Industries
- Consumer Goods
- Jewelry
- Retail Trade
- Direct Selling
- Retail Trade
- eCommerce Industry
Participation
UK Extension to the EU-U.S. Data Privacy Framework Framework: Active
EU-U.S. Data Privacy Framework Framework: Active
Swiss-U.S. Data Privacy Framework Framework: Active
Purpose of Data Collection
Tiffany and Company (“Tiffany”) collects personal data about consumers located in the EU, UK and Switzerland in various ways, such as when consumers provide it at Tiffany’s stores, on Tiffany’s websites, through Tiffany’s apps and social media channels, at Tiffany’s events, through surveys, via text messages or on the telephone. The types of relevant consumer personal data Tiffany collects are described in Tiffany's Privacy Shield Privacy Policy. Tiffany may use this information to (1) provide products and services; (2) process payments; (3) create and manage consumers’ accounts; (4) send promotional materials and other communications; (5) communicate with consumers about, and administer consumers’ participation in, special events, contests, sweepstakes, programs, offers, surveys and market research; (6) respond to inquiries; (7) operate, evaluate and improve Tiffany’s business (including developing new products and services; enhancing and improving Tiffany’s services; managing Tiffany’s communications; analyzing Tiffany’s products and customer base; performing data analytics; and performing accounting, auditing and other internal functions); (8) reduce credit risk and manage collections; (9) verify consumers’ identity; (10) protect against, identify and prevent fraud and other unlawful activity, claims and other liabilities; and (11) comply with and enforce applicable legal requirements, relevant industry standards, contractual obligations and Tiffany’s policies. Tiffany also collects personal data about employees and the employees of its affiliates, located in the EU, UK and Switzerland to carry out and support human resources functions and activities. The types of relevant employee personal data Tiffany collects in connection with these activities includes (1) name, home address, telephone number, emergency contact information, and other information that may be necessary for identification, security and contingency planning purposes; (2) age, gender, government or other national identification number, bank account number, dependent information, spousal or partner information, health information, and other information that may be necessary for the administration of payroll, health insurance, benefits, or the corporate credit card program; (3) information about severe allergies and other medical conditions that may require the company to make safety accommodations; (4) information about education, training, work experience, employment history, performance evaluations, references and background reports to establish, maintain or terminate the employment relationship; (5) purchase and sales history; and (6) other information that may be necessary for legitimate business purposes or as required by applicable legal requirements. Tiffany may disclose the relevant personal data to recipients such as (1) the company’s affiliates and subsidiaries, (2) third-party controllers and (3) third-party processors the company has retained to perform services on its behalf and pursuant to its instructions. Tiffany also may disclose the relevant personal data if it is required to do so by law or legal process or in response to lawful requests from public authorities, including to meet national security, public interest or law enforcement requirements.
Privacy Policy
HR Data
The Tiffany and Company EU/Swiss-U.S. Data Privacy Framework Employee Privacy Policy describes how the company implements the Data Privacy Framework Principles for relevant employee personal data. The Policy is available to employees on the company’s Intranet.
Non-HR Data
The Tiffany and Company: EU/Swiss-U.S. Data Privacy Framework Privacy Policy - Consumer Data describes how the company implements the Data Privacy Framework Principles with respect to the personal data of individuals who are covered by the company’s Data Privacy Framework certification.
Verification Method
Self-Assessment
Dispute Resolution
Questions or Complaints?
If you have a question or complaint regarding the covered data, please contact Tiffany and Company at:
Data Protection Officer
New York, New York 10010-3302
Privacy Shield organizations must respond within 45 days of receiving a complaint.
If you have not received a timely or satisfactory response from Tiffany and Company to your question or complaint, please contact the independent recourse mechanism listed below
NON-HR RECOURSE MECHANISM
Appropriate statutory body with jurisdiction to investigate any claims against Tiffany and Company regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission