Your Data Stays Secure with Us
At Kohl’s, we take privacy seriously and want you to feel comfortable engaging with our platforms. This policy outlines how we collect, use, and protect information to preserve your trust.
We keep data collection minimal and never sell personal details. Our goal is to be fully transparent so you feel empowered to use our offerings. Please reach out with any questions!
1. Scope of Policy
This policy covers all Kohl’s websites, apps, events, products, and services. It applies to Kohl’s Inc. and our subsidiaries worldwide.
2. Information We Collect
We aim to only collect the minimum user data needed to deliver experiences you value. The types fall into two main categories:
A. Data You Provide to Us
When interacting with our platforms, you may choose to share:
- Contact info like name, email, company for creating accounts
- Billing details like payment method to make purchases
- Feedback, suggestions and ideas for improving Kohl’s
- Your content like writing, designs, or programming contributions
- Demographic data like age, industry or interests for surveys or research
Providing this is optional. Declining will limit access to parts of our ecosystem.
B. Data Passively Collected from Use
As you navigate our platforms, some usage data is automatically observed:
- Device type, operating system and browser data
- IP address and general location (country/region level)
- Pages or content areas visited
- Referring web page or ad clicked
- Usage timing and duration
This allows us to improve site performance and optimize experiences. It is aggregated and anonymous.
3. How We Use Collected Data
Data enables us to improve your experiences and our offerings. But we only use it in ways you would reasonably expect:
A. Providing Products and Services
We use data to deliver, support and customize our platforms for you, such as:
- Creating user accounts
- Processing purchases and payments
- Analyzing usage to improve site functionality
- Personalizing content layouts for ease of use
- Allowing user-generated content to be shared
- Communicating updates, invoices or changes
B. Supporting Our Organization
We also use data internally to support daily operations and long-term improvements:
- Analyzing broad usage trends to guide enhancements
- Tracking sales and revenue for financial reporting
- Evaluating effectiveness of offerings like events or courses
- Identifying updates needed for bugs or security risks
- Compiling industry research and insights from anonymized details
- Sending notifications about new features or products
4. When We Share or Disclose Data
We will never sell or rent your personal details. We only share them in a few scenarios:
A. Partner Services Supporting Our Operations
We may share data with vendors providing services needed to run Kohl’s, like:
- Payment processors handling purchases
- Email providers delivering updates and reminders
- Web hosting services storing site data
- Event ticketing partners coordinating logistics
- Analytics services enabling usage tracking
These partners must meet our security standards and are only given data required for their role.
B. As Legally Required
Under certain circumstances, we may be required to share data in response to lawful requests by public authorities, including to meet national security or legal requirements. We disclose only what is reasonably needed.
C. In Case of Merger or Acquisition
If Kohl’s engages in a merger, acquisition, bankruptcy, dissolution or transaction involving all or part of our business, customer data may be transferred or shared. We will notify you in advance if this occurs.
D. With Explicit User Consent
For any other sharing, we will ask for your explicit consent and only use data in ways you authorize.
5. Data Security and Protection
We use robust physical and technical safeguards to protect data. Our security controls include:
- Encryption of sensitive customer data
- Site security monitoring to detect and address threats
- Access controls and permissions to limit employee reach
- Screening of processors handling data
- Limited data collection and retention
- Testing of safeguards through audits
- Ongoing staff training to reinforce security culture
While we work hard to protect information, no method is ever 100% guaranteed secure. We will promptly address any identified lapse in data protections.
6. Data Retention and Deletion
We retain your data only as long as needed to support your use of Kohl’s offerings, or to comply with legal requirements. When no longer required, we securely delete data.
Usage data needed to maintain site functionality is kept for no more than 12 months. Account data like names and emails are kept while the account remains active.
Data related to transactions is retained for at least 7 years to comply with tax and financial regulations. We may keep aggregated, anonymized data longer for research.
You can request deletion of your data at any time by contacting us. We will fulfill requests for users in regions with the right-to-delete like the EU’s GDPR. Deleting may limit access to certain offerings that require an account.
7. Cookies and Online Tracking
The Kohl’s website uses first-party cookies required for site functionality, like preserving sign-in state or remembering past interactions. No third-party cookies are used for ads or analytics without consent.
We do not employ tracking cookies or pixels from social media, data brokers, or behavioral advertising networks without your permission. Our goal is to minimize unwanted tracking you have not explicitly approved.
You can control cookie preferences through your browser settings. But disabling them may impair your ability to use parts of our site.
8. Children’s Data
Kohl’s offerings are meant for businesses and adult professional users. We do not knowingly collect or process data from anyone under 16 years old. If we become aware of such data, we will promptly delete it.
9. Your Data Rights and Choices
We want you to feel empowered in managing your data. You have the right to request:
- A copy of personal data Kohl’s has about you
- Correction or removal of inaccurate data
- Deletion of your personal data
- Restriction on how we use your data
- Your data provided to you to move to another service (data portability)
We will fulfill these requests to the extent possible under local data protection laws like the EU’s GDPR. Where we cannot provide access or deletion for valid legal reasons, we will explain why.
You can adjust communication preferences and uses at any time through site settings or by reaching out to us.
10. International Data Transfers
Kohl’s operates globally, so your data may be stored and processed outside your region. We take measures to secure data transfers including:
- Certifying under the EU-US Privacy Shield framework
- Using European Commission approved Standard Contractual Clauses
- Requiring privacy and security controls for partners handling data
11. Changes to this Policy
12. Our Responsibilities
We are committed to:
- Respecting privacy as a human right
- Collecting only useful, fair and lawful data
- Processing data responsibly, securely and transparently
- Providing meaningful privacy controls and options
- Continually evaluating our practices for improvement
We seek to be proactive, not reactive, on privacy. Please contact us anytime with questions or concerns.