Dillard's Privacy Notice

This Privacy Notice ("Notice") applies to personal data Dillard's Inc. and its affiliates (collectively, "Dillard's," "we," "us," or "our") collects. This Notice also covers rights and choices related to your personal data.

This Privacy Policy does not apply to your use of a Dillard's Credit Card (as defined below) other than when you use the card to purchase from Dillard's. Thus, a separate Privacy Notice administered by Citibank, pertains to information collected by Citibank when you use your private label Dillard's Credit Card or co-branded Dillard's Mastercard® issued by Citibank N.A. ("Citibank"). The private label Dillard's Credit Card and co-branded Dillard's Mastercard® issued by Citibank, are collectively referred to herein as "Dillard's Credit Card." The privacy policies of other entities may also apply when you use your Dillard's Credit Card on a website or at a store owned or operated by another entity. However, when you use your Dillard's Credit Card on our website, at a Dillard's retail store, or during a customer service call, this Privacy Policy fully applies to any information Dillard's collects from you.

Additionally, when using our website you may submit product reviews. We currently use a company called PowerReviews for product reviews. Your submission of reviews is governed by a separate privacy policy maintained by PowerReviews. A link to that policy is provided on the screen from which you submit your review, but you can also review it at powerreviews.com.

Data We Collect

We collect data about you in different ways. For example, we collect data:

Directly from you. This includes when you use our website, mobile application, interact with our retail stores, make an account, sign up to get our emails, buy from us, or contact us.
Automatically. This includes through cookies, server logs, and other tools on our website or apps.
From other sources. These can include our affiliates, vendors, social media, publicly available sources, and other companies.

The following are a few examples of our collection and use of data:

Swipeable table

Context	Types of Personal data	Primary Purpose
Account Registration	We collect your name and contact information when you make an account. We also collect data on the actions that you perform while logged in.	We have a business interest in providing account related functionalities to users. Accounts can offer easy checkout, saved preferences, and purchase history.
Client Information	We collect the name and contact information of our clients and their employees with whom we may interact.	We have a business interest in contacting our clients and communicating with them about business activities such as projects, services, and billing.
Your Use of Our Website	We use technology (e.g., a cookie or a pixel) to learn how you engage with our websites. This may include which links you click or what you type into our online forms. We may also track your IP address, the website that referred you to us, and data about your device.	We have a business interest in making our website operate. We also use it to understand how you interact with our websites, gather analytics, improve our websites, and learn your preferences. We may also use this data to help detect and prevent fraud. Where required by law, we base the use of technologies upon consent.
Technology on Our Website for Targeted Advertising	We may let third parties place tracking technology on our websites (e.g., a cookie or a pixel). The third party might also collect data over time and across other websites. Among other things, they may use this data to serve ads tailored to your interests, which may include ads about our products or services.	Where required by law, we base the use of third-party tracking technologies upon consent. Users should see our Cookie Preference Center for more information.
Geolocation	When you use our website, we collect your location from your web browser. This lets us determine your location and your distance from one of our retail stores.	We have a business interest in understanding our users and providing tailored services. In some contexts, our use is also based upon your consent to share geolocation data with us.
Email Interactions	If you receive email from us, we use tools to capture when you open our message, click on links or banners in it, or make purchases after receiving an email.	We have a business interest in understanding how you engage with our messages.
Feedback/Support	If you provide feedback or contact us for support, we collect your name and email, as well as other content that you share to reply.	We have a business interest in receiving and acting upon feedback.
Mailing List	When you sign up for our mailing lists, we collect your email address.	We have a business interest in sharing information about our products and services. Where required by law we will ask for your consent before communicating with you.
Mobile Devices	We collect information your device broadcasts when you visit our website, mobile application, or one of our stores.	We have a business interest in identifying unique visitors and understanding how users engage with us on their mobile device.
Order Placement	We collect your name, billing, shipping, and email addresses, phone number, and credit or debit card information when you place an order.	We use your information to perform our contract to provide products or services.
Partner Promotion	We collect data that you provide as part of co-branded promotions with other companies.	We have a business interest in fulfilling our promotions.
Surveys	We collect data you share through surveys. If a survey is offered by a third-party service provider, the third party's privacy notice applies to the collection, use, and disclosure of your data.	We have a business interest in understanding your opinions.
Sweepstakes or contests	When you enter a sweepstakes or contest, we collect data about you such as your contact information.	We have a business interest in operating the sweepstakes. In some contexts, we are also required by law to collect information about those that enter.

How We Use Data

We also use data to:

Identify you when you visit our websites or stores.
Complete transactions, streamline checkouts, and administer returns.
Verify your identity.
Administer sweepstakes and contents.
Conduct analytics.
Improve or create services and products.
Connect with you (e.g., servicing your account and addressing your requests, inquiries, issues, or feedback).
Market our products or services or the products and services of our business partners.
Find and prevent malicious, deceptive, fraudulent, or illegal activity (e.g., activities that might harm the rights, property, or safety of our company, users, employees, or others).
Enforce our policies and agreements.
Find and prevent security incidents.
Debug, find, and fix errors that impair our website and services.
Comply with legal or regulatory obligations.
Establish or exercise our rights and defend against legal claims.
Serve administrative purposes and manage our relationships.
For other reasons with your consent.

To the extent we store and use deidentified personal data, we will not try to reidentify the information, except to test our deidentification methods.

How We Share Data

In addition to the specific situations discussed elsewhere in this Notice we may share personal data in the following situations:

Affiliates and Acquisitions. We may share data with other members of the Dillard's corporate family (e.g., parent company, sister companies, affiliates, subsidiary, or other companies under common control). If a company acquires or enters negotiations to acquire, our company, business, or assets, we may share data with that company.
Other Disclosures without Your Consent. We may share data to cooperate with law enforcement, participate in a legal process, or for legal compliance. We may share your data to establish or exercise our rights, to defend against legal claims, to investigate, prevent, or act on possible illegal activities, threats to safety of person or property, or a violation of our policies. Your data may be shared to ship products to or provide services by a third-party agent.
Public. Some of our websites may allow for comments or reviews in a public forum. If you post on these pages, what you share may be publicly available. For instance, some of our websites allow you to create gift registries. We share the information that you provide about your event (e.g., name, date, location, etc.) with the public to permit others to search for that information. We may also share your information with third party wedding and gift registry sites. Among other things, this gives your guests additional means to find your registry and coordinate gifts.
Co-Branded Promotions. We may offer contests, sweepstakes, or other promotions with third party partners. If you enter one that is sponsored by a third-party partner, the information that you give will be shared with us and them. Their use of your data is not governed by this Notice.
Service Providers. We may share your data with service providers. Service providers may help us to run our website, conduct surveys, provide technical support, process payments, fulfill orders, and more.
Professional Services. We may share personal data with our professional service providers, such as auditors or lawyers.
Other Disclosures with Your Consent. We may share your data with third parties when you consent or direct us to.

All of the categories in the Data We Collect section exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.

Some jurisdictions require us to disclose whether the following categories of personal data are collected, shared with third parties for a “business purpose,” or “sold,” or transferred for “valuable consideration.” The table below indicates the categories of personal data we collect and transfer in a variety of contexts. We do not “sell” your personal data for money.

Swipeable table

Category of Personal Data That We Collect	Categories of Third Parties to Whom We Disclose Personal Information for Business Purpose	Categories of Third Parties to Whom We Disclose Personal Information for Targeted Advertising
Identifiers - this may include real name, alias, postal address, unique personal identifier, online identifier, email address, account name, or other similar identifiers.	Third-parties that help administer, manage, and analyze our programs and services, such as customer service and survey administrators Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads; website/email optimization providers; marketing communications providers (e.g., email, SMS, post); and data analytics providers. If you receive email from us, we use certain tools to capture data related to when you open our message, click on any links or banners it contains, or make purchases. Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention Third parties necessary to complete transactions and provide our products/services, including order management and fulfillment providers, deliver company, agents, and manufacturers Third parties who provide us with information technology services, such as internet service providers, operating systems and platforms, data centers/hosts/cloud service providers Third parties who assist with information technology and security programs Third parties who assist with fraud prevention, detection, and mitigation Government entities, law enforcement, lawyers, auditors, consultants, and other parties as required by law, including litigation.	Advertising networks Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads; website/email optimization providers; marketing communications providers (e.g., email, SMS, post); and data analytics providers If you receive email from us, we use certain tools to capture data related to when you open our message, click on any links or banners it contains, or make purchases.
Government Issued Identification - this may include social security number, driver's license number, or state issued identification number, passport number.	Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention Third parties who assist with information technology and security programs Third parties who assist with fraud prevention, detection, and mitigation Government entities, law enforcement, lawyers, auditors, consultants, and other parties as required by law, including litigation	None.
Financial Information - this may include bank account number, credit card number, debit card number, and other financial information.	Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention Third parties who assist with fraud prevention, detection, and mitigation	None.
Commercial information - this may include information about products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	Third-parties that help administer, manage, and analyze our programs and services, such as customer service and survey administrators Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads; website/email optimization providers; marketing communications providers (e.g., email, SMS, post); and data analytics providers. If you receive email from us, we use certain tools to capture data related to when you open our message, click on any links or banners it contains, or make purchases. Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention Third parties necessary to complete transactions and provide our products/services, including order management and fulfillment providers, deliver company, agents, and manufacturers	Advertising networks Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads; website/email optimization providers; marketing communications providers (e.g., email, SMS, post); and data analytics providers
Internet or other electronic network activity information - this may include browsing history, search history, and information regarding an individual's interaction with an internet website, app, or ad.	Third-parties that help administer, manage, and analyze our programs and services, such as customer service and survey administrators Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads; website/email optimization providers; marketing communications providers (e.g., email, SMS, post); and data analytics providers Third parties who provide us with information technology services, such as internet service providers, operating systems and platforms, data centers/hosts/cloud service providers Third parties who assist with information technology and security programs	Advertising networks Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads; website/email optimization providers; marketing communications providers (e.g., email, SMS, post); and data analytics providers
Geolocation data - this refers to non-precise geolocation information such as your city, state, or neighborhood.	Third-parties that help administer, manage, and analyze our programs and services, such as customer service and survey administrators Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads; website/email optimization providers; marketing communications providers (e.g., email, SMS, post); and data analytics providers Third parties necessary to complete transactions and provide our products/services, including order management and fulfillment providers, deliver company, agents, and manufacturers	Advertising networks Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads; website/email optimization providers; marketing communications providers (e.g., email, SMS, post); and data analytics providers
Audio, electronic, visual, thermal, olfactory, or similar information	Third-parties that help administer, manage and analyze our programs and services, such as customer service, providers, loyalty program administrators, and survey administrators Third parties who provide us with information technology services, such as internet service providers, operating systems and platforms, data centers/hosts/cloud service providers Third parties who assist with information technology and security programs Third parties who assist with fraud prevention, detection, and mitigation Government entities, law enforcement, lawyers, auditors, consultants, and other parties as required by law, including litigation	None.
Professional or employment-related information - this includes, for example, information submitted by job applicants.	Government entities, law enforcement, lawyers, auditors, consultants, and other parties as required by law, including litigation	None.
Additional categories of personal data described in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) - this may include signature, physical characteristics, or description, insurance policy number.	Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention Third parties necessary to complete transactions and provide our products/services, including order management and fulfillment providers, deliver company, agents, and manufacturers Third parties who assist with fraud prevention, detection, and mitigation	None.

Your Choices

Some jurisdictions give you a right to make the following choices about your personal data:

Access. You may request access to your personal data or confirmation that we have data about you. In certain limited cases, you may ask to receive access to your data in a portable, machine-readable form.
List of Third-Party Recipients. In some jurisdictions, you may have the right to obtain a list of specific third parties to which we have disclosed personal information. For a list of the specific third parties to whom we have disclosed personal information, please navigate to the “Cookie Settings” link available on our homepage and then click “Third Party” and “View Vendor Details.” Please note, some jurisdictions also allow you to obtain a list of the categories of third parties to which we have disclosed personal information. You can find that information in the table above under the “How We Share Data” section.
Change. Our website allows you to change your account profile. If our website does not permit you to update or correct certain information, you can reach us as described below to request a change to your information. You may ask us to correct inaccurate or incomplete data. Note that we may keep historical data in our backup files as permitted by law.
Deletion. You may ask us to delete your personal data. If required by law, we will grant such a request, but note that in many cases, we must keep your personal data to comply with legal obligations, resolve disputes, enforce agreements, or for other business purposes.
Opt-out of Targeted Advertising. You may opt-out of online tracking based targeted advertising (e.g., cookies) by clicking the cookie settings link or on our homepage.
Objection to or Restriction of Certain Processing. In certain circumstances, you may object to the processing of your personal data or ask that we restrict processing of your personal data. To do so, follow the instructions below.
Online Tracking. We do not recognize the “Do Not Track” signal.
Promotional Emails. You may choose to provide us with your email address to allow us to send newsletters, surveys, offers, or other promotional content , as well as targeted offers from third parties. You can provide a different email address where you want to receive promotional emails or choose to stop receiving promotional emails by clicking the link here. You can also stop receiving such emails by following the unsubscribe instructions at the bottom of those emails. If you "opt out" of receiving promotional emails from us, the only emails you will receive will be (a) about transactions that you initiate (such as to confirm orders you submit, inform you about your order status, respond to your customer service inquiries and answer any other questions you send us); (b) about matters affecting your Personal Information; and (c) in connection with certain services or promotions for which you have registered, such as our gift registry program.
Promotional Text Messages. If you get a text message from us that has promotional content, you can opt-out of future text messages by replying “STOP,” "STOPALL," "END," "UNSUBSCRIBE," "CANCEL," OR "QUIT."

Not all the rights above are absolute, and they do not apply in all circumstances. We may limit or deny some requests because the law permits or requires us to. We will not discriminate against individuals who exercise their privacy rights under applicable law.

Submitting Requests

You may exercise the above rights through our online portal. If you believe we have mistakenly denied your request, or if you would prefer not to provide us with government-issued identification and would like an alternative authentication process, please contact us by email at dillards.privacy@dillards.com, or call us at 1-855-774-3455 with the subject line “appeal request denial.”

As required by law, we will require you to prove your identity. Before granting a request, we will verify your identity by asking for information such as your name, the last item you purchased from us, the date of your last purchase from us, or a copy of a government-issued identification. We may also verify that you are a resident of a state that confers upon you one of the rights referenced above. If using a Driver's License, please cover or otherwise obscure the Driver's License Number before uploading or sending. We may also ask you to provide a signed declaration confirming your identity. Following a request, we will use reasonable efforts to supply, correct or delete personal data about you in our files.

In some circumstances, you may designate an authorized agent to exercise certain privacy rights on your behalf. If you are an authorized agent submitting a request on behalf of an individual, you must attach a copy of a completed Authorized Agent Designation Form which shows that you may act on another's behalf.

How We Protect and Retain Data

No method of internet transmission or electronic storage is fully secure. While we use reasonable efforts to protect your personal data, we cannot guarantee its security. If we are required to inform you about a security incident, we will do so electronically, in writing, or by phone, as the law permits.

Some of our websites permit you to make a password protected account. You are responsible for selecting a unique and complex password and keeping it confidential. You are responsible for any access to or use of your account by someone who has obtained your password, whether or not you approved of such access or use. Notify us of unauthorized use of your password or account immediately.

We keep your personal data for only as long as necessary to fulfil the purposes in this Notice unless a longer retention period is required or permitted by law. This includes the purposes of satisfying legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the data. We also weigh the potential risk of harm from unauthorized use or disclosure of the data, the purposes for which we obtained the data and whether we can meet those purposes through other means, as well as applicable legal requirements.

Third-Party Applications/Websites

We may provide links to websites and other third-party content or services that we do not own or operate. We have no control over the privacy practices of websites or services we do not own. For details about such third parties’ privacy practices, see their privacy notices.

Changes To This Privacy Notice

We may change our Notice and privacy practices. New notices will be published on our website. If changes are material, the Notice that was in place when you submitted personal data to us will generally govern that data unless you consent to the new Notice. Our Notice shows “effective” and “last updated” dates below. The effective date is the date the current version took effect. The last updated date is the date the current version was last substantively changed.

Children

We do not knowingly request or collect personal information from any person under 13 years of age through our websites without prior verifiable parental consent. If we become aware that an individual is under the age of 13 and has submitted any information to us through our website for any purpose without prior verifiable parental consent, we will delete his or her information from our files. Although we permit users to post reviews concerning our products, we do not encourage users to include their full name when posting reviews. If you are under 18, have included your name in a review, and would like Dillard's to remove your name, you can contact us at the email address, telephone number, or mailing address below with your request. Please note that even when we remove your name, the removal may not remove the remainder of your post or remove your name from all copies of the post. We do not sell the personal information of any minor under the age of 18.

Contact Information

If you have questions, comments, or complaints on our privacy practices, or if you need to access this Notice in a different form due to a disability, please contact us. We will try to address your requests and provide you with additional privacy-related information.

Mail:
Dillard's Inc.
Attn: Privacy Department
1600 Cantrell Road
Little Rock, AR 72201

Phone:
1-855-774-3455

Email:
dillards.privacy@dillards.com

Additional Information For California Residents

California law requires us to disclose the following information on our privacy practices. If you are a California resident, the following disclosures apply to you in addition to the rest of the Notice.

California Sensitive Information Disclosure. We collect the following categories of sensitive personal information (as defined under California law): Social security, driver’s license, state identification card, or passport number, Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account. This information is collected in order to process payments, complete transactions you request, for authentication, security, and fraud prevention; and where it is required by law, and to determine candidates' eligibility for employment. process transactions, comply with laws, manage our business, or provide you with services. Note that we do not use such information for any purposes that are not identified within the California Privacy Rights Act Section 1798.121. We do not “sell” or “share” sensitive personal information for purposes of cross-context behavioral advertising.

Effective Date: December 31, 2024
Last Update: December 26, 2024