Privacy Policy

This Privacy Policy covers the interactions we have with our customers and potential customers. We interact with our customers and potential customers via our website, via marketing tools, our stores and social media. The data controller (who determines the purpose and way your Personal Data is used) is Cole Haan LLC (referred to in this Privacy Policy as “we” or “us”). We use third parties to process data on our behalf (referred to in this Privacy Policy as “Data Processors”). Further details of the parties with whom we share your data are set out below.

We are committed to doing the right thing when it comes to how we collect, use and protect your Personal Data. That’s why we’ve developed this Privacy Policy and a Cookie Declaration, which:

• sets out the different ways you interact with us and the types of Personal Data that we collect;
• explains the reasons why we use the data we collect;
• explains when and why we will share Personal Data within Cole Haan and with other organizations; and
• explains the rights and choices you have when it comes to your Personal Data.

This Privacy Policy applies to you when you interact with us. The different ways you interact with us are further described in this Privacy Policy. If you reside in the European Union, please see the “EU Privacy Rights” section below. If you reside in California, please see the “California Privacy Rights” section below. These sections provide information regarding the rights afforded to residents of these jurisdictions under law and the mechanisms under which these residents may exercise their rights. Any terms used in the “California Privacy Rights” section have the same meaning as defined in Cal. Civ. Code Section 1798.140 and do not have any other meaning as may be prescribed elsewhere in this privacy policy.

Our website may contain links to other websites operated by other organizations that have their own privacy policies. Please make sure you read the terms and conditions and privacy policy carefully before providing any Personal Data on a website as we do not accept any responsibility or liability for websites of other organizations.

"Personal Data" means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

Types of personal data

In this section we have defined the different types of personal data:

Contact data: This is information that details how we can contact you, so your address, email or telephone number.

Feedback data: This is information collected about you as a user of our stores, products and services more generally (compared to other types of data that relate to you directly for us to deliver our products to you). This may include where you engage with Cole Haan in a survey, via social media, provide feedback on your shopping experience or our products and services.

Financial data: This is information about your bank account and payment card details or other payment account details such as details regarding your ApplePay or PayPal account.

Identity data: This is information that helps us identify who you are, so your name, title, gender, certain preferences, or Order Number.

Pseudonymized data: Data that is gathered in a form whereby data that identifies an individual is removed or replaced by non-identifying information such as an ID number or reference number.

Special category data

This is special information that applicable privacy laws determine to be more sensitive (sometimes it is referred to as sensitive Personal Data) and it needs more protection. For example, racial or ethnic origin, health related information, or religious beliefs or union membership. Cole Haan does not collect such data. Should we collect sensitive Personal Data in our interactions with you, this will be done with your consent and its use made clear to you.

Technical data: This is information about your device used to access our website and how you interact with our products and services. This could be information that identifies your device, its operating system, internet address, your login data; browser and plug- ins; geo-location; or behavioral data such as browsing history, time spend on website and conversion rates. This allows us to create an analysis of you as a consumer to better judge what products and services to offer. If you use our in-store WIFI we will collect information about where and when you accessed our network; This is done via the use of Cookies and other techniques which is covered elsewhere in this Privacy Policy and our Cookie Declaration

Transaction data: This is information about your purchase of a product or service from us. This includes when, where, what and how you purchased that item or service. It will also include where we sent that product or service and any other benefits collected as part of the transaction.

As mentioned above we use third parties to process Personal Data on our behalf (“Data Recipients”). In this section we have defined the categories of Data Recipients who receive the Personal Data from us in order to provide their services. Separate data privacy policies and cookie notices might apply, and these Data Recipients might provide your Personal Data to other parties, but these other parties are required to protect the data in accordance with applicable data protection laws and they may only use it for specified purposes and in accordance with our instructions.

Types of Data Recipients

IT Providers: We use several third parties who provide IT solutions and/or services who enable us to operate our IT infrastructure. We need our IT infrastructure to operate our business.

Logistic Providers: We use several third parties who provide logistical solutions and/or services who enable us to provide customer contact services, to deliver or take back products you purchased via our website via our stores.

Marketing Providers: We use several third parties who provide us solutions and/or services to help us market and promote our products and services.

Analytic Providers: We use several third parties who provide us solutions and/or services to better understand our customers and visitors of our website, to better understand our competition and to better market our products and services, but also to help us prevent misuse of the website.

Payment Providers (PP): If you purchase our products via our website in our stores your payment is processed via a PP. A PP company that offers us services for accepting electronic payments by a variety of payment methods including credit card, bank-based payments such as direct debit, bank transfer, and real-time bank transfer based on online banking. A PP allows us to accept a wide variety of payments through a single channel. The PP works with acquiring banks (payment processors) to manage the entire transaction process from start to finish and as such they are an independent Data Controller.

Fraud Detecting Companies: In order to prevent fraud, we use third parties who have their own data bases and as such they are an independent Data Controller containing Personal Data.

Social Media: We use social media networks who provide us solutions and/or services to help us market and promote our products and services.

All Data Recipients with whom we share your Personal Data are required to protect it in accordance with applicable data protection laws and they may only use it for specified purposes and in accordance with our instructions.

When you sign-up for our emails

In order to receive our e-mails, you will provide us your name and email address. You can sign-up at any time, for example while purchasing online or in our stores, while using the website or during other interactions with us.

We collect: Contact data and Identity data. For which purpose you have given your consent by signing up. You can withdraw your consent at any time by following the process set out in section 13 below.

Purpose and legal basis: We collect and process the Personal Data to market our products and services.

Data sharing: We use IT Providers, Marketing Providers and Analytic Providers.

When you become a member via our website

In order to become a member (creating an account), you will provide us your name, email address and you create a password. You can also opt in to receive our e-mails. To further complete your profile, you can provide additional personal information and certain preferences.

We collect: Contact data and Identity data.

Purpose and legal basis: We collect and process the Personal Data to market our products and services, for customer analysis and personalization of website and marketing. For which purpose you have given your consent by signing up. You can withdraw your consent at any time by following the process set out in section 13 below.

Data sharing: We use IT Providers, Marketing Providers and Analytic Providers.

When you browse our website

If you browse our website, we wish to learn more about your preferences.

We may collect: Identity data, Technical data, Feedback Data and Pseudonymized data.

Purpose and legal basis: We collect Technical data, Feedback Data and Pseudonymized data in order to market our products and services; and to understand who is visiting our website to understand the browse behavior of our customers and visitors. This is necessary for our legitimate interest of growing our business and marketing our products or for which you have given your consent by using our website or for which you have given your consent via CookieBot if you are visiting our website out of Europe.

Data sharing: We use IT Providers, Marketing Providers and Analytic Providers.

When you shop with us online or place an order via customer service

If you place an order, we will need to have personal information in order to process your order and payment.

We will collect: Identity data, Contact data, Financial data, Transaction data, Technical data, Feedback Data and Pseudonymized data.

Purpose and legal basis: We collect and process the Identity data, Contact data, Financial data and Transaction data in order to process your order and payment. Our legal basis for doing this is that it is necessary for the performance of our contract with you.

Global-E: If your purchase our products via our website while not being located in the United States and/or if you want our products to be shipped outside the United States, we use Global-E, Inc for the fulfilment of those such orders. The actual purchase will be made via Global-E and we function as a data recipient for fulfilling the order. Global-E has its own privacy policy that will apply.

ShopRunner: If you choose to check-out via ShopRunner, in order to get the 2-day shipping, you must sign-up for ShopRunner. ShopRunner has its own privacy policy that will apply. We may share your Transaction Data with ShopRunner.

If you have given consent to receive our marketing emails, we will also use your Contact data to send you marketing communications. Our legal basis for doing this is your consent. You can withdraw your consent at any time by following the process set out in section 13 below.

Data sharing: We use IT Providers, Marketing Providers, Analytic Providers, Payment Providers, Fraud Detecting Companies and Logistic Providers.

When you contact us regarding your order or products or services in general or when you have a complaint or wish to return a product.

In order to help you with your order inquiries or if you wish to return a product we will need to have Personal Data in order to help you in the best possible way.

We may collect: Identity data, Contact data, Transaction data.

Purpose and legal basis: If you have contacted us about returning a product, we will use the Personal Data to process (return) orders and payments. Our legal basis for doing this is that it is necessary for the performance of our contract with you.

If you have contacted us about any other query or inquiry, we will use the Personal Data you provide in order to respond to that query or inquiry. Our legal basis for doing this is that it is necessary for our legitimate interest of assisting our customers and responding to their complaints.

Data sharing: We use IT Providers, Payment Providers and Logistic Providers.

When you take part in promotions, competitions, surveys or reviews about our products

If you participate in competitions or review our products online, or use “Refer a Friend”, you will leave Personal Data. Either because we need to be able to contact you or because you want it to become known to the public.

We may collect: Identity Data, Contact Data, Technical Data and Feedback Data.

Purpose and legal basis: We collect and process the Personal Data in order to process your participation in the competition. Our legal basis for doing this is that it is necessary for the performance of our contract with you. We collect and process the Personal Data to market our products and services, for customer analysis and personalization of website and marketing. For which purpose you have given your consent by signing up for the competition.

Data sharing: We use IT Providers, Marketing Provider, Analytic Providers.

When you follow us on social media

If you follow us on social media, like our posts, share our posts, post on our pages you will leave Personal Data.

We may collect: Identity Data, Contact Data and Technical Data and Feedback Data.

Purpose and legal basis: We collect and process the Personal Data to market our products and services, for customer analysis and personalization of website and marketing. These social media companies may share data in accordance with their terms and conditions. For which purpose you have given your consent via your social media account and we have a legitimate interest.

Data sharing: We use Marketing Service Provider, Analytic Service Providers.

When you visit our stores

If you visit our stores you may provide your Personal Data by paying for a product, returning a product, or signing up for receiving e-mails. You may have certain inquiries we need to follow-up on.

We may collect: Identity Data, Contact Data Financial data and Transaction data.

Purpose and legal basis: We collect and process the Personal Data in order to process your order and payment. Our legal basis for doing this is that it is necessary for the performance of our contract with you. If you have contacted us about any other query or inquiry, we will use the Personal Data in order to respond to that query or inquiry. Our legal basis for doing this is that it is necessary for our legitimate interest of assisting our customers. We collect and process the Personal Data to market our products and services, for customer analysis and personalization of website and marketing. For which purpose you have given your consent by signing up. You can withdraw your consent at any time by following the process set out in section 13 below.

Data sharing: We use IT Providers, Marketing Providers, Payment Providers and Fraud Detecting Companies

We may also use Personal Data from other sources, such as specialist companies that supply information, such as data brokers or data intelligence companies, and from third parties for whom we act as data processer. Examples of information we receive from other sources include Personal Data you have provided to third parties and for which you have given permission to transfer to third parties. For example, this other Personal Data helps us to:

• Review and improve the accuracy of the data we hold;
• Improve and measure the effectiveness of our marketing communications, including online advertising.

Apart from sharing Personal Data with the Data Recipients specified above, we might also share Personal Data with other organizations in the following circumstances:

• Within the Cole Haan Group (Cole Haan LLC, Cole Haan Company Store LLC and Cole Haan International B.V.) where this is necessary for our internal processing purposes;
• In the event of a merger, sale, change in control, or reorganization of all or part of our business;
• When we are required to disclose Personal Data to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims;
• Where we have a good-faith belief sharing is necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or violations of our Website Terms of Use or as otherwise required to comply with our legal obligations; or
• As you may otherwise consent from time to time.

We know how important it is to protect and manage your Personal Data. This section sets out some of the measures we have in place.

• We apply physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of Personal Data;
• We protect the security of your information while it is being transmitted by encrypting it;
• We use computer safeguards such as firewalls and data encryption to keep data safe;
• We only authorize access to employees and trusted partners who need it to carry out their responsibilities;
• We regularly monitor our systems for vulnerabilities and attacks, and we carry out penetration testing to identify ways to further strengthen security;
• We will ask for proof of identity before we share your Personal Data with you; and
• We will reveal only the last four digits of your payment card number when confirming an order.

While we take appropriate technical and organizational measures to safeguard your Personal Data, it is important that you keep your login details and devices protected from unauthorized access.

Your personal information is stored by us and/or our service providers for as long as necessary to fulfill the specific purposes described herein and to the extent permitted by applicable laws. When we no longer have a legitimate business purpose for your personal information, or when you request that we delete your personal information (except where we need to retain it in order to comply with a legal obligation or to establish, exercise or defend legal claims), we will remove such information from our systems and records, which includes taking steps to anonymize it so that you can no longer be identified from it.

We and our partners use cookies and similar technologies, such as tags and pixels (“Cookies”), to personalize and improve your customer experience as you use our website and to provide you with relevant online advertising. We use Cookies to help us remember and process the items in your shopping cart. They are also used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use Cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future. Please see our Cookie Declaration. If you’re residing in Europe please see section 14.

Your browser settings

You can use your browser settings to delete existing Cookies. You can also set your browser to notify you each time new Cookies are placed on your computer or other device. You can find more detailed information about how you can manage Cookies through your browser’s help function.

If you choose to disable some or all Cookies, you may not be able to make full use of our Websites. For example, you may not be able to add items to your shopping basket, proceed to checkout, or use any of our products and services that require you to sign in.

To provide increased value to you while visiting our website, we may choose various third-party websites to link to from our own website. Once you are visiting a third-party website, separate data privacy policies and cookie notices might apply, and these Data Controllers might collect and process your Personal Data and provide it to other parties for reasons other than those set out in the Privacy Policy. We have no responsibility or liability for these independent policies or actions, and we are not responsible for the privacy practices or the content of such websites. Nonetheless, we seek to protect the integrity of our website and the links placed upon it and therefore we request feedback on not only our own website, but for websites we link to as well (including if a specific link does not work). We haveshow the following third partie son our website:

My Shoe Hospital: If you wish to have your shoes repaired, we offer you to use My Shoe Hospital. These services are operated by Travis County Shoe Hospital, Inc.

Affirm: When you check-out your shopping cart we provide you the option to pay via Affirm. This consumer financing service is offered and operated by Affirm, Inc.

We use automated decision-making tools or processes in order to prevent misuse of our website and to prevent fraud when you purchase via our website. This may lead to a refusal of the transaction. Should you not agree with this refusal, please contact our customer service department.

This site is not intended for the use of children under the age of 16. Cole Haan does not knowingly collect Personally Identifiable Information from any children under 16 years of age. If you learn that a child has provided us with Personal Data, then you may contact us as indicated above.

If you at any time choose to no longer receive mailings from us and wish to opt-out from any future mailings, you can unsubscribe via the link at the bottom of the e-mail. Alternatively, you can change your email marketing preferences in your Colehaan.com account if you are registered. In our stores and via our customer service department you can opt out for e-mail, phone contact and direct mail. It will take up to 24 hours make an opt out effective. We will remain using your e-mail address for other purposes for which we are not relying on your consent, for example, where we need it in order to fulfil an order.

International Transfers

Cole Haan is based in the United States and all of the data we collect is processed in the United States. Note that, by providing your Personal Data to us, you acknowledge that your data will be processed outside the EEA. Most of the third parties with whom we share Personal Data of European residents on are based outside the EEA. The countries where your data may be transferred to are set out below:

Should we transfer your data out of the EEA, we will ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We may transfer your Personal Data to countries that have been deemed to provide an adequate level of protection for Personal Data by the European Commission. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries.
• Where we use certain service providers, we may use specific contracts approved by the European Commission which give Personal Data the same protection it has in Europe. For further details, see European Commission: Model contracts for the transfer of personal data to third countries.
• Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to Personal Data shared between Europe and the US. For further details, see European Commission: EU-US Privacy Shield.

Please contact us if you want further information on the specific mechanism used by us when transferring Your Data out of the EEA.

Cookies

We use CookieBot in order to get your approval for using cookies and to help you manage the acceptance and non-acceptance of Cookies. Consents you have given via CookieBot can be withdrawn again via CookieBot. You can find more information on how we use cookies on the Cookie Declaration page. You can also withdraw your consent on this page.

What are your rights and how can you exercise them

Under Articles 15 to 22 of the GDPR, data subjects are entitled to exercise certain rights in relation to the Personal Data that Cole Haan holds about them (known as a “Data Subject Request” or “DSR”).

Under the GDPR and applicable data protection laws in the EU/EEA countries, you have the rights listed and explained below, subject to certain limitations in individual cases. We need to confirm your identity before we can handle your requests. When we refuse your request for legal reasons, we will tell you why.

For all inquiries concerning your privacy and Personal Data, please submit a request at this link: GDPR Request. We will verify the EU resident’s identity before complying with any such request. We will require you to provide certain information about you and/or your account with us and you will have to declare that are who you claim to be.

1. Get a copy of your Personal Data
   
   You have the right to obtain a copy of your Personal Data, if it does not have negative effect on other people.


2. Access to information about your Personal Data
   
   You have the right to know whether or not we use your Personal Data, as well as the following information: a) why we have your Personal Data; b) what categories of data we have; c) what we do with your Personal Data; d) who has access to your Personal Data (and where they are); e) where your Personal Data might be transferred to; f) how long we are keeping your Personal Data; g) if you didn’t provide your Personal Data directly to us, how did we get them; h) your rights under applicable laws and the possibility to restrict processing; and i) if we use your Personal Data for any automated decision-making; and j) in some cases, you have the right to know how our automated decision-making works, if the decision significantly affects you.


3. Make sure your Personal Data are correct
   
   You have the right to make sure we are using accurate details about you.


4. Delete your Personal Data
   
   You have the right to ask us to delete your Personal Data.


5. Restrict how we use your Personal Data
   
   You have the right to ask us to stop doing certain things to your Personal Data when: a) you don’t think we are using the right Personal Data; b) you don't want us to delete your Personal Data, but you also don't think we are complying with the law; c) you want to make a legal complaint against us, but we want to delete the data; or d) you challenge our explanation of our use based on a "legitimate interest". When you successfully restrict how we use your Personal Data, we will only use your Personal Data with your consent, or unless it is required by law.


6. Obtain a portable file so you can share it with another company
   
   You have the right to obtain a portable file that contains the Personal Data you provided to us where the legal basis is either consent or the performance of contract and the processing is carried out by automated means.


7. Withdraw your consent
   
   When we use your Personal Data based on your consent, you have the right to change your mind and withdraw your consent at any time.


8. Object when we process your Personal Data based on “Legitimate Interest”
   
   When we process your Personal Data based on “Legitimate Interest” as specified in this Privacy Notice, you may have the right to disagree and stop us from processing your Personal Data for this purpose. We may have compelling reasons, though, to continue processing your Personal Data even in the light of your objection. In such cases we will provide you with our rationale. We will respect and implement your objection in any case where it is related to direct marketing purposes.


9. Challenge the decision generated by our automated decision-making process
   
   When we use automated decision-making tools or processes that lead to an outcome which produces a legal or other significant effect, you may have the right to understand the logic involved, the significance and possible consequences of this process. You may also have the right to request human intervention, especially when this is used to conclude a contract with us. You can challenge our decision by expressing your opinion.


10. File a complaint with your local data protection supervisory authority
    
    If you are not happy with how we have handled your Personal Data, or how we have responded to your rights provided here, you have the right to make a complaint against us with your local data protection supervisory authority in the country where you live, work or where the infringement took place.

Cole Haan International B.V.
Herengracht 576
1017 CJ Amsterdam
privacy@colehaan.com

California law requires certain businesses to disclose information regarding the rights of California residents pursuant to the California Consumer Privacy Act (the “CCPA). All terms used in this section have the same meaning as defined in Cal. Civ. Code Section 1798.140 and do not have not any other meaning as may be prescribed elsewhere in this privacy policy.

California resident may request that we disclose to them the following information covering the preceding 12 months:

1. The categories of personal information we have collected about them;
2. The categories of sources from which the personal information was collected;
3. The business or commercial purpose for collecting or selling personal information;
4. The categories of third parties with which we share personal information;
5. The categories of personal information about them that we have sold and the categories of third parties to which the personal information was sold;
6. The categories of personal information about them that we disclosed for a business purpose and the categories of third parties to which the personal information was disclosed;
7. The specific pieces of personal information we have collected about them.

A California resident may request the disclosure of the information listed above by calling 1-800-695-8945 or submitting a request at this link on colehaan.com – CCPA Request. Such a request may be referred to as a right to know request. Pursuant to California law, we will verify the California resident’s identity before complying with any such request. In case of an online request we will require you to provide certain information about you and/or your account with us and you will have to declare that are who you claim to be. In case of a telephonic request we will require you to provide certain information about you and/or your account with us.

A California resident has the right to request that we delete any personal information about the California resident that we have collected from the California resident, and that we direct any service provider to delete the California resident’s personal information from its records. Such a request may be referred to as a request to delete. However, pursuant to the CCPA, a California resident’s information may not be deleted under certain circumstances, including where maintenance of their personal information is necessary to: complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, to provide a good or service that they requested or that is reasonably anticipated within the context of their ongoing business relationship with us, or to otherwise perform a contract between us and them; to detect security incidents, protect against or prosecute fraudulent or illegal activity; to enable solely internal uses that are reasonably aligned with their expectations based on their relationship with us; to comply with a legal obligation; or to otherwise use their information internally in a lawful manner that is compatible with the context in which they provided the information. For more information about these and other situations in which we may not delete a California resident’s personal information, please see Cal. Civ. Code Section 1798.105(d). A California resident may request the deletion of information collected from the California resident by calling 1-800-695-8945 or submitting a request at this link on colehaan.com – CCPA Request. Before deleting a California resident’s personal information, we will verify their identity, as required by the CCPA. In case of an online request we will require you to provide certain information about you and/or your account with us and you will have to declare that are who you claim to be. In case of a telephonic request we will require you to provide certain information about you and/or your account with us.

A California resident may use an authorized agent to submit a right to know request or a request to delete. To use an authorized agent, the California resident must provide the agent with written authorization. In addition, the California resident may be required to verify their own identity with us. We may deny a request from an agent that does not submit proof that they have been authorized by the California resident to act on their behalf. Such requirements, however, will not apply where a California resident has provided the agent with power of attorney pursuant to Cal. Prob. Code section 4000 to 4465.

California residents have the right to direct us to not sell their personal information CCPA Request.

We will not discriminate against a California resident because the California resident exercised any of their rights under the CCPA, including, but not limited to, by:

1. Denying goods or services to the California resident;
2. Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
3. Providing a different level or quality of goods or services to the California resident;
4. Suggesting that the California resident will receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may charge a California resident a different price or rate or provide a different level or quality of goods or services, if that difference is reasonably related to the value provided to us by that resident’s data. In addition, we may offer financial incentives, including payments to California residents as compensation, for the collection of personal information, the sale of personal information, or the deletion of personal information. We may also offer a different price, rate, level, or quality of goods or services to the California resident if that price or difference is directly related to the value provided to us by that resident’s data. We will notify California residents of such financial incentives. We will enter a California resident into a financial incentive program only if the California resident gives us prior opt in consent which clearly describes the material terms of the financial incentive program, and which may be revoked by the California resident at any time. We will not use financial incentive practices that are unjust, unreasonable, coercive, or usurious in nature.

In the preceding 12 months, we have collected the following categories of personal information about California residents from the following sources and for the following purposes. The CCPA requires that we reference specific categories of personal information enumerated in the CCPA. We may collect only certain pieces of personal information described in a given category and may not collect certain pieces of personal information described in each category.

Category of Personal Information Collected	Category of Source of Collection	Business or Commercial Purpose of Collection
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, or other similar identifiers.	Our customers, users of our website, registered users (members), joint marketing partners, social network information, data intelligence companies, data brokers, as well as other third parties to whom our customers have given their Personal Data.	To fulfill or meet the reason you provided the information. For example, if you provide your personal information to purchase a product or service, we will use that information to process your payment and facilitate delivery. We may also save your information to facilitate new product orders or process returns. To provide, support, personalize, and develop our website, products, and services. To create, maintain, customize, and secure your account/membership with us. To process your requests, purchases, transactions, and payments and prevent transactional fraud. To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses. To personalize your website experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our websites, third-party sites, and via email or text message (with your consent, where required by law). To help maintain the safety, security, and integrity of our Websites, products and services, databases and other technology assets, and business. For testing, research, analysis, and product development, including to develop and improve our websites, products, and services. To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations. As described to you when collecting your personal information or as otherwise set forth in the CCPA.
Categories of personal information described in subdivision (e) of Cal. Civ. Code Section 1798.80.	Our customers, users of our website, registered users, joint marketing partners, social network information, data intelligence companies, data brokers, as well as other third parties to whom our customers have given their Personal Data.	Same as above
Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies	Our customers, users of our website, registered users, joint marketing partners, social network information, data intelligence companies, data brokers, as well as other third parties to whom our customers have given their Personal Data.	To personalize your website experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our websites, third-party sites, and via email or text message (with your consent, where required by law).
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an internet website, application, or advertisement	Our customers, users of our website, registered users, joint marketing partners, social network information, data intelligence companies, data brokers, as well as other third parties to whom our customers have given their Personal Data.	To personalize your website experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our websites, third-party sites, and via email or text message (with your consent, where required by law). To help maintain the safety, security, and integrity of our Websites, products and services, databases and other technology assets, and business. For testing, research, analysis, and product development, including to develop and improve our websites, products, and services.
Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	Our customers, users of our website, registered users, joint marketing partners, social network information, data intelligence companies, data brokers, as well as other third parties to whom our customers have given their Personal Data.	To personalize your website experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our websites, third-party sites, and via email or text message (with your consent, where required by law). To help maintain the safety, security, and integrity of our Websites, products and services, databases and other technology assets, and business. For testing, research, analysis, and product development, including to develop and improve our websites, products, and services.

In the preceding 12 months, we have disclosed for a business purpose the following categories of personal information about California residents to the following categories of third parties (to the extent the disclosure was made to a third party).

Category of Personal Information Disclosed for a Business Purpose	Category of Third Party to Which Personal Information Disclosed, To The Extent Disclosed To a Third Party
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, , or other similar identifiers.	IT Providers, Logistical Providers, Marketing Providers, Analytical Providers, Payment Providers, Fraud Detecting Companies, Social Media.
Categories of personal information described in subdivision (e) of Cal. Civ. Code Section 1798.80.	IT Providers, Logistical Providers, Marketing Providers, Analytical Providers, Payment Providers, Fraud Detecting Companies, Social Media.
Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies	IT Providers, Marketing Providers, Analytical Providers, Fraud Detecting Companies. Social Media.
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an internet website, application, or advertisement	IT Providers, Marketing Providers, Analytical Providers, Fraud Detecting Companies, Social Media.
Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	IT Providers, Marketing Providers, Analytical Providers, Fraud Detecting Companies, Social Media.

If you have any queries regarding this Privacy Policy or complaints about our use of Your Data, please contact us at privacy@colehaan.com or at the address or phone number below and we will do our best to deal with your complaint or query as soon as possible.

Mail:

Cole Haan LLC
Attn: Data Protection Officer
150 Ocean Road
Greenland, NH 03840

Phone: 1-800-695-8945

Within the US we sometimes send direct mail by post when we have your address. When we don’t have your address you still may receive mail from us. In those cases, we have used a third company, who will have your address and who will only use that address if they are allowed to do so. We will not receive any Personal Data from such third parties. If you no longer wish to receive mail from us, please contact our customer services department.

Our website does not comply with Federal Do-Not-Track legislation because we do not believe it accurately reflects the desires of our users.