Privacy Policy


This Privacy Policy is effective and was last updated on December 27, 2019.

Click to print this Privacy Policy.  Click to print our Terms of Use


South Coast Plaza, the property manager of Plaza Tower, Park Tower and Center Tower (each a “Building”), and the owners of each Building (“Owners”) (South Coast Plaza, the Owners, and their respective affiliates, collectively,  “SCP”), welcomes you to the websites for the Buildings,,, and (the “Sites”). This Privacy Policy describes how SCP treats information about you that it collects and receives about you (“Personal Information”), (1) through the Sites and (2) through third parties or SCP’s other businesses, including, without limitation, offline. The Privacy Policy together with the Terms of Use govern your use of the Sites and SCP’s collection and use of your information.

Table of Contents

  1. Acceptance of privacy policy

Each time you access, use, or browse a Site, or provide information to SCP online or offline, you signify your acceptance of the then-current Privacy Policy. If you do not accept this Privacy Policy, you are not authorized to access, use or browse the Sites, or to provide information to SCP online or offline, and must discontinue use of the Sites immediately.

Should the Privacy Policy be revised, SCP will post the changes on the Sites which will be effective immediately upon posting. Any material changes in the manner that we use Personal Information will apply only to information collected thereafter, unless we provide notice or have other communications with you.  You can determine when the Privacy Policy was last revised by referring to the “Last Revised” legend at the top of this page.

If you provide your information to SCP offline, the Privacy Policy applies to SCP’s collection and use of your information. SCP also may provide paper copies of the then-current Privacy Policy when it collects information from you offline or when a tenant signs a lease. In addition to this Privacy Policy, you agree that the following provisions in the Terms of Use also govern SCP’s collection and use of your information collected offline: Sections 1 (Acceptance of the Terms of Use); 7 (Your Indemnity of SCP); 10 (Disclaimers and Limitation of Liability); 12 (Governing Law and Disputes); and 13 (Miscellaneous).

  1. Types of information we collect

We may collect Personal Information from you, such as non-public information about you that helps SCP identify you, including, without limitation, first and last name, business title, signature, email address, employer address, office and home telephone number, mobile telephone number, vehicle information, license plate number and parking information, and other information that is not otherwise publicly available. We also may collect non-personally identifying information about you, such as information regarding your use of the Sites, your IP address, Site usage statistics, time stamps, browsing history, general geographic location, type of device you use to connect to a Site, type of computer operating system you use (e.g., Microsoft Windows, Google Chrome OS or Mac OS), type of browser you use (e.g., Firefox, Chrome, Internet Explorer, Safari) and the domain name of your internet service provider. “Non-Personally Identifying Information” refers to information that does not personally identify the individual to whom the information relates, such as information that is aggregated by SCP or a third party, or information that is not linked to contact information or other Personal Information of an individual. In addition, we may collect information from you, such as your password to access certain Building features, information collected through Building security systems, key cards and security cameras, information collected through questionnaires and surveys, preferences and interests, income, education level, ethnicity, marital status, homeowner status, shopping habits, Site usage, age and gender.

Depending on how you have interacted with us and our Buildings, we may have collected certain information within the following categories of Personal Information from you in the last (12) months. Please note that we have not collected every type of Personal Information identified in the examples below, and the types of Personal Information we have collected on any consumer depends on the consumer’s interaction with SCP and our Buildings.

Category Examples Collected?
Identifiers. This category may include: name, postal address, unique personal identifiers, online identifiers, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers. Under the CCPA, “unique identifiers” or “unique personal identifier” means a persistent identifier that can be used to recognize a consumer, a family, or a device that is linked to a consumer or family, over time and across different services. YES
Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). This category may include: name, signature, Social Security number, physical characteristics, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education or employment information, financial account numbers, medical information, or health insurance information. YES
Protected classification characteristics under California or federal law. This category may include: age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex and gender information, veteran or military status, or genetic information. YES
Commercial information. This category may include: records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. YES
Biometric information. This category may include: imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a face print, a minutiae template, or a voiceprint, can be extracted. NO
Internet or other electronic network activity information. This category may include: browsing history, search history, and information regarding interactions with an Internet Web site, application, or advertisement. YES
Geolocation data. This category may include: physical location or movements. NO
Sensory data. This category may include: audio, electronic, visual, thermal, olfactory, or similar information. YES
Professional or employment-related information. This category may include: current or past job history or performance evaluations. YES
Non-public education information This category may include: education records directly related to a student maintained by an educational institution or party acting on its behalf (e.g., grades, schedules, student ID numbers). NO
Inferences drawn from other Personal Information. This category may include: inferences drawn from the above information that may reflect your preferences, characteristics, predispositions, behavior, or attitudes.  YES

  1. How we collect information

We may collect Personal Information and/or Non-Personally Identifying Information from you when you use a Site, communicate with SCP or the Building via a Site or offline, visit a Building, participate in questionnaires or surveys that may be offered on a Site or offline, use Building key cards or interact with Building security systems and cameras. Information collected by SCP may be stored and processed in the United States in accordance with the laws of the United States, or in other jurisdictions. By using a Site or by submitting your Personal Information to SCP online or offline, you expressly consent to the storage and processing of your Personal Information in the United States in accordance with the laws of the United States, or in other jurisdictions.

We may obtain Personal Information and/or Non-Personally Identifying Information from third parties such as our affiliates, service providers, brokers, tenants, suppliers, vendors, merchants, licensors, or other sources (e.g., offline records or publicly available information). We may combine Personal Information we collect with information that we obtain from our affiliates, brokers, tenants, suppliers, vendors, merchants, licensors, or other sources (e.g., offline records or publicly available information). We will treat any such combined information as Personal Information.

SCP automatically receives and records Non-Personally Identifying Information on our server logs from your browser as well as through other analysis of the Sites. We also may collect information using cookies, web beacons, pixels, gifs, tags or other technologies (“Collection Technology”), or through third parties using similar technologies. Collection Technology may operate as  a piece of data stored on your browser or device, or may identify, compile, aggregate and/or collect information through other means. When you visit a Site, your web browser may use Collection Technology to better enable you to navigate the Sites during your visit and upon your return. You may use the Sites even if you choose to reject or delete certain Collection Technology. Collection Technology also may be used by some of the other websites for which a link is placed on a Site. We may combine this Non-Personally Identifying Information with Personal Information, and, if so, will treat the combined information as Personal Information.

The Sites may use Google Analytics. Google Analytics uses Collection Technology to collect and store anonymous information about you, which may include the Non-Personally Identifying Information described above. For more information about Google Analytics follow this link. You can opt-out from being tracked by Google Analytics in the future by downloading and installing Google Analytics’ Opt-out Browser Add-on for your current web browser at this link.

Except as otherwise specified in this Privacy Policy, SCP does not alter the practices detailed herein based upon your selection of the “Do Not Track” setting or other “opt out” setting or feature that may be offered by your browser; however, SCP reserves the right to do so in the future.

  1. How we use your information

We may use the information we collect:

  • To monitor and analyze information regarding your browsing and viewing preferences;
  • To analyze our users’ demographics and interests;
  • To plan, improve and administer promotional events sponsored by SCP or third parties (“Events”);
  • To process and respond to your inquiries;
  • To monitor activity in the Buildings;
  • To improve the Sites;
  • To promote our services;
  • For the purposes for which you provided the information;
  • To enforce the Terms of Use of the Sites.

In addition to the uses discussed above, SCP may use Non-Personally Identifying Information in any manner so long as SCP uses such information in its de-identified form. These uses may include, without limitation, uses for administration of the Sites; analysis of website trends and how the Sites are used; improving navigation of the Sites; analysis of the performance of the Sites and diagnosis of problems; improving the services we offer; analysis and developing advertisements and advertising campaigns; and providing you with special offers and promotions and determine the effectiveness of same.

  1. How we respond to “Do Not Track” signals

SCP does not respond to or alter its practices detailed herein based upon your selection of the “Do Not Track” setting or other “opt out” setting or feature that may be offered by your browser; however, SCP reserves the right to do so in the future.

  1. Communications with you

You authorize SCP to transmit email to you to respond to your communications, promote our services and administer Events. If we send any emails to promote our services, instructions to unsubscribe will be included in each such promotional email from SCP. Please note that such requests may take up to ten (10) days to become effective. You may not opt out of receiving communications regarding your dealings with SCP, or the Sites or technical information about the same.

  1. Information sharing with third parties

SCP may disclose the information it collects about you to: (i) affiliates, brokers, licensors, Event partners or sponsors,  for their own direct marketing purposes, such as to provide information to you about their stores, restaurants, Events, products, services and other important information; (ii) to third parties to provide analytics for advertising purposes or to confirm or update information provided by you; (iii) to our service providers, suppliers, vendors and others who help SCP provide services to you, such as outsourcing one or more of the functions described in this Privacy Policy; (iv) to third parties in the event of any reorganization, merger, sale, joint venture, assignment, transfer or disposition of all or any portion of SCP’s business or operations (including without limitation in connection with bankruptcy or any similar proceedings); or (v) as otherwise authorized by you.

We also may share your information in response to a subpoena, legal order or official request, when we believe you have acted in violation of the Terms of Use, to investigate, prevent or take action regarding suspected illegal activities, fraud or potential threats, or exercise legal rights or defend against claims, when we believe that doing so may protect your safety or the safety of SCP or others, or as otherwise permitted or required by law.

We also may use and share Non-Personally Identifying Information with third parties. Additionally, we may take Personal Information and de-identify it and share it in a de-identified or aggregated form with advertisers, business partners, and/or third parties in order to analyze usage of the Sites; perform services on our Sites or others’ sites; improve our services; improve our user experience; or for similar purposes. If we do so, we will not re-identify such data and ensure that our contracting parties agree to keep the data in its de-identified form.

  1. Children

The Sites are not directed toward children under 13 years of age nor does SCP knowingly collect information from children under age 13 on the Sites or offline. If you are under 13, you are not permitted to register for emails or newsletters or to otherwise submit any Personal Information to SCP. If you provide information to SCP through the Sites, you represent that you are 13 years of age or older. If you are between 13 and 17 years of age, when you visit, browse, use, or submit Personal Information to the Sites, you represent that you have the permission of a parent or guardian to do so and who agrees to this Privacy Policy on your behalf. If you are a parent or guardian and believe SCP may have inadvertently collected Personal Information from your child, please notify SCP immediately by sending an email to detailing the basis of your belief and your request.

  1. Protection of Personal Information

SCP uses reasonable administrative, physical and electronic security measures to protect against the loss, misuse and alteration of Personal Information. No transmission of data over the internet is guaranteed to be completely secure. It may be possible for third parties not under the control of SCP to intercept or access transmissions or private communications unlawfully. While we strive to protect Personal Information, neither SCP nor our service providers can ensure or warrant the security of any information you transmit to us over the internet. Any such transmission is at your own risk.

  1. Updating your information

You are responsible for keeping your information current. You may update your information by contacting us at We will use reasonable efforts to process any change you make; provided, however, that requests to delete information are subject to SCP’s internal reporting, processing and retention policies and all applicable legal obligations.

  1. Notice of privacy rights of California residents

If you are an eligible California resident, the Consumer Privacy Act (“CCPA”) provides you with specific rights with respect to our collection and use of your Personal Information over the past twelve months. This California Privacy Rights Section supplements this Privacy Policy and applies solely to eligible residents of California as of January 1, 2020. Any terms not defined in this section have the same meaning as defined in the CCPA.

  • Right to know about Personal Information collected, disclosed, or sold

You have the right to request that we provide certain information to you about our collection and use of your Personal Information over the past twelve (12) months.  Specifically, you have the right to request disclosure of the categories of Personal Information and specific pieces of Personal Information we have collected about you over the last 12 months. Upon the submission of a verifiable consumer request we will disclose to you:

  • the categories of Personal Information we collected about you;
  • the categories of sources from which Personal Information was collected;
  • the business or commercial purpose for collecting Personal Information;
  • the business or commercial purpose for disclosing or selling Personal Information; and
  • the categories of third parties with whom we sold or disclosed the category of Personal Information for a business purpose.

We will also provide the specific pieces of Personal Information we collected about you, subject to certain exceptions under applicable law, if you also request access to such information.

  • Right to request deletion of Personal Information

If you are a California resident, you also have the right to request that we delete any of your Personal Information that we collect or maintain about you, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will conduct a reasonable search of our records in order to locate any Personal Information we have collected about you that is eligible for deletion, and delete such Personal Information. To the extent we have shared any Personal Information collected about you with service providers that is eligible for deletion, we will direct those service providers to delete that Personal Information as well. SCP may not be able to comply entirely with your request to delete all of your Personal Information as set forth under the CCPA. Specifically, we are not required to delete any Personal Information we have collected about you that is necessary for us and our service provider(s) to:

  • Complete the transaction for which the Personal Information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between SCP and you.
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.
  • Debug to identify and repair errors that impair existing intended functionality.
  • Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
  • Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
  • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, if you have provided informed consent.
  • Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us.
  • Comply with a legal obligation, such as retaining records for a period of time as set out in local, state, or federal laws.
  • Otherwise use your Personal Information, internally, in a lawful manner that is compatible with the context in which you provided your information.

Following a deletion request, any Personal Information about you that was not deleted from our systems due to the above exceptions will only be used for the purposes provided for by the applicable exceptions.

  • Right to opt-out of the sale of Personal Information

If you are a California resident and SCP sells or discloses Personal Information about you to third parties, you may have the right to request that SCP not sell your Personal Information.

To exercise the right to opt-out, you (or your authorized representative) may submit a request to us by visiting the following Internet Web page link:

Do Not Sell My Personal Information

Once you make a verified opt-out request, we will wait at least twelve (12) months before asking you to reauthorize Personal Information sales. However, if at a later time, you wish to allow us to sell your Personal Information to third parties, you must opt-in to such sharing, and may be do so by contacting us at If a transaction requires the sale or transmission of your Personal Information in order to complete the transaction, we will notify you and provide instructions on how you can opt-in.

  • Right to non-discrimination for the exercise of a consumer’s privacy rights

We will not discriminate against you for exercising any of your privacy rights.  Unless permitted by applicable law, we will not: (i) deny you goods or services; (ii) charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; (iii) provide you a different level or quality of goods or services; or (iv) suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

  • Exercising your California privacy rights

You do not need to create an account with us to exercise your CCPA rights. To exercise the CCPA rights described above, please submit a verifiable consumer request to us by either:

Only you, the person to whom you have given power of attorney, or an otherwise authorized agent registered with the California Secretary of State, may make a verifiable consumer request related to your Personal Information. However, you may make a verifiable consumer request on behalf of your minor child. Additionally, you may only make a verifiable consumer request for access twice within a 12-month period. 

Your verifiable consumer request must provide sufficient information that allows us to reasonably verify that you are the person about whom we collected Personal Information or an authorized representative. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. While we may ask for Personal Information to verify the requestor or consumer’s identity when making a request, we will only use that Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

  • Response timing and format

We will make our best effort to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. Within ten (10) days of receiving the request, we will confirm receipt and provide information about our verification and processing of the request. SCP will maintain records of consumer requests made pursuant to CCPA as well as our response to said requests for a period of at least twenty-four (24) months.

If you have an account with us, we may require you to take delivery of our written response through that account. If you do not have an account with us, we will deliver our written response electronically, though you may alternatively choose to receive delivery by mail.  The response will also explain the reasons we cannot comply with a request, if applicable.  Requests for the specific pieces of information that we have collected about you will be sent in a portable, readily useable format that you may transmit to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.  If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

  • Your rights under “Shine the Light”

In addition to your rights under the CCPA, California Civil Code Section 1798.83 permits California residents to request information regarding our disclosure, if any, of their Personal Information to third parties for their direct marketing purposes. If this applies, you may obtain the categories of Personal Information shared and the names and addresses of all third parties that received Personal Information for their direct marketing purposes during the immediately prior calendar year (e.g., requests made in 2020 will receive information about 2019 sharing activities). You may also request that we do not share your Personal Information with third parties for their direct marketing purposes. To make such requests, send an email to, specifying that you seek your “California Customer Choice Privacy Notice.” Please allow thirty (30) days for a response. Please note that not all information sharing is covered by the “Shine the Light” law requirements and only information on covered sharing will be included in our response.

When contacting us, please indicate your name, address, email address, and what Personal Information you do not want us to share with third parties for their direct marketing purposes. Please note that there is no charge for controlling the sharing of your Personal Information or for processing this request.

  1. Links

You may have the opportunity to follow links on the Site to other sites that may be of interest to you. You may have the opportunity to follow links on the Sites to other sites that may be of interest to you. SCP endeavors to only link to reputable organizations. Because other sites may not be hosted or controlled by SCP, we are not responsible for the privacy practices of those sites or the content provided thereon. Therefore, the privacy policies with respect to other sites may differ from those applicable to the Sites. We encourage you to review the privacy policies of each other site. This Privacy Policy only applies to information collected and maintained by SCP.

  1. Questions?

If you have any questions or concerns regarding this Privacy Policy, please contact us at