Last updated: August 1, 2024
We, Tapestry Inc., are part of the Tapestry Inc. brands which include COACH, kate spade, and STUART WEITZMAN. In this Privacy Notice, we describe how we use personal information that we collect from you if you are in the U.S. and you:
If you are a resident of the relevant U.S. state, please also see our Supplemental U.S. State Privacy Law Notice at Section 10 of this Privacy Notice below.
Information You Actively Submit: If you buy our products online, register for an online account with us, use the "wish list" features of our online services, sign up for updates and marketing communications from us, participate in our sweepstakes or surveys, request specific product customizations from us, submit a product review on our website, contact us for customer service, or otherwise interact with us via our online services, we may collect personal information about you, including the following:
Information Passively Submitted on our Online Services: When you use our online services, we collect information from or about the computer, phone or other device on which you have installed, or from which you access, our online services, and information about your usage of our online services, including the following:
Cookies and Related Technologies: We and our business partners may use cookies and other similar technologies such as pixel tags and web beacons to collect certain types of the Technical Data and Usage Data described above as permitted by applicable law. Cookies and similar technologies are placed on our site for the following purposes:
For more information about the cookies and similar technologies we use, please see our How we use Cookies in Section 9 below.
Children's Information: Our online services are not intended for use by children under the age of 13. We do not knowingly register or otherwise collect personal information from any child under the age of 13 without the prior verifiable consent of the child's parent or guardian. However, we may collect personal information about children under the age of 13 if you provide the name of your child while using our clienteling applications. For more information, please see Section 10.
We use the following categories of personal information for the following purposes:
We also use your personal information for the following purposes (collectively, the "General Processing Purposes"), as permitted by applicable law:
We may share your personal information with the following types of third parties as permitted by applicable law:
We provide our service providers and business partners with access to your personal information so that they may provide services to us, subject to non-disclosure agreements and other data protection safeguards.
Please note our online services may contain links to and from the websites of our partners or affiliates that are not owned or operated by us. If you follow a link to any of these websites, please review the privacy policies of third-party websites before you submit any personal information to them. We are not responsible for any privacy or security policies of these third-party sites.
We keep your personal information for as long as needed or permitted in light of the purpose(s) for which it was obtained. The criteria used to determine our retention periods include (i) for as long as we have an ongoing relationship with you; (ii) as required by a legal obligation to which we are subject to; or (iii) as advisable in light of our legal position (such as in regard of applicable statutes of limitations, litigation, or regulatory investigations). We may remove personal information for inactive accounts from our database, subject to any applicable legal or regulatory obligations. Furthermore, we may delete personal information from our database at any time and without providing any reason.
We have implemented technical and organizational security measures intended to safeguard the personal information in our custody and control. Such measures include, for example, limiting access to personal information only to employees and authorized service providers who need to know such information for the purposes described in this Privacy Notice, as well as other administrative, technical and physical safeguards.
For example, when you place an order on www.coach.com or www.coachoutlet.com, we use Secure Socket Layer (SSL) technology, an encryption tool that provides security while transmitting information over the Internet. We also use firewall technology, password controls, and other technological and procedural safeguards in respect of your online interactions with us.
While we endeavor to protect our systems, sites, operations and information against unauthorized access, use, modification and disclosure, due to the inherent nature of the Internet as an open global communications vehicle and other risk factors, we cannot guarantee that any information, during transmission or while stored on our systems, will be absolutely safe from intrusion by others.
Unsubscribe. You may unsubscribe from our marketing or clienteling emails or SMS communications. To unsubscribe from email marketing or clienteling, please click the "unsubscribe" link at the bottom of any email that you receive or email us at privacy@tapestry.com. To unsubscribe from SMS communications, follow the instructions in the message. Please note that if you have already requested products or services when you decide to withdraw consent, there may be a short period of time for us to update your preferences and ensure that we honor your request.
Update, Modify or Correct Your Information. We encourage you to contact us to update or correct your personal information if it changes or if you believe that any information that we have collected about you is inaccurate. We may request information from you to honor your request, such as to ensure proper authentication or to verify the business branch of ours to which the information was provided.
Rights under Applicable Privacy Laws. You may have rights under applicable privacy laws, including to access or erase certain personal information that we have about you, or restrict or object to certain activities in which we engage with respect to your personal information. To submit a request to exercise any such rights, please contact us using the details in Section 8 below. If you are a resident of the relevant US state, please also see our Supplemental US State Privacy Law Notice at Section 10 below.
Tapestry, Inc. ("Tapestry") is certified under the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework (collectively, the "Data Privacy Framework") administered by the U.S. Department of Commerce and developed by the U.S. Department of Commerce, the European Commission and the Swiss Federal Data Protection and Information Commissioner, respectively, regarding the transfer of personal information from the European Union (and Iceland, Liechtenstein and Norway), United Kingdom (and Gibraltar) and Switzerland to the U.S. Click here https://www.coach.com/data-privacy-framework.html to view our Data Privacy Framework: Consumer Privacy Policy.
We may change, modify, add, or remove portions of this Privacy Notice at any time, in which case we will provide individuals with notice of such updates where required by applicable law and then upload the updated Privacy Notice to our website www.coach.com or www.coachoutlet.com. You should check this page periodically for changes. Your continued use of our online services or any of the other services described in this Privacy Notice following the posting of changes to this Privacy Notice will be considered your consent to those changes.
To exercise any of your privacy rights, or if you have any questions or concerns regarding this Privacy Notice or the data processing practices outlined herein, please contact us and/or our EU or UK representative (as applicable) as follows:
Alternatively, you can contact our external Data Protection Officer - Bird & Bird DPO Services SRL:
If you are located in the EEA, you can contact the EU representative:
If you are located in the UK, you can contact the UK representative:
In this Cookie Notice, we, Tapestry, Inc., explain how we use cookies and similar digital tracking technologies on our website and other online services.
Like many other organizations, we use cookies or similar digital tracking technologies on our website for a number of purposes as set out below. Cookies (or other similar technologies) can be placed on our website by us or by third-party partners we engage for our purposes.
Third-party cookies may also be deployed on our behalf on third-party websites (e.g., to measure the effectiveness of ads). We respect applicable law about cookies. In particular, we use cookies only with your authorization where this is required by applicable law. In any case, you may opt-out from cookies at any time by changing your browser settings accordingly. However, as a consequence of your opt-out, certain functions, portions or features of our website may cease working or may prevent you from fully benefiting of our online services.
To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org. Alternatively, you can search the Internet for other independent information on cookies.
Please remember that cookies are often used to enable and improve certain functions on our website. If you choose to switch certain cookies off, may affect the user experience.
In this Supplemental US State Privacy Law Notice, we, Tapestry, Inc., disclose information about our data processing practices as required by US state privacy laws including the California Consumer Privacy Act of 2018 ("CCPA") as amended by the California Privacy Rights Act ("CPRA"), the Virginia Consumer Data Protection Act ("VCDPA"), the Utah Consumer Privacy Act ("UCPA"), the Connecticut Privacy Act ("CTPA"), the Colorado Privacy Act ("CoPA") and the Utah Consumer Privacy Act ("UCPA") (collectively, "US State Privacy Laws").
A. Who and what information is subject to US State Privacy Laws?
US State Privacy Laws protect residents, from their respective states, as "consumers" with respect to their personal information, although a number of exceptions apply. As a result, the Supplemental US State Privacy Law Notice and relevant State Privacy Rights subsections below may not apply when they restrict our ability to comply with a court order or regulator with competent authority, federal, state or local laws, and cooperation with law enforcement, exercise of our legal claims, or collection or use of de-identified information. Some of the State Privacy Rights are specific to a particular state and may not apply to you.
B. Supplemental Disclosures
We have set out below the categories of personal information and sensitive personal information we have collected about US residents in the preceding 12 months and describe, for each category of personal information and/or sensitive personal information collected, the business or commercial purposes for which the information was collected. Each of the categories of personal information listed in the table(s) are collected directly from consumers. Each of the categories of personal information in the table may also be shared with the following categories of third parties: (i) our Service providers and business partners, including those listed at Section 3 above, (ii) Government entities as required by applicable law, (iii) other recipients at your discretion or with your consent, or (iv) Third parties in the event of a proposed or actual business transaction involving all or any portion of our business.
Additional information about sales of information can be found below the table.
Personal Information
Category of personal information |
We collected such personal information for the following purposes: |
How long will we retain your personal information? |
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers. |
We may use this information for any of the purposes described in Section 2 above. |
We retain this information as long as reasonably necessary to fulfil the purposes described in Section 2 and to comply with applicable laws and regulations. Criteria used to determine the retention period include: |
Categories of personal information described in subdivision (e) of Section 1798.80 of the California Civil Code, including name, signature, address, telephone number, passport number, and credit card number, debit card number, or any other financial information. |
We use this information to process payment, fulfil your order, or process a return. |
We retain this information as long as reasonably necessary to process payments, fulfil your order, or process returns, and comply with applicable laws and regulations. Criteria used to determine the retention period include: |
Characteristics of protected classifications under California or federal law; namely, gender and age. |
We use this information to better understand our clientele for example when joining our clienteling program. |
We retain this information as long as reasonably necessary to provide you with access to our various programs and initiatives, to book your appointments, and enrol you in our gift registries and other features of our online store and comply with applicable laws and regulations. Criteria to determine the retention period include: |
Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
We use this information to fulfil your order, manage consumers' online account with us, personalize and optimize consumers' shopping experience with us (for example, letting you know when a favorite product is back in stock, recording certain information from past purchases which can be used in future purchases such as preferred address and favorite store locations), provide consumers with customer care, and customize a product per a consumer's specific request. |
We retain this information as long as reasonably necessary to fulfil your order, customize your purchases based on your specific requests, deliver products to your desired store location, provide you with customer care, and comply with applicable laws and regulations. Criteria used to determine the retention period include: |
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an Internet Web site, application, or advertisement. |
We may use this information for any of the purposes described in Section 2 above. |
We retain this information as long as reasonably necessary to optimize our online services to and for you; provide you with customer service and technical assistance; to generally develop and improve our products and services; and comply with applicable laws and regulations. Criteria to determine the retention period include: |
Audio, electronic, visual, or similar information. |
We use audio, visual or similar information that you may voluntarily provide in connection with customer care inquiries or when you engage with our social media initiatives. |
We retain this information as long as reasonably necessary to ensure your customer care inquiries are documented and answered and/or ensure your continued participation in our social media initiatives and comply with applicable laws and regulations. Criteria to determine the retention period include: |
Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer's preferences, characteristics and attitudes. |
We use such information to personalize and optimize consumers' shopping experience with us, enable consumers to use our "wish list" features online, tailor our clienteling or marketing efforts, and develop and improve our products and services. |
We retain this information as long as reasonably necessary to maintain and improve your preferences, characteristics, and attitudes based on your "wish list", send you clienteling or marketing materials tailored to your interests, and comply with applicable laws and regulations. Criteria to determine the retention period include: |
Sensitive Personal Information
In addition to the categories of personal information listed above, we also occasionally collect categories of "sensitive personal information," as defined by US privacy laws, which are special categories of personal information that reveal data about your identity, racial or ethnic origin, precise geolocation, and/or other sensitive data types. You have the ability to opt-out of the use and disclosure of your sensitive personal information using the mechanisms described in this Privacy Notice. Under certain laws, consumers have a right to limit use and disclosure of sensitive personal information to certain enumerated business purposes. If you wish to request this limitation, please contact us using the information provided in Section 8.
Category of sensitive personal information |
We collected such sensitive personal information for the following purposes: |
How long will we retain your sensitive personal information? |
Government Identifier(s) such as social security, driver's license, state identification card, or passport number. |
We may collect, use, or disclose this information in order to onboard our independent suppliers during the procurement process. We do NOT collect, use, or disclose this information as it pertains to customers. |
We retain this information as long as reasonably necessary to onboard our independent suppliers, as part of our supplier diversity program, and to comply with applicable laws and regulations. |
Racial or ethnic origin. |
We collect this information as part of our supplier procurement process, including to evaluate the supplier's eligibility for our diversity program. |
We retain this information as long as reasonably necessary to procure diverse suppliers, maintain and improve your customer profile and preferences, and comply with applicable laws and regulations. |
Data pertaining to children under the age 13. |
We may collect this information if you provide the name of your child when using our clienteling applications. |
We retain this information as long as reasonably necessary to provide you with access to our various clienteling applications you may use for your children, and to comply with applicable laws and regulations. |
Geolocation data. |
We may use this information to enable consumers to view nearby stores, to book appointments and customer targeting, to evaluate distances from stores and distribution centers. |
We retain this information as long as reasonably necessary to show you nearby stores, help you book appointments, allow you to see distances from stores and distribution centres, and comply with applicable laws and regulations. Criteria to determine the retention period include: |
Precise geolocation data such as any data that is derived from a device and that is used or intended to be used to locate a consumer within a geographic area that is equal to or less than the area of a circle with a radius of 1,850 feet. |
We may collect this information from you to display the nearest available store with inventory you are interested in, to help you book an appointment, and to deliver clienteling or marketing materials tailored to your location. |
We retain this information as long as reasonably necessary to help you find nearby stores and inventory, book an appointment, send you clienteling marketing materials based on your location, and to comply with applicable laws and regulations. |
Over the past 12 months, we also used the categories of personal information listed above as necessary to fulfil the General Processing Purposes described in Section 2 of this Notice above.
During the past 12 months, we shared certain categories of personal information about California residents with third parties and business partners in a manner that may constitute a "sale" under the CCPA, as described below:
We do not sell the personal information of minors under 16 years of age without affirmative authorization.
C. State Privacy Rights
Residents from California, Virginia, Colorado, Connecticut, and Utah have the following rights:
If you submit a request to exercise your rights pursuant to this US State Privacy Law Notice, we may ask that you provide certain information to verify your identity. If you have a password-protected account with us, we may verify your identity through our existing authentication practices for your account. The information that we ask you to provide to verify your identity will depend on your prior interactions with us and the sensitivity of the personal information at issue. We will respond to your request in accordance with applicable law. If we deny your request, we will explain why.
You can designate an authorized agent to make a request on your behalf if:
If you use an authorized agent to submit a request to exercise your right to know, right to opt-out of the "sale" of your personal information, or your right to request deletion, please have the authorized agent take the following steps in addition to the steps described earlier:
D. Shine the Light Law
California residents are entitled once per year to request and obtain certain information regarding our disclosure, if any, of your personally identifiable information to third parties for their direct marketing purposes during the immediately prior calendar year. To make such a request, please send an email to privacy@tapestry.com with your full name, email address, and postal address in your message. In response to your request, we will provide you with a notice describing the cost-free means to opt-out of our sharing your personally identifiable information with third parties with whom we do not share the same brand name, if the third party will use it for their direct marketing purposes.