enter into written agreements with us and are given the information that they need to perform their designated functions. We do not authorize them to use or disclose your personal information for their own or any others' marketing purposes.

Card Issuers and Other Business Partners

When you apply for the TJX RewardsTM Card we share the information you provide with the financial institution that issues the card, and it is that institution’s privacy policy that applies to the information you provide on the TJX RewardsTM Card application.

Legal Requirements and to Prevent Harm

We also may disclose information about you as is required by law or legal process such as subpoenas or court or agency orders, or as we may reasonably determine to be necessary or appropriate to protect our rights or the rights of others, to avert loss or harm to persons or property, to enforce our Terms of Use or this Privacy Statement, or in connection with an investigation of suspected or actual fraudulent or illegal activity.

Children's Privacy

Our websites and mobile apps are intended for a general audience and are not directed to children. We do not knowingly collect personal information online from children under the age of 13.

External Online Services and Features

For your convenience and information, our websites and mobile apps may provide links to other online services, and may include third-party features such as apps, tools, widgets and plug-ins (“Third-Party Online Services ”). These Third-Party Online Services may operate independently from us. The privacy practices of the relevant third parties, including details on the information they may collect about you, is subject to the privacy policies of these parties, which we strongly suggest you review. To the extent any linked Third-Party Online Services are not owned or controlled by TJX, we are not responsible for these third parties’ information practices.

How We Protect Your Information

We maintain administrative, technical and physical safeguards designed to protect against loss, misuse or unauthorized access, disclosure, alteration or destruction of your personal information. However, we cannot guarantee the effectiveness of these safeguards, and nothing in this statement shall be construed as an express or implied warranty against loss, misuse or unauthorized access, disclosure, alteration or destruction.

Your Options

Do Not Track

Some browsers have a “do not track” feature that lets you tell websites that you do not want to have your online activities tracked. At this time, we do not specifically respond to browser “do not track” signals, however we do process Global Privacy Control (“GPC”) signals as a valid opt-out request under the California Consumer Privacy Act as further described below.

Opt-Out From/Restrict Cookies and Online Behavioral Advertising

Your web browser may tell you how to be notified when you receive certain types of cookies and how to restrict, reject, or disable certain cookies. If you would like to opt-out of the sale or sharing of your personal information/targeted advertising, please view our Notice of Opt-Out of the Sale or Sharing of Personal Information/Targeted Advertising.

Additionally, you may directly opt-out of data collection from the particular companies that we use to collect information from users of our websites as specified below:

To update your preferences, ask us to remove your information from our mailing lists, or submit a request, you may contact us at dataprivacy@tjx.com or by submitting an online request. You also may use the following options:

Opt-Out From E-mail and/or Postal Mail

You can opt-out of receiving promotional email and/or postal mail from us by doing the following:

Please note that any opt-out for postal mail may take at least 60 days to become effective. Also, you may still receive email or postal mail from other members of the TJX Businesses if they received your email or postal address from other sources or as a result of their own transactions or experiences with you, or if you request to hear from us again.


Contact Information

If you have questions regarding this Privacy Statement or our privacy practices, or if you wish to update the personal information you have provided to us, you may do so by contacting us at dataprivacy@tjx.com or by submitting an online request.

Changes To Our Statement

This Privacy Statement may be updated periodically and without prior notice to you to reflect changes in our information practices. We will post a prominent notice on the website to notify you of any significant changes to our Privacy Statement and indicate when it was most recently updated.

U.S. State Privacy

Notice to Residents of California

When we collect personal information from residents of California, we become subject to, and those residents have certain rights under, California’s privacy laws including the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”). This section of our statement supplements the HomeGoods Privacy Statement and applies solely to California residents.

Collection and Disclosure

During the prior 12-month period we have:

  1. Collected the following categories of personal information and sensitive personal information about you:
    • Identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number, unique pseudonym, or user alias; telephone number and other forms of persistent or probabilistic identifiers), online identifier, Internet Protocol address, email address, account name, and other similar identifiers
    • Signature, state identification card number, education, credit card number, debit card number, bank account number and other financial information;
    • Characteristics of protected classifications under California or federal law, such as age, sex, gender, gender identity, and military and veteran status;
    • Commercial information, including records of personal property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies;
    • Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements;
    • Geolocation data;
    • Electronic, visual, and similar information;
    • Inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes;
    • Social security, driver’s license, state identification card, or passport number;
    • Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; and
    • Precise geolocation data.
  2. Collected personal information about you from the following categories of sources:
    • From you or your devices, for example, through your interactions with us in our stores or on our website or mobile apps;
    • Our affiliates and other TJX Businesses;
    • Our vendors and consultants;
    • Our business partners;
    • Publicly available sources;
    • Social media networks; and
    • Online advertising companies.
  3. Collected personal information about you for the following business or commercial purposes (in addition to the purposes listed above in the How We May Use Your Personal Information Section):
    • Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, providing analytics services, or providing similar services;
    • Auditing related to a current interaction with you and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance;
    • Short-term, transient use, including, but not limited to, the contextual customization of ads shown as part of the same interaction;
    • Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;
    • Debugging to identify and repair errors that impair existing intended functionality;
    • Undertaking internal research for technological development and demonstration; and
    • Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us.
  4. Sold or shared (as both are defined under the CCPA and other state privacy laws) the following categories of personal information about you:
    • Identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number, unique pseudonym, or user alias; telephone number and other forms of persistent or probabilistic identifiers), online identifier, Internet Protocol address, email address, account name, and other similar identifiers;
    • Commercial information, including records of personal property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies;
    • Characteristics of protected classifications under California or federal law, such as age, sex, gender, gender identity, and military and veteran status;
    • Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements; and
    • Inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
  5. Business or commercial purposes for selling or sharing your personal information:
    • Performing services, such as providing advertising, marketing services or analytics services; and
    • Marketing by our affiliates and other TJX Businesses.
  6. Disclosed for a business purpose the following categories of personal information about you:
    • Identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number, unique pseudonym, or user alias; telephone number and other forms of persistent or probabilistic identifiers), online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, and other similar identifiers
    • Signature, state identification card number, education, bank account number, credit card number, debit card number, and other financial information, medical information;
    • Characteristics of protected classifications under California or federal law, such as age, sex, gender, gender identity, medical condition, disability, citizenship status, and military and veteran status;
    • Commercial information, including records of personal property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies;
    • Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements;
    • Geolocation data;
    • Electronic, visual, and similar information;
    • Professional or employment-related information; and
    • Inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
  7. Disclosed your personal information for a business purpose to the following categories of third parties:
    • Our affiliates and other TJX Businesses;
    • Vendors who provide services on our behalf;
    • Professional services organizations, such as auditors and law firms;
    • Financial institutions;
    • Our business partners such as joint marketing partners;
    • Third-party marketers (who may combine your personal information with their own records, and records available from other sources), for their own direct marketing purposes, and the direct marketing purposes of other third-party marketers; and
    • Government entities, including law enforcement.
  8. Business or commercial purposes for disclosing your personal information:
    • Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, providing analytics services, or providing similar services;
    • Auditing related to a current interaction with you and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance;
    • Short-term, transient use, including, but not limited to, the contextual customization of ads shown as part of the same interaction;
    • Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;
    • Debugging to identify and repair errors that impair existing intended functionality;
    • Undertaking internal research for technological development and demonstration; and
    • Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us.

We do not sell the personal information of consumers under the age of 16 if we have actual knowledge of the individual’s age.

We do not use or disclose sensitive personal information for purposes other than those specified in the California Consumer Privacy Act Regulations § 7027(m).

We will store and retain your personal information in accordance with applicable law and as long as necessary to carry out the purposes described in this statement in accordance with our internal data retention procedures. The criteria used to determine the retention periods include:

Privacy Rights of California Residents

California residents have the below-listed rights with respect to their personal information

These rights, and how you can exercise them, are described in greater detail below.

You have the right to request the following information about the personal information we have collected about you:

Additionally, you have the right to request that we delete the personal information we have collected from you, subject to certain exceptions or correct inaccurate personal information that we maintain about you.

We will not deny, charge different prices for, or provide a different level or quality of goods or services if you choose to exercise these rights.

As stated above, we do not use or disclose sensitive personal information for purposes other than those specified in the California Consumer Privacy Act Regulations § 7027(l)(1).

You can exercise most of these rights by submitting a verifiable request to dataprivacy@tjx.com, contacting us Monday - Friday 9:00 AM - 6:00 PM (Eastern Time) at the Toll-Free Number 1-800-888-0776, or via our online request form. As stated above in the Your Options section of this statement, we process GPC signals as a valid opt-out request under the CCPA. Please note that GPC signals are browser and device specific. To opt-out of the sale or sharing of your personal information/targeted advertising, please view our Notice of Opt-Out of the Sale or Sharing of Personal Information/Targeted Advertising.

To help protect your privacy and maintain security, we take steps to verify your identity before granting you, or a third party acting on your behalf, access to your personal information or complying with your request. If someone is making a request on your behalf, we require proof of authorization as part of our identity verification process.

Metrics

Below are metrics regarding Requests to Know, Requests to Delete and Requests to Opt-Out submitted pursuant to the CCPA that the TJX Businesses received, complied with (in whole or in part), and denied between January 1, 2022 and December 31, 2022. These requests as compiled and disclosed are for all individuals, not just California consumers.

Request to Know

Request to Delete

Request to Opt-Out

Notice to Residents of Colorado

When we collect personal information from residents of Colorado we become subject to, and those residents have certain rights under, the state’s privacy law. This section of our statement supplements the HomeGoods Privacy Statement and applies solely to Colorado residents. Please note that we sell or share all of the categories of personal information identified in the What Information We Collect section to or with the categories of third parties identified in the How We Share Your Information section.

Privacy Rights of Colorado Residents

Colorado residents have the below-listed rights with respect to their personal information:

You can exercise most of these rights by submitting a verifiable request to dataprivacy@tjx.com or via our online request form.

We sell certain personal information to third parties and use it for targeted advertising. To opt-out of the sale of your personal information or targeted advertising, please view our Notice of Opt-Out of the Sale or Sharing of Personal Information/Targeted Advertising. As stated above in the Your Options section of this statement, we process GPC signals as a valid opt-out request. Please note that GPC signals are browser and device specific.

To help protect your privacy and maintain security, we take steps to verify your identity before granting you, or a third party acting on your behalf, access to your personal information or complying with your request. If someone is making a request on your behalf, we require proof of authorization as part of our identity verification process.

Appeals Process

If we were unable to fulfill your request, you may appeal our decision by emailing us at dataprivacy@tjx.com. Please include “Appeal Request” in the subject line and a detailed reason for your appeal, as well as your state of residence. We will review the circumstances of your appeal and inform you of any actions taken or not taken in response to your appeal. We will also provide you an explanation of the reasons for the decisions.

Notice to Residents of Connecticut and Virginia

When we collect personal information from residents of Connecticut and Virginia, we become subject to, and those residents have certain rights under, the privacy law of their particular state. This section of our statement supplements the HomeGoods Privacy Statement and applies solely to Connecticut and Virginia residents. Please note that we share all of the categories of personal information identified in the What Information We Collect section to or with the categories of third parties identified in the How We Share Your Information section.

Privacy Rights of Residents of Connecticut and Virginia

Connecticut and Virginia residents have the below-listed rights with respect to their personal information:

You can exercise most of these rights by submitting a verifiable request to dataprivacy@tjx.com or via our online request form.

We sell certain personal information to third parties and use it for targeted advertising. To opt-out of the sale of your personal information or targeted advertising, please view our Notice of Opt-Out of the Sale or Sharing of Personal Information/Targeted Advertising. As stated above in the Your Options section of this statement, we process GPC signals as a valid opt-out request. Please note that GPC signals are browser and device specific.

To help protect your privacy and maintain security, we take steps to verify your identity before granting you, or a third party acting on your behalf, access to your personal information or complying with your request. If someone is making a request on your behalf, we require proof of authorization as part of our identity verification process.

Appeals Process

If we were unable to fulfill your request, you may appeal our decision by emailing us at dataprivacy@tjx.com. Please include “Appeal Request” in the subject line and a detailed reason for your appeal, as well as your state of residence. We will review the circumstances of your appeal and inform you of any actions taken or not taken in response to your appeal. We will also provide you an explanation of the reasons for the decisions.

Notice to Residents of Utah

When we collect personal information from residents of Utah, we become subject to, and those residents have certain rights under, the state’s privacy law. This section of our statement supplements the HomeGoods Privacy Statement and applies solely to Utah residents. Please note that we share all of the categories of personal information identified in the What Information We Collect section to or with the categories of third parties identified in the How We Share Your Information section.

Privacy Rights of Utah Residents

Utah residents have the below-listed rights with respect to their personal information:

You can exercise most of these rights by submitting a verifiable request to dataprivacy@tjx.com or via our online request form.

We sell certain personal information to third parties and use it for targeted advertising. To opt-out of the sale of your personal information or targeted advertising, please view our Notice of Opt-Out of the Sale or Sharing of Personal Information/Targeted Advertising. As stated above in the Your Options section of this statement, we process GPC signals as a valid opt-out request. Please note that GPC signals are browser and device specific.

To help protect your privacy and maintain security, we take steps to verify your identity before granting you, or a third party acting on your behalf, access to your personal information or complying with your request. If someone is making a request on your behalf, we require proof of authorization as part of our identity verification process.

Nevada Privacy

We do not sell your personal information in exchange for monetary compensation.

Contact Information

If you have questions regarding this Privacy Statement or our privacy practices, or if you wish to update the personal information you have provided to us, you may do so by contacting us at dataprivacy@tjx.com or by submitting an online request.

Get on the list

Sign up for fresh inspo &
the latest store news.†