it cannot discuss personnel matters out of concern for employee privacy
Privacy of individual employees and company-wide policy are two entirely different things. If you're too embarassed to defend a company policy in public, then that's a good sign that there's something wrong with it.
"Smart dress" would have been enough of a dress code. The idea that short skirt and heels should be worn because it will turn male customers into drooling cavemen who'll then buy anything is very outdated in my opinion, and I find it a bit cringeworthy. Detailed knowledge of what you're selling is much more important for technology.