Privacy Policy

Tory Burch respects your privacy and your right to control your personal data. This privacy policy covers information collected through our websites, mobile applications, and connected products and services, in our stores, at events, and through customer service channels. It explains what personal data we collect, why we collect it, how we use it, when we share it, and the choices available to you.

We are Tory Burch LLC and Coöperatie Tory Burch U.A., together with our affiliated companies operating the TORY BURCH and TORY SPORT brands. For users in the United States, Tory Burch LLC, located at 11 West 19th Street, 7th Floor, New York, NY 10011, is responsible for your information.

We and our vendors may collect personal data such as your name, billing and shipping address, telephone number, email address, date of birth, purchase information, and preference information. You may provide this data when you make a purchase online or in a store, create an account, participate in a survey, sweepstakes, or promotion, contact customer care by phone, email, or chat, post a comment on our websites, or sign up for promotional emails, texts, and other communications. If you join a promotion co-marketed with an unaffiliated business partner, we may share the information you provide with that partner, whose own policies will govern its use. Information you voluntarily disclose in public or private forums can be collected and used by others, so please share personal data there with caution. If you connect through social networking accounts, we may collect data you have provided to those services, such as your email address, profile picture, and friend list, with your consent, to enhance and personalize our services. You can adjust your social media privacy settings if you prefer not to share this information.

We and our vendors use cookies, which are files stored on your device containing information about your internet usage, to collect details about your browser, IP address, operating system, and browser type for system administration. Cookies help us estimate usage patterns, store your preferences, customize the websites to your interests, speed up searches, and recognize you on return visits. You may refuse cookies through your browser settings, though our system may still issue cookies unless you adjust those settings, and our websites do not respond to do not track signals because no consensus standard exists. We also use pixel tags and similar tracking technologies, tiny graphic images that help us analyze customer online behavior and measure the effectiveness of our websites and advertising. These may collect information about the pages you view, features you use, links you click, your device IP address, browser type, operating system, date and time, and the site you visited before ours. We engage analytics services such as Google Analytics to understand how visitors use our websites, and session replay tools such as Contentsquare to better understand user experience; Contentsquare is contractually forbidden to sell data collected on our behalf. Our website uses cookies to track items in your shopping cart, including abandoned carts, to determine when to send cart reminder messages by SMS. We will not share your SMS opt-in with any third party for unrelated purposes, but may share your personal data, including opt-in or consent status, with parties that help us provide messaging services, such as platform providers, mobile carriers, and other service providers involved in text message delivery.

We use collected information to process transactions, send communications about products, services, promotions, offers, news, and events, serve advertising and offers based on your interests and online activities, improve our stores, websites, events, shopping experience, and service quality, determine customer traffic patterns in stores, prevent and detect fraud and abuse, process information or claims about store incidents, enable service providers to perform activities on our behalf, respond to requests for information or services, communicate about website changes, comply with legal obligations, policies, and procedures, and for internal administrative and analytics purposes. If you have provided personal data through more than one method, such as in store and online, we may combine it for these purposes.

We will not sell your personal data to any third party for monetary consideration. We may disclose it to companies that help us bring you products and services, including providers that manage customer databases, distribute emails and other marketing materials or advertisements, operate stores in certain jurisdictions, provide data storage and analytics, prevent fraud, provide customer service, and offer other services that assist us. These vendors must keep information confidential and use it consistently with this policy. We may share aggregate or non-identifying data for industry analysis. In a corporate reorganization, asset transfer, or change of control, your personal data may be transferred, but use remains subject to this policy. We may disclose personal data when legally required, to cooperate with legal proceedings, law enforcement, court orders, laws, regulations, or other legal obligations, to assist investigations, to protect and defend our rights and property or the rights or safety of third parties, to enforce our terms of use, this policy, or agreements with third parties, for crime prevention, or to protect against misuse or unauthorized use of our websites. We may also provide personal information to the Tory Burch Foundation and our licensees, which will use it only in accordance with their privacy policies.

Our websites may link to third party sites with different privacy practices; if you provide personal data to them, their policies govern, and we encourage you to read them carefully. To be removed from our marketing list, email us or click the unsubscribe button at the bottom of any email we send. If you have set up an account, you can also adjust subscription settings in the email preferences section. Please allow at least ten business days from receipt of your request to complete removal, as some promotions may already be in process.

Your personal data may be stored, transferred, and processed in the United States and other countries by our affiliates and service providers, where data protection laws may offer a lower standard than your country of residence. We take care to protect your data and use adequate mechanisms for international transfers, complying with applicable data protection laws and implementing suitable safeguards to ensure adequate security by any third party accessing your information. By using our websites and providing personal data, you acknowledge this policy and the collection, use, maintenance, transfer, and processing of your data in the United States or other countries.

Tory Burch uses commercially reasonable measures to keep your personal data private and safe, including physical, electronic, and administrative steps such as limiting physical access to servers and using electronic security systems and password protections against unauthorized access. Our customer care center and stores operate over private, secure networks. We use commercially reasonable security technology when transferring information to process orders, and payment card transactions should take place in protected areas of our websites designed to reduce risk of loss, misuse, or alteration. When checkout begins, you should move into such a protected area, where the page address changes from http to https and a key or closed lock appears in the lower corner of your screen; remain in this secure zone throughout checkout and check that you are still there when entering payment card details. Despite our best efforts, internet transmission cannot be guaranteed to be completely secure, and while we use commercially reasonable means, we cannot guarantee interception by third parties will not occur. We may prosecute unauthorized or fraudulent transactions to the fullest extent permitted by law.

Our websites are not intended for children. We do not intentionally collect personal data from children under eighteen and will dispose of any such information if we become aware it was provided.

This policy describes how we process personal information of residents of California, Virginia, Colorado, Connecticut, Utah, Iowa, Indiana, Tennessee, Texas, Montana, Oregon, Delaware, New Hampshire, New Jersey, Kentucky, Nebraska, and Minnesota, which have enacted comprehensive privacy laws. It supplements the other sections of this policy and does not cover information outside the scope of those laws or data collected from employees, applicants, and contractors. We collect personal information directly from you, your device or browser, our service providers and suppliers, and our corporate affiliates. In the past twelve months, we collected and disclosed to service providers, affiliates, licensees, and third parties performing services on our behalf categories including identifiers and non-public personal information such as full name, contact details, credit or debit card, customer records, device identifier, and IP address; personal information described in California Civil Code section 1798.80(e); commercial information such as records of products purchased or considered; inferences and customer profiles such as preferences, buying behaviors, and demographic information; internet activity information such as browsing and search history and interactions with our website and ads; geolocation data such as approximate location inferred from IP address or interaction with geotargeted ads; audio and visual information such as recorded customer service calls and chats and store security camera footage; legally protected characteristics such as age, date of birth, gender, and marital status; and sensitive personal information such as account log-in credentials, financial account or card numbers with security codes, and precise geolocation for fraud prevention only. These categories are used to process and fulfill orders, communicate with you, understand your needs and preferences, personalize services, administer promotions, improve products and services, address problems, and protect the security and integrity of our website, stores, and business.

We do not use or disclose sensitive personal information for purposes subject to the right to limit under applicable state privacy laws. We may also use and disclose personal information as reasonably necessary to comply with law and legal requirements, cooperate with law enforcement, respond to court orders or governmental regulations, maintain records for internal administration, protect rights and interests, resolve disputes, enforce policies, or prevent harm. Personal information may be provided to professional advisors such as accountants, auditors, consultants, and lawyers when reasonably necessary, and may be given to another company in a sale, merger, or acquisition of some or all of our assets or business, or as part of negotiating or evaluating such a transaction.

Residents of applicable states have rights to submit requests about their personal information. To exercise these rights, email us or call us. We will ask consumers to independently confirm any agency relationship. Requests are subject to an identification verification process requiring at least two unique data points depending on the request type, and we will not fulfill a request unless sufficient information is provided to reasonably verify you are the consumer about whom we collected personal information. We typically do not charge a fee to respond fully, but may charge a reasonable fee or refuse to act if a request is excessive, repetitive, unfounded, or overly burdensome.

California residents have the right to know about their personal information and obtain a transportable copy, with requests made no more than twice in twelve months. A right to know request may cover the categories of personal information collected, the sources, our business or commercial purposes for collecting, selling, or sharing it, the categories of third parties to which we disclosed it, the categories sold or shared and the third parties to which each category was sold or shared, the categories disclosed for a business purpose and the persons to which it was disclosed, and the specific pieces collected. You may request correction of inaccurate personal information, and upon a verifiable request we will use commercially reasonable efforts to correct it as you direct. You may request deletion of personal information we collected directly from you and currently maintain, though we may have a legal basis to retain it. You have the right to opt out of the selling or sharing of personal information via tracking technologies such as cookies by using the do not sell or share link in the website footer, setting cookie preferences on all browsers and devices you use, and resetting preferences if you clear cookies. Using an opt-out browser signal such as the Global Privacy Control will opt you out of cookie-based sales and shares on our website, and you must enable the signal for each browser you use. To opt out of other types of sales and sharing, use the webform accessible through the footer link. We do not use or disclose sensitive personal information to infer characteristics or for other purposes subject to limitation under California law, so there is no need to direct us to limit its use and disclosure; we use or disclose it only as reasonably necessary to provide goods and services, ensure security and integrity, prevent fraud or illegal activity, perform services on behalf of the business, or verify or maintain the quality or safety of a service controlled by us or improve, upgrade, or enhance such services. If you exercise privacy rights under the California Consumer Privacy Act, you have the right not to receive discriminatory treatment. You may also exercise more limited control by opting out of marketing emails through the unsubscribe link or by emailing us.

From time to time we offer discounts and promotions that provide benefits to participants. Participation requires providing some personal information such as identifiers like email addresses, phone numbers, or zip codes. The full terms of each program are set forth where the opportunity to sign up is offered. We have made a good faith estimate that the value of consumers personal information provided in connection with our programs is related to the relevant expenses associated with collecting and retaining that information. By joining our programs, you consent to any associated financial incentive, and you may withdraw at any time by discontinuing the program in the manner provided. Unless you specifically request otherwise, submitting a request to delete your personal information will not erase information required for you to continue participating in our programs. Should you wish to delete personal information associated with our programs and thereby cancel participation, please contact us. We may offer financial incentives for the collection, sale, retention, and use of personal information as permitted by law, and the material aspects of any incentive will be explained in its terms. Participation is entirely optional, requires affirmative opt-in, and you can opt out of each program prospectively by following the instructions in the applicable program description and terms. We may add or change incentive programs or their terms by posting notice on the program descriptions and terms, so check them regularly.

Separately from the California Consumer Privacy Act, the California Shine the Light law permits California customers to request certain details about how their personal information is shared with third parties as defined in that law, and in some cases affiliates, if personal information is shared for those third parties or affiliates own direct marketing purposes. We share personal information with third parties or affiliates for those parties own direct marketing purposes. Californians may request information about our sharing by contacting us and including California Shine the Light Request in the subject line and body of the message. Shine the Light rights and California Consumer Privacy Act rights are granted by different laws and must be exercised separately.

Under Nevada law, Nevada residents may opt out of the sale of certain covered information collected by website or online service operators. We currently do not sell covered information as sale is defined by that law.

We may process personal data for targeted advertising as defined in applicable state privacy laws, and some of our disclosures constitute a sale as defined in those laws. Residents of applicable states, subject to conditions and restrictions in their state law, have the right to access and obtain a transportable copy of personal data we hold, the right to correct inaccuracies, the right to delete personal data collected from or obtained about them, the right to opt out of targeted advertising via cookies and tracking technologies by adjusting cookie preferences through the footer link, the right to opt out of sales of personal data, the right to request the identity of third parties receiving personal data, and the right to appeal our decision on a privacy rights request by emailing us. We do not engage in automated processing or profiling in a manner subject to opt out under applicable state privacy laws, so those rights do not apply to the personal data we process. Under applicable state privacy laws you may exercise your privacy rights twice in twelve months by emailing us. We use artificial intelligence tools, including large language models, in our business operations, but do not collect, use, or sell your personal data for the purpose of training large language models.

For the European Economic Area and the United Kingdom, the controllers of your personal data are Tory Burch LLC, at 11 West 19th Street, 7th Floor, New York, NY 10011, USA, and Coöperatie Tory Burch U.A., at Barbara Strozzilaan 101-201, 1083 HN Amsterdam, the Netherlands. We process personal data only where we have a legal basis, including to comply with legal and regulatory obligations, for performance of our contract with you or to take steps at your request before entering a contract, for our legitimate interests or those of a third party, or where you have given consent to a specific use. We process data to deliver services and process transactions as necessary for the contract between us; to send electronic communications where you have consented, and for other communications based on our legitimate interest in informing you about products, services, promotions, offers, news, and events, which we consider proportionate and not prejudicial or detrimental to you; to serve advertising and offers based on your interests and online activities where you have consented; to improve our offerings and understand customer traffic at our stores based on legitimate interest; to process information or claims about store incidents to comply with legal obligations and protect the public interest; to enable service providers to perform activities on our behalf as necessary for the contract and based on legitimate interest; to notify you of website changes and provide information and services you request as necessary for the contract; to administer our websites including troubleshooting, data analysis, testing, research, statistical and survey purposes, improve presentation, and keep our websites safe and secure and prevent fraud and abuse based on legitimate interest in continually monitoring and improving our services and experience and ensuring network security; to comply with legal obligations, policies, and procedures to comply with legal obligations and protect the public interest; and for internal administrative and analytics purposes based on legitimate interest, which we consider proportionate and not prejudicial or detrimental to you.

We share personal data with and among Tory Burch entities, including Tory Burch LLC and Coöperatie Tory Burch U.A., which involves transferring data outside the European Economic Area and the United Kingdom. Some external third party service providers are also based outside those areas, and their processing involves transfers outside, including to the United States. Where personal data is transferred to and stored in a country not determined by the European Commission or the Information Commissioner s Office as providing adequate protection, we take steps to provide appropriate safeguards, including entering into standard contractual clauses approved by the European Commission or an international data transfer addendum approved by the Information Commissioner s Office, obliging recipients to protect your personal data.

Tory Burch retains personal data only as long as necessary for the purposes it was retained, such as enabling you to use the websites and your products or providing services to you. In some instances we may retain data longer to comply with applicable laws including document retention requirements, resolve disputes, and otherwise as necessary to conduct our business. All retained personal data is subject to this policy and our internal retention guidelines.

Data subjects have the right of access to personal data, including confirmation of whether we process it and access to the data and related information; the right to correction as permitted by law; the right to erasure as permitted by law; the right to restriction of processing under limited circumstances; the right to data portability, receiving personal data you provided in a structured, commonly used, machine-readable format and transmitting it to another controller, including directly where technically feasible; and the right to object to processing as permitted by law under limited circumstances. To exercise these rights, contact us as described in this policy. These rights are not absolute and we may refuse requests wholly or partly where exceptions under applicable law apply.

Tory Burch may amend this privacy policy from time to time. If we change it, we will post the updated policy on this page with an updated date. Under certain circumstances, such as material adverse changes, we may also notify you through additional means, such as posting a notice on the home page of our websites or contacting you by email. If you have questions about privacy or security on our website, contact us by email. If your country of residence is the United States, you may also contact Tory Burch LLC, Attn: Sr. Director, Information Security and Data Privacy, 11 West 19th Street, 7th Floor, New York, NY 10011, USA. If your country of residence is in Europe, you may also contact Coöperatie Tory Burch U.A., Barbara Strozzilaan 101-201, 1083 HN Amsterdam, the Netherlands.