Kohl's is a publicly traded (NYSE: KSS) Wisconsin-incorporated department-store chain operating stores plus a companion shopping app and Kohl's Rewards/Kohl's Card loyalty programs. Its own privacy policy discloses collecting protected-classification data (age, sex, gender, race, marital status) and generating a biometric voiceprint from recorded customer-service calls, plus tracking browsing/search history and on-site actions such as clicks and keystrokes through third-party software. Kohl's California notice states it has 'sold' and 'shared' personal information with data analytics providers, ad-tech vendors, ad networks and ISPs, and its policy separately discloses third parties receiving data 'for marketing purposes' may resell or reuse it, including for interest-based advertising. Corporate ownership is traceable through routine SEC 10-K filings naming Kohl's, Inc. as a Delaware subsidiary of the Wisconsin parent. No specific breach, FTC action, or lawsuit outcome was found in this research; Kohl's own 10-K states it has not identified any prior cybersecurity incidents that materially affected the company.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
8 ON FILE
COLLECTION
Apple's App Store privacy label for the Kohl's app discloses that data including Purchase History, Precise Location, Physical Address, Email Address, Name, and Phone Number is collected and linked to the user's identity, including for the developer's own advertising and marketing.
Kohl's privacy policy discloses that it collects 'protected classifications' data including age, sex, gender, race, and marital status, categories that go beyond what completing a retail purchase requires.
Kohl's Corporation's SEC Form 10-K cover page identifies the company as incorporated in Wisconsin, with a listed IRS Employer Identification Number, filed as part of its mandatory annual regulatory disclosures.
Kohl's California notice at collection discloses that in the prior 12 months it has 'sold' and 'shared' personal information for marketing purposes with business partners and third parties including data analytics providers, ad-tech vendors, ad networks, and ISPs; the policy separately discloses that third parties receiving data 'for marketing purposes' may further disclose it to others and use it for their own or third-party marketing, including interest-based advertising.
Kohl's Corporation's SEC Form 10-K states that the company has not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected the company; no specific breach, FTC action, or court judgment against Kohl's was found in this research.
Apple's App Store privacy label for the Kohl's app discloses that Purchases, Location, Contact Info, Identifiers, Usage Data, and Diagnostics data may be used to track users across apps and websites owned by other companies.
Kohl's privacy policy discloses collecting 'internet or other electronic network activity information' through the use of third-party software, including granular on-site actions such as clicks, mouse movements, and keystrokes during interactions with its Platforms.