Privacy Policy
Kohl’s Frozen Custard (“we”, “our”, or “us”) is committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, process, disclose, and safeguard your personal data when you visit our website, kohls-frozencustard.com, interact with our services, make purchases, or otherwise engage with our business. We adhere strictly to the principles of privacy-by-design and data minimization, and we act in accordance with applicable data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Scope of This Privacy Policy and Data Controller Responsibility
This Privacy Policy applies to all personal data collected through our website, kohls-frozencustard.com. We are the data controller responsible for your personal data collected via this website, and you can contact us using the details provided in section 13 of this policy.
Our obligations include determining the purposes and means of processing your personal data, ensuring the security of your information, and respecting your rights under applicable laws.
2. Categories of Personal Data We Process
We may collect and process the following categories of personal data:
a) Usage Data
This includes information about how you use our website—such as IP address, browser type and version, pages visited, time spent on pages, and diagnostic data relating to website crashes and errors.
b) Account Data
If you create an account or provide information to us, we may collect your name, email address, mailing address, telephone number, and other identifiers necessary to manage your profile or orders.
c) Profile Data
We may collect insights into your preferences, order history, feedback, product interests, and interaction history with our services.
d) Communication Data
When you contact us—via online forms, email, or customer service—we collect your messages, requests, correspondence logs, and any information you choose to include.
e) Technical Data
Includes details such as device type, operating system, screen resolution, system configurations, login data, and geolocation (if enabled on your device or browser).
f) Transaction Data
We collect details necessary to process orders and payments, including payment method (e.g., last four digits of credit card), billing address, and shipping address.
g) Preference Data
We track choices you make regarding email marketing preferences, promotional offers, and other notifications.
3. Legal Bases for Data Processing
In accordance with GDPR, our processing of your personal data relies on the following legal bases:
– Performance of a Contract: To provide you with goods or services you have requested or purchased.
– Consent: For activities such as marketing communications, cookie usage (non-essential), and certain types of analytics.
– Legitimate Interest: For business operations, site performance, fraud prevention, and user experience improvements.
– Legal Obligation: To comply with laws such as consumer protection or tax regulations.
Under CCPA, your data may also be collected and used as described based on your informed consent or as permitted under regulatory guidelines.
4. Your Privacy Rights
If you are a resident of the European Economic Area (EEA), the United Kingdom (UK), California, or other jurisdictions with robust privacy protections, you may have the following rights:
– Right to Access: Request a copy of the personal data we hold about you.
– Right to Rectification: Request correction of inaccurate or outdated data.
– Right to Erasure: Request the deletion of your data under certain circumstances.
– Right to Restriction of Processing: Request limiting how your data is used.
– Right to Data Portability: Request that your data be provided in a structured, commonly-used, machine-readable format.
– Right to Object: Object to the processing based on legitimate interest or direct marketing.
– California-specific Rights: Right to know what personal information is collected, sold, shared, or disclosed; right to opt out of sale; and the right to non-discrimination for exercising rights.
To exercise any of these rights, please contact us at [email protected].
5. Security Measures
We implement a range of security measures to safeguard your personal information, including:
– SSL/TLS encryption for data transmission.
– Access control measures to restrict data access to authorized personnel only.
– Regular system and security audits.
– Secure backup protocols.
– Staff training in data protection principles.
While we strive to protect your data, no Internet transmission is completely secure. We encourage you to act cautiously and protect your password and account details accordingly.
6. International Data Transfers
Where your personal data is transferred outside your resident jurisdiction, such as from the EEA to the United States, we utilize appropriate protective mechanisms including Standard Contractual Clauses approved by the European Commission. We ensure that recipients of such data provide adequate safeguards as required by law.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Retention periods are as follows:
– Usage and Technical Data: up to 18 months.
– Account, Transaction, and Profile Data: 6 years from last user interaction (for legal and tax purposes).
– Communication and Preference Data: 3 years from last contact or account activity.
– Cookie-related data: as specified in our cookie policy (see below).
We will securely delete or anonymize your information once it is no longer required or upon verified request.
8. Cookies and Tracking Technologies
We use cookies and similar technologies on kohls-frozencustard.com for various purposes:
– Essential Cookies: Required for proper website operation and secure logins.
– Functional Cookies: Enable personalized content and settings.
– Analytics Cookies: Collect anonymous insights into web traffic and usage behavior.
– Performance Cookies: Help us monitor system performance and detect issues.
Analytics and performance data may be collected through third-party providers (e.g., Google Analytics), in line with privacy standards.
9. Cookie Management and Consent
When you visit kohls-frozencustard.com, you are presented with a cookie consent banner. You can adjust your preferences at any time through the cookie settings panel on our site. Under GDPR and CCPA, we offer you the right to opt out of non-essential cookies and data sales (if applicable). Your cookie preferences are stored for future visits unless cleared.
10. Children’s Privacy
Our website and services are not directed toward children under the age of 13, and we do not knowingly collect personal data from minors. If we learn that we have collected information from a child under 13 without verified parental consent, we will promptly delete such information in compliance with applicable law.
11. Changes to This Privacy Policy
We reserve the right to make changes or updates to this Privacy Policy at any time. Substantial updates will be communicated through appropriate notices on kohls-frozencustard.com or through direct contact, if we have your contact details. We encourage you to review this Policy periodically to remain informed.
12. How to Contact Us
If you have questions or concerns regarding this Privacy Policy or wish to exercise your legal data rights, please contact us at:
Email: [email protected]
Website: https://kohls-frozencustard.com
We are committed to responding to privacy-related inquiries promptly and take our obligation to protect your personal data seriously.
13. Closing Statement
Kohl’s Frozen Custard is fully committed to compliance with applicable privacy laws and regulations, including the GDPR and CCPA. If you have any concerns about how we collect or use your data, please reach out to us at [email protected]. We will make every effort to address your concerns in a timely and respectful manner.