Industries

  • Consumer Goods
  • Jewelry
  • Retail Trade
  • Direct Selling
  • Retail Trade
  • eCommerce Industry

Participation

UK Extension to the EU-U.S. Data Privacy Framework Framework: Active

Original Certification Date: 8/31/2023
Next Certification Due Date: 7/13/2024
Data Collected: HR, NON-HR

EU-U.S. Data Privacy Framework Framework: Active

Original Certification Date: 10/20/2016
Next Certification Due Date: 7/13/2024
Data Collected: HR, NON-HR

Swiss-U.S. Data Privacy Framework Framework: Active

Original Certification Date: 10/29/2018
Next Certification Due Date: 7/13/2024
Data Collected: HR, NON-HR

Purpose of Data Collection

Tiffany and Company (“Tiffany”) collects personal data about consumers located in the EU, UK and Switzerland in various ways, such as when consumers provide it at Tiffany’s stores, on Tiffany’s websites, through Tiffany’s apps and social media channels, at Tiffany’s events, through surveys, via text messages or on the telephone. The types of relevant consumer personal data Tiffany collects are described in Tiffany's Privacy Shield Privacy Policy. Tiffany may use this information to (1) provide products and services; (2) process payments; (3) create and manage consumers’ accounts; (4) send promotional materials and other communications; (5) communicate with consumers about, and administer consumers’ participation in, special events, contests, sweepstakes, programs, offers, surveys and market research; (6) respond to inquiries; (7) operate, evaluate and improve Tiffany’s business (including developing new products and services; enhancing and improving Tiffany’s services; managing Tiffany’s communications; analyzing Tiffany’s products and customer base; performing data analytics; and performing accounting, auditing and other internal functions); (8) reduce credit risk and manage collections; (9) verify consumers’ identity; (10) protect against, identify and prevent fraud and other unlawful activity, claims and other liabilities; and (11) comply with and enforce applicable legal requirements, relevant industry standards, contractual obligations and Tiffany’s policies. Tiffany also collects personal data about employees and the employees of its affiliates, located in the EU, UK and Switzerland to carry out and support human resources functions and activities. The types of relevant employee personal data Tiffany collects in connection with these activities includes (1) name, home address, telephone number, emergency contact information, and other information that may be necessary for identification, security and contingency planning purposes; (2) age, gender, government or other national identification number, bank account number, dependent information, spousal or partner information, health information, and other information that may be necessary for the administration of payroll, health insurance, benefits, or the corporate credit card program; (3) information about severe allergies and other medical conditions that may require the company to make safety accommodations; (4) information about education, training, work experience, employment history, performance evaluations, references and background reports to establish, maintain or terminate the employment relationship; (5) purchase and sales history; and (6) other information that may be necessary for legitimate business purposes or as required by applicable legal requirements. Tiffany may disclose the relevant personal data to recipients such as (1) the company’s affiliates and subsidiaries, (2) third-party controllers and (3) third-party processors the company has retained to perform services on its behalf and pursuant to its instructions. Tiffany also may disclose the relevant personal data if it is required to do so by law or legal process or in response to lawful requests from public authorities, including to meet national security, public interest or law enforcement requirements.

Privacy Policy

HR Data

Tiffany and Company EU/Swiss-U.S. DPF Employee Privacy Policy
Description:

The Tiffany and Company EU/Swiss-U.S. Data Privacy Framework Employee Privacy Policy describes how the company implements the Data Privacy Framework Principles for relevant employee personal data. The Policy is available to employees on the company’s Intranet.

Effective Date: 9/20/2016

Non-HR Data

Description:

The Tiffany and Company: EU/Swiss-U.S. Data Privacy Framework Privacy Policy - Consumer Data describes how the company implements the Data Privacy Framework Principles with respect to the personal data of individuals who are covered by the company’s Data Privacy Framework certification.

Effective Date: 7/25/2019

Verification Method

Self-Assessment

Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact Tiffany and Company at:

Pedram Tabibi
Data Protection Officer
Tiffany and Company
200 5TH Ave
New York, New York 10010-3302

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from Tiffany and Company to your question or complaint, please contact the independent recourse mechanism listed below


NON-HR RECOURSE MECHANISM



Appropriate statutory body with jurisdiction to investigate any claims against Tiffany and Company regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission