Last Updated: July 19, 2021

The Madewell Forever website located at madewellforever.thredup.com (the “Site”) is a joint project between Madewell and thredUP. This Privacy Policy describes how thredUP (“we,” “us,” or “our”) handles personal information that we collect through the Site. By engaging with the Site, you direct thredUP to share your information with Madewell. Madewell’s processing of your information is subject to Madewell’s privacy policy.

Personal Information We Collect

Information you provide to us. Personal information you may provide through the Site includes:

• Identification information, including your name, email address, phone number, and shipping and billing addresses.
• Communications that we exchange with you, including when you contact us with questions, feedback, or otherwise.
• Payment information needed to complete your orders on or through the Site (including payment card information, bank account number, billing information). This information is collected by our payment processors and we do not have access to payment card or bank account data. 
• Shopping history, such as the items you order.
• Marketing information, such as your preferences for receiving marketing communications from thredUP and/or Madewell, and details about your engagement with thredUP communications.
• Derived information based on the other personal information we collect about you, such as your inferred preferences for certain products.

Third party sources. We may combine personal information we receive from you with personal information we obtain from other sources, such as:

• Data providers, such as information services and data licensors.
• Public sources, such as social media platforms.

Automatic data collection. We, our service providers, and our advertising partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Site, our communications and other online services, such as:

• Device information, such as your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 3G).
• Online activity information, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing the Site, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access, and whether you have opened our marketing emails or clicked links within them. We also use Google Analytics to monitor activity on the Site and to assist with advertising. Click here to learn how Google Analytics collects and processes data.

Technologies we use for automated data collection include:

• Cookies, which are text files that websites store on a visitor‘s device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, helping us understand user activity and patterns, and facilitating online advertising. For example, we use cookies to keep track of your shopping cart and to provide other personalized experiences.

• Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.
• Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.

How We Use Your Personal Information

We use your personal information for:

Service delivery, including to:

• Provide, operate and improve the Site and our business;
• To create, maintain, and authenticate your account;
• Process your payments (through third party vendors) and complete transactions with you;
• Communicate with you about the Site, including by sending announcements, updates, security alerts, and support and administrative messages;
• Understand your needs and interests, and personalize your experience with the Site and our communications; and
• Provide support for the Site, and respond to your requests, questions and feedback.

Research and development. We may de-identify personal information and use the de-identified information for research and development, including to analyze and improve the Site and promote our business.

Marketing and advertising. We and our advertising partners may use your personal information for marketing and advertising purposes, including:

• Direct marketing. We or our advertising partners may send you direct marketing communications as permitted by law, including, but not limited to, notifying you of special promotions, offers and events via postal mail, email, telephone, text message, and other means.
• Interest-based advertising. We engage advertising partners, including third party advertising companies and social media companies, to display ads on the Site and other online services. These companies may use cookies and similar technologies to collect information about your interaction (including the data described in the “Automatic data collection” section above) over time across the Site, our communications, and other online services, and use that information to serve online ads that they think will interest you. This is called interest-based advertising. We may also share information about our users with these companies to facilitate interest-based advertising to those or similar users on other online platforms. You can learn more about your choices for limiting interest-based advertising in the “Online tracking opt out” section below. 

Compliance and protection. We may use your personal information to:

• Comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities;
• Protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);
• Audit our internal processes for compliance with legal and contractual requirements and internal policies;
• Enforce the terms and conditions that govern the Site; and
• Prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

How We Share Your Personal Information

We may share your personal information with the following parties and as otherwise described in this Privacy Policy or at the time of collection:

Madewell. By engaging with the Site, you direct thredUP to share your information with Madewell.

Service providers. Companies and individuals that provide services on our behalf or help us operate the Site or our business (such as hosting, information technology, customer support, email delivery, and website analytics services).

Advertising partners. Third party advertising companies may use automated technologies to collect information for interest-based advertising purposes described above.

Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.

Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.

Business transferees. Acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate financing, divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, thredUP (including, in connection with a bankruptcy or similar proceedings).

Your Choices

Update or correct your information. To keep your information accurate, current, and complete, please contact thredUP as specified below. We will take reasonable steps to update or correct information in our possession that you have previously submitted via the Site. Please also feel free to contact us if you have any questions. Please contact Madewell directly to update or correct information in Madewell’s possession.

Opt out of marketing communications. You may opt out of thredUP’s marketing-related communications by following the opt out or unsubscribe instructions contained in the marketing communication we send you.

Online tracking opt out. There are a number of ways to opt out of having your online activity and device information collected through the Site, which we have summarized below:

• Blocking cookies in your browser. Most browsers let you remove or reject cookies, including cookies used for interest-based advertising. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. Click here for more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them. 
• Blocking advertising ID use in your mobile settings. Your mobile device settings may provide functionality to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes.
• Using privacy plug-ins or browsers. You can block our websites from setting cookies used for interest-based ads by using a browser with privacy features, like Brave, or installing browser plugins like Privacy Badger, Ghostery, or uBlock Origin, and configuring them to block third party cookies/trackers. You can also opt out of Google Analytics by downloading and installing the browser plug-in.  
• Platform opt outs. The following advertising partners offer opt out features that let you opt out of use of your information for interest-based advertising:
• Google
• Facebook
• Twitter
• Advertising industry opt out tools. You can also use these opt out options to limit use of your information for interest-based advertising by participating companies:
• Digital Advertising Alliance for Websites
• Digital Advertising Alliance for Mobile Apps
• Network Advertising Initiative

Note that you will need to opt out on every browser and device that you use because these opt out mechanisms are specific to the device or browser on which they are exercised.

Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to "Do Not Track" or similar signals. Learn more about "Do Not Track" here. 

Other Sites and Services

The Site may contain links to websites and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites or online services operated by third parties, and we are not responsible for their actions.

Security

We employ a number of technical, organizational and physical safeguards designed to protect the personal information we collect. However, no security measures are failsafe and we cannot guarantee the security of your personal information. You use the Site at your own risk.

Processing of Data in the U.S.

thredUP is headquartered in the United States and may use services providers that operate in other countries. Your personal information may therefore be processed in the United States or transferred to other locations where privacy laws may not be as protective as those in your state, province, or country.

Children

The Site does not sell products for purchase by children under 16 years of age and should not be used by such children. If we learn that we have collected personal information through the Site from a child under 16 without the consent of the child’s parent or guardian, we will delete it.

Notice to California Users

thredUP is providing this supplemental privacy notice to consumers in California, pursuant to the California Consumer Privacy Act of 2018 (“CCPA”).

Subject to applicable exceptions, the CCPA grants California residents the following rights.

• Information. You can request information about how we used and shared your personal information through the Site during the past 12 months. Our Privacy Policy provides this information.  We describe the sources through which we collect personal information and the types of personal information collected in the “Personal Information We Collect” section. We describe the purposes for which we use and share this information in the “How We Use Your Personal Information” section and the “How We Share Your Personal Information” section.

• Access. You can request a copy of the personal information that we maintain about you.
• Deletion. You can ask to delete the personal information that we maintain about you.
• Opt-out of sale of your personal information.  We do not monetize your personal information or sell it in the traditional sense. You can limit the use of tracking technologies, such as cookies, on our website by following instructions in the “Online tracking opt-out” section above. 

You are entitled to exercise the rights described above free from discrimination and you can contact us if you need an alternative form of this Privacy Policy.

To request access to or deletion of your personal information, please email privacy@thredup.com.

To verify your identity prior to responding to your requests, we may ask you to confirm information that we have on file about you or your interactions with us. Where we ask for additional personal information to verify your identity, we will only use it to verify your identity or your authority to make the request on behalf of another consumer.

Authorized agents. California residents can empower an “authorized agent” to submit requests on their behalf.

Changes to This Privacy Policy

thredUP reserves the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Site. 

How to Contact Us

You can reach thredUP by email at privacy@thredup.com or by writing to:

thredUP, Inc.
Attention: Privacy
969 Broadway, Suite 200
Oakland, CA 94607