Privacy Policy

Your Data Stays Secure with Us

At Kohl’s, we take privacy seriously and want you to feel comfortable engaging with our platforms. This policy outlines how we collect, use, and protect information to preserve your trust.

We keep data collection minimal and never sell personal details. Our goal is to be fully transparent so you feel empowered to use our offerings. Please reach out with any questions!

1. Scope of Policy

This policy covers all Kohl’s websites, apps, events, products, and services. It applies to Kohl’s Inc. and our subsidiaries worldwide.

2. Information We Collect

We aim to only collect the minimum user data needed to deliver experiences you value. The types fall into two main categories:

A. Data You Provide to Us

When interacting with our platforms, you may choose to share:

Contact info like name, email, company for creating accounts
Billing details like payment method to make purchases
Feedback, suggestions and ideas for improving Kohl’s
Your content like writing, designs, or programming contributions
Demographic data like age, industry or interests for surveys or research

Providing this is optional. Declining will limit access to parts of our ecosystem.

B. Data Passively Collected from Use

As you navigate our platforms, some usage data is automatically observed:

Device type, operating system and browser data
IP address and general location (country/region level)
Pages or content areas visited
Referring web page or ad clicked
Usage timing and duration

This allows us to improve site performance and optimize experiences. It is aggregated and anonymous.

3. How We Use Collected Data

Data enables us to improve your experiences and our offerings. But we only use it in ways you would reasonably expect:

A. Providing Products and Services

We use data to deliver, support and customize our platforms for you, such as:

Creating user accounts
Processing purchases and payments
Analyzing usage to improve site functionality
Personalizing content layouts for ease of use
Allowing user-generated content to be shared
Communicating updates, invoices or changes

B. Supporting Our Organization

We also use data internally to support daily operations and long-term improvements:

Analyzing broad usage trends to guide enhancements
Tracking sales and revenue for financial reporting
Evaluating effectiveness of offerings like events or courses
Identifying updates needed for bugs or security risks
Compiling industry research and insights from anonymized details
Sending notifications about new features or products

4. When We Share or Disclose Data

We will never sell or rent your personal details. We only share them in a few scenarios:

A. Partner Services Supporting Our Operations

We may share data with vendors providing services needed to run Kohl’s, like:

Payment processors handling purchases
Email providers delivering updates and reminders
Web hosting services storing site data
Event ticketing partners coordinating logistics
Analytics services enabling usage tracking

These partners must meet our security standards and are only given data required for their role.

B. As Legally Required

Under certain circumstances, we may be required to share data in response to lawful requests by public authorities, including to meet national security or legal requirements. We disclose only what is reasonably needed.

C. In Case of Merger or Acquisition

If Kohl’s engages in a merger, acquisition, bankruptcy, dissolution or transaction involving all or part of our business, customer data may be transferred or shared. We will notify you in advance if this occurs.

D. With Explicit User Consent

For any other sharing, we will ask for your explicit consent and only use data in ways you authorize.

5. Data Security and Protection

We use robust physical and technical safeguards to protect data. Our security controls include:

Encryption of sensitive customer data
Site security monitoring to detect and address threats
Access controls and permissions to limit employee reach
Screening of processors handling data
Limited data collection and retention
Testing of safeguards through audits
Ongoing staff training to reinforce security culture

While we work hard to protect information, no method is ever 100% guaranteed secure. We will promptly address any identified lapse in data protections.

6. Data Retention and Deletion

We retain your data only as long as needed to support your use of Kohl’s offerings, or to comply with legal requirements. When no longer required, we securely delete data.

Usage data needed to maintain site functionality is kept for no more than 12 months. Account data like names and emails are kept while the account remains active.

Data related to transactions is retained for at least 7 years to comply with tax and financial regulations. We may keep aggregated, anonymized data longer for research.

You can request deletion of your data at any time by contacting us. We will fulfill requests for users in regions with the right-to-delete like the EU’s GDPR. Deleting may limit access to certain offerings that require an account.

7. Cookies and Online Tracking

The Kohl’s website uses first-party cookies required for site functionality, like preserving sign-in state or remembering past interactions. No third-party cookies are used for ads or analytics without consent.

We do not employ tracking cookies or pixels from social media, data brokers, or behavioral advertising networks without your permission. Our goal is to minimize unwanted tracking you have not explicitly approved.

You can control cookie preferences through your browser settings. But disabling them may impair your ability to use parts of our site.

8. Children’s Data

Kohl’s offerings are meant for businesses and adult professional users. We do not knowingly collect or process data from anyone under 16 years old. If we become aware of such data, we will promptly delete it.

9. Your Data Rights and Choices

We want you to feel empowered in managing your data. You have the right to request:

A copy of personal data Kohl’s has about you
Correction or removal of inaccurate data
Deletion of your personal data
Restriction on how we use your data
Your data provided to you to move to another service (data portability)

We will fulfill these requests to the extent possible under local data protection laws like the EU’s GDPR. Where we cannot provide access or deletion for valid legal reasons, we will explain why.

You can adjust communication preferences and uses at any time through site settings or by reaching out to us.

10. International Data Transfers

Kohl’s operates globally, so your data may be stored and processed outside your region. We take measures to secure data transfers including:

Certifying under the EU-US Privacy Shield framework
Using European Commission approved Standard Contractual Clauses
Requiring privacy and security controls for partners handling data

11. Changes to this Policy

We may occasionally update this Privacy Policy as laws, regulations and our offerings evolve. Any changes become effective when published here. Continued use of Kohl’s signifies acceptance of updated policies. For major revisions, we will provide advance notice and re-obtain consent where required.

12. Our Responsibilities

We are committed to:

Respecting privacy as a human right
Collecting only useful, fair and lawful data
Processing data responsibly, securely and transparently
Providing meaningful privacy controls and options
Continually evaluating our practices for improvement

We seek to be proactive, not reactive, on privacy. Please contact us anytime with questions or concerns.