Last revised date: August 1, 2024
Tapestry Inc. and its affiliated companies (collectively "Tapestry", "we" or "us"), including Coach Stores Limited ("Coach") are committed to protecting your privacy and ensuring the highest level of security for your personal data.
Tapestry and Coach have prepared this Privacy Notice for:
This Privacy Notice explains the types of personal data Tapestry and Coach collects about you, how we use that data, who we share it with, and how we protect it.
Please read the following carefully to understand Tapestry's views and practices regarding your personal data.
For the purposes of this privacy notice, the data controllers are Tapestry Inc. of 10 Hudson Yards, New York, NY, 10001, U.S.A. and Coach Stores Limited, Brunel Building level 7, 2 Canalside Walk, London W2 1DG, United Kingdom.
This Privacy Notice covers all personal data processed by Tapestry and Coach which means information (either in isolation or in combination with other information) that enables Tapestry to identify you directly or indirectly. This includes the types of information set out below.
We may collect data about you from the following sources:
1. Information we receive from you
We may collect personal data (such as your name, postal and email address, telephone number, country of residence, birth day and month, age range, payment card information, or other personal characteristics or preferences) that you provide when you interact with us such as when you:
2. Information we collect about you
We collect information about you from the following sources:
To learn more about our purposes of use of cookies or similar digital tracking technologies (used to collect the information above), please see "How do we use cookies?" below.
|
|
We use your personal data for the following purpose(s): |
Based on the following justification: |
|
|---|---|---|---|
|
1 |
Process your online payment and complete your online purchase with us. |
Necessary to perform your purchase contract with us. |
|
|
2 |
Create your personal account on our website and enable your access to such account. |
Necessary to perform your contract with us for the provision of the services (online personal account). |
|
|
3 |
Use your personal account on our website including, for example, saving billing details and delivery address for future purchases, saving data to process products returns). |
Necessary for our legitimate interest to provide you with an enhanced customer experience on our website (e.g. smooth and quicken your online transactions). It is also in your interest to benefit from an enhanced customer experience. |
|
|
4 |
Personalise and optimise your online shopping experience with us (for example, recording certain information from your past purchases which can be re-used in your future purchases such as address, saving your favourite store locations or other personalisation services on our website). |
Necessary for our legitimate interest to provide you with an enhanced customer experience on our website. It is also in your interest to benefit from an enhanced customer experience. |
|
|
5 |
Enable you to use our "wish list" features online (even if you are have not registered for an online account with us). |
Necessary for our legitimate interest to provide you with an enhanced customer experience on our website. It is also in your interest to benefit from an enhanced customer experience. |
|
|
6 |
Provide you with customer support for any enquiry or request related to a product you have bought. |
Necessary to perform your purchase contract with us (where customer support for certain enquiries or requests is envisaged in our contract with you). |
|
|
7 |
Provide you with customer support for any enquiry or request you submit to us in relation to a product you would like to buy or a general enquiry or request. |
Necessary for our legitimate interest to establish or maintain a relationship with you. It is also in your interest to receive a response from us when you contact us. |
|
|
8 |
Use the product reviews you provide on our website, or through third parties. |
Necessary for our legitimate interest to receive feedback on our products and use such feedback to improve the way we present our products on our website to other potential buyers. |
|
|
9 |
Customise a product you have specifically requested. |
Necessary to perform your contract with us. |
|
|
10 |
Monitor the effectiveness of our adverts online and our marketing and clienteling campaigns (e.g., by monitoring if / when / how you interact with online ads or an emails you receive from us). |
Necessary for our legitimate interest to improve our marketing strategy, expand our customer base and retain current customers, and better allocate our marketing and clienteling resources. |
|
|
11 |
Offer targeted advertising to you which is tailored to your needs, preferences, tastes and habits. |
With your consent where this is required by applicable law or necessary for our legitimate interest to show you the products we think you will mostly like from us. It is also in your interest to receive customised offers, so you do not have to spend too much time browsing our broad range of products. |
|
|
12 |
Contact you with communications such as emails, postal mail or by SMS (if you provide such information in our in-store capture cards or online) to tell you about your purchase, market our products, offers and campaigns, send clienteling communications or other relevant information. |
With your consent where this is required by applicable law. Where your consent is not required by law (depending on the means of communications used), this data use is necessary for our legitimate interest to let you know about us your purchases and our products. |
|
|
13 |
Perform researches and surveys about our products and customer experience, product development and product testing. |
Necessary for our legitimate interest to constantly improve our offers, products and services to you. |
|
|
14 |
Enable you to take part to our contests, sweepstakes, competitions, promotions and similar events and initiatives for customers. |
Necessary to perform your contract with us (based on your written acceptance of our terms and conditions of entry to participate to such contests, sweepstakes, competitions and other promotions). |
|
|
15 |
Interact with you through our social media platforms, measure the effectiveness of our social media campaigns and perform some of the purposes above (e.g. advertising, enable you to take part to our contests, sweepstakes, surveys etc.) via social media. |
Necessary for our legitimate interest to expand and retain our customer base and promote our products also via social media. |
|
|
16 |
Enable your voluntary participation to our social media campaigns, including the use of your images |
Necessary to perform your contract with us (based on your written acceptance of our terms and conditions of entry to participate to such campaigns). |
|
|
17 |
Improve the functionality and user-friendliness of our website. |
Necessary for our legitimate interest to constantly monitor and improve our online presence and services to you. |
|
|
18 |
Fraud detection in relation to online payments and, more generally, prevention against any illegal activity. |
Necessary to perform your contract with us (including by complying with our contractual obligations to ensure the security and confidentiality of your payment data). |
|
|
19 |
Enable a corporate transaction such as a merger or acquisition whereby data assets must be merged or transferred as part of the transaction. |
Necessary for our legitimate interest to corporate re-organisation and/or compliance with regulatory or statutory requirements. |
|
|
20 |
Respond to or address enquiries or requests from law enforcement bodies, regulators or other public authorities. |
Necessary for the purposes of complying with legal requirements to which we are subject. |
|
Where we rely on the necessity for a legitimate interest to use your personal data, we will do so solely on the basis of a previous thorough assessment of our legitimate interest against your privacy rights and we will carefully conduct a balancing exercise to ensure that our data processing is proportionate to your rights.
As many other organisations, we use cookies or similar digital tracking technologies on our website for a number of purposes as set out below. A cookie is a very small text document, which often includes an anonymous unique identifier. Cookies are created when your browser loads a particular website. The website sends information to the browser which then creates a text file. Every time the user goes back to the same website, the browser retrieves and sends this file to the website's server. Find out more about the use of cookies on www.allaboutcookies.org. Cookies (or other similar technologies) can be placed on our website by us or by third-party partners we engage for our purposes.
Third-party cookies may be deployed on our behalf also on third-party websites (e.g. to measure ads effectiveness). Please note that we are not in control of and responsible for any cookies placed on our website by third parties without our authorization or third parties who are not acting on our behalf.
We respect applicable law about cookies. In particular, we use cookies only with your authorization where this is required by applicable law. In any case, you may opt-out from cookies at any time by changing your browser settings accordingly. However, as a consequence of your opt-out, certain functions, portions or features of our website may cease working or may prevent you from fully benefiting of our online services.
We also use other forms of technology (such as web beacons, pixel tags and, in apps, software development kits (usually referred to as SDKs) which serve a similar purpose to cookies, and which allow us to monitor and improve our website and email communications. When we refer to cookies in this Privacy Notice, this term includes these similar technologies.
Categories of cookies
Some cookies are deleted when you close down your browser. These are known as session cookies. Others remain on your device until they expire or you delete them from your cache. These are known as persistent cookies and these types enable us to remember things about you as a returning visitor. The main categories of cookies we use include:
To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org. Alternatively, you can search the Internet for other independent information on cookies.
Except for strictly necessary cookies, all cookies will be kept in accordance with the principle set out in section 10 of this Privacy Notice.
Purposes of use of cookies
We use cookies for the following purposes:
How to manage your cookies?
The browsers of most computers, smartphones and other web-enabled devices are typically set up to accept cookies. If you wish to amend your cookie preferences for this website or any other websites, you can do this through your browser settings. Your browser's 'help' function will tell you how to do this. If you do not want the benefit of cookies, there is a simple procedure to manually delete your cookies. Visit http://www.allaboutcookies.org/manage-cookies/stop-cookies-installed.html to see these.
However, please remember that cookies are often used to enable and improve certain functions on our website. If you choose to switch certain cookies off, it is likely to affect how our website works.
Your personal data may be shared with third parties in certain circumstances:
Tapestry's group of companies: We may share your personal data among our group of companies, including our subsidiaries, head office and branches, in order to open your account with us, administer our services and products, provide you with customer support, process your payments, understand your preferences, offer targeted advertising, send you information about products and services that may be of interest to you and conduct the other activities described in this Privacy Notice.
Our Tapestry brands (COACH, kate spade, and STUART WEITZMAN): As described this Privacy Notice, we may share your information with any Tapestry brand to generate cross-brand marketing and clienteling materials tailored to your specific interests, program memberships, and purchases. For example, if you sign up for email marketing and clienteling materials from one of our brands (e.g., Coach), we may use your information to create similar marketing and clienteling materials for another brand's products that may be of interest to you. You can opt-out of this sharing at any time by emailing privacy@tapestry.com.
Our service providers: We use other companies, agents or contractors to perform services on our behalf or to assist us with the provision of the Tapestry services and products to you. We may share personal data with the following categories of service provider:
In the course of providing such services, these service providers may have access to your personal data. However, we will only provide our service providers with personal data which is necessary for them to perform their services, and we require them not to use your information for any other purpose. We will use our best efforts to ensure that all our service providers keep your personal data secure.
Third parties permitted by law: In certain circumstances, we may be required to disclose or share your personal data in order to comply with a legal or regulatory obligation (for example, we may be required to disclose personal data to the police, regulators, government agencies or to judicial or administrative authorities).
We may also disclose your personal data to third parties where disclosure is both legally permissible and necessary to protect or defend our rights, matters of national security, law enforcement, to enforce our contracts or protect your rights or those of the public.
Third parties connected with business transfers: We may transfer your personal data to third parties in connection with a re-organisation, restructuring, merger, acquisition or transfer of assets, provided that the receiving party agrees to treat your personal data in a manner consistent with this Privacy Notice.
Please note our website may, from time to time, contain links to and from the websites of our partners or affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we have no control over how they may use your personal data. You should check the privacy policies of third party websites before you submit any personal data to them.
Your personal data may be transferred to and processed in the U.S. or other locations outside the European Economic Area ("EEA"), the United Kingdom or Switzerland including Japan, South Korea, Singapore, the mainland China, Hong Kong SAR by our affiliates and our service providers. We will take all steps that are necessary to ensure that your personal data is treated securely and in accordance with this Privacy Notice as well as applicable data protection laws.
Tapestry, Inc. ("Tapestry") is certified under the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework (collectively, the "Data Privacy Framework") administered by the U.S. Department of Commerce and developed by the U.S. Department of Commerce, the European Commission and the Swiss Federal Data Protection and Information Commissioner, respectively, regarding the transfer of personal information from the European Union (and Iceland, Liechtenstein and Norway), United Kingdom (and Gibraltar) and Switzerland to the U.S. Click here to view our Data Privacy Framework: Consumer Privacy Policy.
You may ask for further information on the safeguards that we have put in place to safeguard the transfer of your data to outside of the EEA, UK or Switzerland by contacting us as indicated below at "How can you contact us"?
If you are in the EEA, UK or Switzerland, you have the following rights:
You can make a request to exercise any of these rights in relation to your personal data by contacting us as indicated below at "How can you contact us?".
You also have the right to lodge a complaint with the local data protection authority if you believe that we have not complied with applicable data protection laws. Please click here for a list of local data protection authorities in the EEA countries: here. In the UK, you have a right to lodge a complaint with the Information Commissioner's Office (ICO) about the processing of your personal data.
We have implemented technical and organisational security measures to safeguard the personal data in our custody and control. Such measures include, for example, limiting access to personal data only to employees and authorised service providers who need to know such information for the purposes described in this Privacy Notice, as well as other administrative, technical and physical safeguards.
While we endeavour to protect our systems, sites, operations and information against unauthorised access, use, modification and disclosure, due to the inherent nature of the Internet as an open global communications vehicle and other risk factors, we cannot guarantee that any information, during transmission or while stored on our systems, will be absolutely safe from intrusion by others.
We will only retain your personal data for as long as necessary for the purpose for which that data was collected and to the extent permitted by applicable laws.
When we no longer need to use personal data, we will remove it from our systems and records and/or take steps to anonymise it so that you can no longer be identified from it (unless we need to keep your information to comply with legal or regulatory obligations to which we are subject).
If there are any questions or concerns regarding this Privacy Notice or the data collection practices outlined herein, or if you want to exercise any of your rights, please contact us, our external DPO or the EU or UK representative (as applicable) as follows:
Alternatively, you can contact our external Data Protection Officer - Bird & Bird DPO Services SRL:
If you are located in the EEA, you can contact the EU representative:
This Privacy Notice is written in English and may be translated into other languages. In the event of any inconsistency between the English version and the translated version of this notice, the English version shall prevail.
We reserve the right to change our Privacy Notice from time to time including where this is necessary due to changes to our data processing practices or activities. If we decide to change our Privacy Notice we will notify you of these changes via email where we have a direct relation with you and post an alert on the home page of our website.
Last revised date: August 1, 2024.