Summary Privacy Notice & Notice at Collection

Our detailed Privacy Notice describes the types of personal information We collect from You directly, from Your interactions with Us (on Our websites, mobile apps, and digital tools (collectively, “Sites”) and advertising), and from third parties; how We use it; how We protect it; and Your rights as Our consumer.

Looking for a different Notice?

Live in Washington or Nevada? See Our Consumer Health Data Notice, which applies to personal information defined as ‘consumer health data’.
Using a virtual try-on tool? Please see Our Virtual Try-On Information Notice. Before You activate any other beauty tool that analyzes a photograph of Your face for analysis, We will show You a notice. That notice will explain the tool’s purpose, how long We keep the photo (and any facial geometry derived from the photograph), and We will request Your consent.
Applying for a job with Us? See Our L’Oréal Careers website.
A business contact of Ours? See Our Business Customer Privacy Notice.
Live outside the United States? Please visit Your local L’Oréal brand site.

Our contact details are available at the end of the detailed Privacy Notice in the “How to Contact Us” section.

What Types of Personal Information Do We Collect and for What Purposes?

We collect the following categories of personal information. Please see our “Data Glossary” of the detailed Privacy Notice for more information about each category.

Categories of Personal Information	Examples
Identifiers	NamePostal AddressTelephone numberMobile numberOnline identifiers (e.g., Cookie IDs/MAC address)Internet Protocol addressE-mail addressAccount name/usernameSocial handle or moniker Device identifiers
Internet or similar network activity	Browsing historyAccount login information Search historyInformation on Your interaction with a website, application, or advertisement and related information Smart device and sensor data
Payment Information	Credit or debit card informationInformation to process payments and prevent fraud
Legally Protected Characteristics	Characteristics of protected classes or groups under state or federal law. For example: Age (40 and over) Race, ethnicity, national originSex, gender identity, gender expressionMarital status
Purchasing Information	Products or services purchased, obtained, or consideredOther purchasing or consuming histories or tendencies (e.g., beauty routines, beauty concerns) Loyalty activity and redemptionAccount information Customer service records Health and safety-related information User-generated content (e.g., product testimonials, ratings and reviews, etc.)
Geolocation Data	Geolocation data includes information such as the following: General location information showing the general physical location of you or your device (e.g., IP address or zip code that provides a general location of the device used) Precise information about your location if you allow us (or a third party who provides it to us) to collect it (like GPS coordinates)
Audio Visual Information
Professional or employment-related personal information	Career/professionProfessional credentials (e.g., professional license)
Other Information Considered Personal Information* *Some information in this category is addressed in other categories as well.	NameContact details such as telephone number and addressAgeSignature (including electronic signature)Physical characteristics or descriptionsPayment informationAddressDriver’s license or state ID numberEducationEmploymentMedical/health information (including, as applicable, personal information defined as ‘consumer health data’ by the Washington State My Health My Data Act and Nevada SB 370).Facial geometry if you use beauty tools
Inferences drawn from any of these personal information categories	Inferences: conclusions We draw from personal information, sometimes using AI (Ours or a third party’s). For example: Beauty and related preferencesCharacteristicsBehaviors on and off SitePurchase patternsDemographicsHousehold information

How we collect and use this information within the L’Oréal family of Brands is summarized below:

We fulfil Your requests for products or services, manage Your orders, and process payments.	We administer and manage Your account or loyalty program membership.
We send You marketing communications, which We may tailor to Your ‘beauty profile’ based on what personal information we know about You and Your preferences.	We provide tailored and personalized content, services, advertisements and offers, including based on Your beauty characteristics and preferences. This includes processing personal information using automated means to generate personalized outputs, such as product recommendations.
We post Your content and reviews on the Sites, our social media pages, and related-third party sites that retail or feature Our brands and products.	We manage any competitions, promotions, surveys, sweepstakes, giveaways, or contests You choose to enter.
We manage, improve, and develop Our business. This includes improving and developing products and services; enhancing Our data modeling and analytics to provide better results to You and other users of Our products and services; and conducting research about Our products, services, and Our customers. This includes to train and improve our AI tools.	We verify Your identity and detect and prevent fraud, and to maintain the security of Our products, Sites, and systems.
To communicate with You, answer questions and also interact with You, and create better experiences	Provide You with requested services or to complete transactions You requested.
To collect, evaluate, and monitor reports of undesirable events during or after use of Our products	Support Our everyday operations, including to meet risk, legal, and compliance requirements
To enforce Our terms, and to protect Our rights, property, and safety, or the rights, property, and safety of others	For corporate governance, including mergers, acquisitions, and sale of a business unit, and to also follow applicable laws

We use artificial intelligence. Our Sites and services, including chatbots, product recommendation engines, and photo analysis features, use artificial intelligence (AI) to process personal information about You and provide You with personalized results. Some of this AI technology is built by Us, while other AI technology is provided by third-party companies. AI helps Us:

Recommend or suggest products suited to You.
Answer Your customer service questions faster.
Personalize ads and content.
Analyze photos (like virtual try-on) to analyze features like skin tone, face shape, or show how products look on You.

A more detailed description of the information We collect and how We use this information (including through use of AI) is available in the “How We Collect and Use Personal Information” section of the detailed Privacy Notice.

When Do We Share Personal Information?

We do not ‘sell’ (as ‘sell’ is traditionally defined) personal information about Our consumers (e.g., name, phone number, email address, other personal information) to third parties in exchange for money. However, like most companies, We do share personal information with third-party advertising and social media networks. They use it to show You ads for products You might like. Various state privacy laws (such as those in California, Texas, Colorado, etc.), legally treat this kind of information sharing as (1) a ‘sale’, (2) a ‘share’ or ‘use’ of personal information for targeted advertising, or (3) both, even though no money changes hands. You may have the right to opt-out of this use. Specific information on these activities is available in the “About Our Advertising” section of the detailed Privacy Notice.

To exercise the right of opt-out where available in Your area You may use one or more of the following ways:

Offline Settings: Scroll to the bottom of Our Site and click the “Your Privacy Choices” link to submit a request about offline (non-browsing) personal information.
Online Settings: Click the “Online Preferences” link in the Site’s footer and change the settings about online (browsing) personal information.
Automatic Browsing Signals: Global Privacy Control (GPC) is a browser or extension setting. When enabled it tells websites You do not want personal information about You sold or used for targeted ads. We recognize GPC as valid requests to opt-out of the sale/sharing of personal information and targeted advertising in the U.S. states that require this (e.g., California, Texas, Colorado, etc.). Here is how it works:

If You did not log in or a log in is not available: We will opt You out for only that specific browser.
If You did log in (where available): We will also apply this choice to the offline beauty profile the Brand maintains about You.

We share personal information with third parties (vendors, agencies, and businesses) that help Us run Our Sites, Our business, and retail Our products to further L’Oréal’s beauty mission. When you interact with a Brand, we share or make available personal information about You with other Brands. Other members of the L’Oréal Group may access personal information about You when they perform services on behalf of L’Oréal USA and, unless prohibited under applicable law, for use on their own behalf for the purposes described in this Notice. We disclose information to Our service providers, to complete a transaction requested by You, when required by law or authorities, and in case of a sale or reorganization of Our company. Some of Our virtual beauty tools run on Microsoft’s AI technology. When You use these tools, what You type or upload (and the AI’s response) may be stored (up to 30 days) to check for misuse. Microsoft may review this information by a real person for safety purposes. More information is available about how We share personal information about You in the “How We Share Personal Information” section of Our detailed Privacy Notice.

How Long Do We Retain Personal Information?

For marketing purposes, if You do not engage with a Brand for five (5) years, We will delete or de-identify/anonymize the Brand’s beauty profile (unless we are legally required to keep it). We will otherwise retain personal information about You for so long as Your account is active, you engage with Us, as needed to provide You services, and as necessary to comply with Our legal and/or regulatory obligations, to resolve disputes, to manage Our rights, and to enforce Our agreements.

We do not control certain privacy settings and preferences supported by Our social media partners like Meta. If You wish to make changes to those settings and preferences, You may do so by visiting the settings page of the appropriate social media site.

Detailed Privacy Notice

How We Collect Personal Information

In General – What is a “Beauty Profile”

We collect personal information about You as this Notice describes. We keep this information in a ‘beauty profile’ organized by Brand. We combine personal information that We collect from one method (e.g., from a website, digital advertising engagement) with another method (e.g., an offline event)

We collect personal information from the following categories of sources.

Personal Information You Provide

We (directly or by third parties on Our behalf) collect personal information You provide to Us directly when You Interact with Us. For example:

Account creation and management.

We collect personal information when You create or manage Your account or loyalty program membership. When You sign up for an account or join a loyalty program You will need to provide certain information about Yourself, such as name and email address. You may provide other personal information.
You may also be able to register and log in to Our Sites or chat features using Your social media account, such as Facebook or Google. These platforms may ask Your permission to share certain information with Us (e.g., name, gender, profile picture) and all information is shared subject to their privacy policies. You can control the information that We receive by changing Your privacy settings offered by the relevant social media platform.

Newsletter and marketing subscriptions. We collect personal information when You subscribe to receive Our marketing communications.
Purchase and order management. We collect personal information when You buy products or services from Us, whether on Our Sites, in one of Our retail locations, or otherwise. This includes payment details to complete a purchase.
On Our social media platforms. We collect personal information You publicly post on social media platforms or when You mention Us on social media platforms.
Promotions. We collect personal information during Your participation in a competition, game, contest, sweepstakes, promotional offer, sample request, or response to a survey.
User Generated Content. When You submit content (such as images or rating and reviews on one of Our Sites or You agree to allow Us to re-use content You posted on social media). We may ask You to take part in a survey or general research. If You choose to take part, You may provide personal information in connection with Your response.
Use of Our Sites and Services. When You provide personal information while using Our Sites, such as completing forms or using services on Our Sites.

Chat Features: If You use a chat feature on Our Sites, We (and Our chat software provider) collect personal information You share during the interaction, interactions with Our chat tool, and transcripts of the chat conversation.
Camera-Based Features: You may use other features of Our Sites that may ask You to grant permission to access the camera or other features of Your computer or mobile device. For example, live consultations.
Virtual Try-On & Beauty Tools: If You use one of Our virtual try on or other online beauty tools, We collect, capture, and process the picture You provide. We also create data from the photo You provide (including the automated recognition of various facial landmarks/facial geometry that might qualify as biometric data, biometric information, or a biometric identifier under various laws).

Cookies and Other Technologies: Our Sites, applications, email messages, and advertisements may use cookies and other technologies such as pixel tags, web server logs, server-side tracking, and web beacons. We deploy these technologies to help:

You navigate Our Site and use its features.
The Site remember information You enter so You do not have to re-enter it.
To track and understand how You use and interact with Our Sites and communications (e.g., figure out whether You opened and interacted with an email).
To tailor the Sites and Our advertising around Your preferences and site activity.
To measure the effectiveness of Our advertising.
To manage and measure the usability of the Sites.
To understand the effectiveness of Our content.
To enhance the Sites and Our beauty offerings.
To protect the security and integrity of Our Sites.

If you add something to Your shopping cart but do not check out, We use cookies to notice this and may send You cart reminders (including messages via text message/SMS).

Mobile Services/Apps and Devices: We (directly or by third parties on Our behalf) use technologies that collect information from Your phone when You use Our mobile apps or Our ‘smart’ devices in Your home. This information could include Your mobile phone or other device identifiers (including a mobile phone identifier (iOS IDFA and Android Advertising ID), Bluetooth ID, or other device identifier), information about Your phone or other device’s operating system, how You use the app or device, and Your physical location. Certain of Our mobile apps and tools offer opt–in, geo–location services and push notifications.

Geo-location services provide location–based content and services, such as store locators, local weather, promotional offers, and other personalized content.
Push notifications can include discounts, reminders or details about local events or promotions. Most mobile devices allow You to turn off location services or push notifications.

If You turn on location services, We (or a third party on Our behalf) may collect location information, including information about the Wi–fi routers closest to You and the cell IDs of the towers closest to You to provide location–based content and services. Additionally, most mobile devices will allow You to disable sharing or reset some device identifiers.

Our Wi-Fi routers capture certain data from mobile devices that interact with the router, including information about Your mobile device (such as a MAC Address, signal strength data, and location of device capturing the information).
Bluetooth beacons are small devices in Our stores that detect nearby phones with Bluetooth enabled. We may use the data collected from these in-store wireless services to provide operational insights such as foot traffic volumes and how customers move through Our stores.

Cameras/CCTV: We also use cameras in and around Our retail locations for operational and analytics purposes such as measuring traffic patterns. Cameras are also used for safety, fraud detection, theft and loss prevention, and security.
Affiliates. Since We are part of the larger L’Oréal family of companies, We receive or have access to personal information from other companies and Brands under common ownership with Us, as well as Our ultimate parent company L’Oréal S.A.
Other Users or Individuals who use Our Services. For example, We operate and manage refer-a-friend or similar programs, where We collect email addresses and other contact information about You if a person invites You or refers You.
Service Providers. Our service providers that perform services on Our behalf collect personal information and share personal information with us. For example, if You provide Us with permission to store payment information in Your account, We will receive a tokenized version of the credit card back from Our payment processor, and Your credit card issuer may provide Us with updated payment information in connection with the credit card issuer’s account update service.
Social Media; Authentication Services. You also can engage with Our brands, use chat or try-it-on features, applications, and log into Our Sites via social media platforms, such as Facebook (including Instagram) or Google. If You link, connect, or login to one of Our Sites with a third-party service (e.g., Facebook, Google), We collect personal information You share with Us, or that the social media platforms share with Us. When You engage with Our content on or through social media or other third-party platforms, plug-ins, integrations or applications, these platforms may ask Your permission to share certain information with Us (e.g., name, gender, profile picture, likes, interests, demographic information). Such information is shared with Us subject to the third-party platform’s privacy policy. You can control the information that We receive by changing Your privacy settings offered by the relevant social media platform.
Transactions You Have Requested. We receive personal information about You from third parties to complete a transaction You have requested. For example, if You checkout with PayPal We will receive information back from PayPal to complete the transaction.
Other Sources. We collect personal information from publicly available sources, third-party data providers, and business deals like mergers and acquisitions. For example, We validate postal address information using third party services or third parties provide Us with additional information about You.

These third-party sources can include

advertising networks and data analytics providers,
government entities,
social media networks and platforms,
payment processors,
data brokers,
companies that help Us detect fraud and safety issues, and
companies who have received Your permission to share personal information with L’Oréal or when a third party needs to share personal information with Us to complete a transaction You have requested.

This includes information received from third parties about individuals who share common interests or attributes (e.g., color treated hair, individuals who purchased products like products We sell) to create user “segments,” which help Us to better understand and market to Our current or prospective customers.

We may also receive information from other companies that collect or aggregate information, including from publicly available databases or publicly available sources (i.e., public social media posts), or companies that conduct market research. This might include de-identified or aggregated information about purchasing patterns, location of shoppers (e.g., foot traffic reports), and websites that are of interest to Our consumers.

Categories of information includes marketing and demographic data (including identifiers, commercial and purchasing information (i.e., products You bought or considered)), analytics information (including online information), internet or online information, demographics (e.g., including nationality, race, ethnicity), geolocation, and offline records, as well as inferences.

What Personal Information We Collect & Use

*Examples of Processing Activities*	*Examples of Personal Information Used The actual personal information We use depends on Your factual circumstances and interactions with Us See Our “Data Glossary” for definitions.*
	Identifiers:basic identifiersgovernment identifiersonline identifiersOther Personal Information contact datapreferences datapayment or other financial dataphysical characteristicshealth and medical datauser generated contentCommercial or Purchasing InformationCharacteristics of Protected Classes demographic databiometric dataInternet or Other Network Activity technical databrowsing dataAudio/Visual InformationGeolocation,Inferences
	Identifiers basic identifiersonline identifiersOther Personal Information:contact datapayment or other financial dataphysical characteristicshealth and medical data. user generated contentCommercial or Purchasing InformationAudio/Visual InformationGeolocationInternet or Other Network Activity technical data.browsing dataInferences
	Identifiers:basic identifiersonline identifiersOther Personal Information: contact datapreferences dataphysical characteristicshealth and medical informationuser generated contentCommercial or Purchasing InformationCharacteristics of Protected Classes demographicsbiometric dataInternet or Other Network Activity technical databrowsing dataAudio/Visual InformationGeolocationInferences
User Generated Content. We may offer You the ability to post content that others can read (directly or through a third-party service). We collect and use personal information to: Provide you with a forum for discussion. Use Our services. To ask questions. To use and post content You create and/or share with Us on Our Sites or in Our retail locations. For example, when you submit content on one of Our social media platforms or accept the re-use of content You posted on a social media platform by Us. Ratings and Reviews. We collect and use personal information to post Your rating/review or content on the Sites, Our social media pages, and related third party websites that retail or feature Our brand and products, and to communicate with You. For example, You may submit reviews and comment on or rate goods, products, and services on Our Sites. To submit this information, You need to provide other information, such as Your name, email address, mailing address or phone number, and other personal information. We (and Our third-party ratings & review provider) also use cookies (or similar technologies) to collect information to provide the service, enable the submission of user-generated content, and to analyze usage. We do add user generated content to the beauty profile We keep about You to better understand Your interests and preferences. *Please note, personal information You provide may be published on public-facing Sites or media and is accessible to others.* We do not have to publish any content You provide (in whole or in part).	Identifiers: basic identifiersonline identifiersOther Personal Information contact dataphysical characteristics or preferencesuser generated contentAudio/Visual InformationGeolocationInternet or Other Network Activitytechnical data,browsing dataInferences,
Financial Incentive Program Management. We process personal information to implement and manage Our financial incentive (e.g., coupons, samples), rewards, and/or loyalty programs. For example,Coupons: If you sign-up to receive a coupon and provide Your name and contact details, We or Our service provider will send a coupon to You. We or Our service provider will track how You interact with the coupon (viewed, printed, redeemed). Samples: If you sign-up to receive a sample and provide Your name and contact details, We or Our service provider will send the sample to You. We track Your contact information, what sample You requested, and any review or feedback You leave about it. We and Our third party vendors use and analyze personal information to identify and detect fraudulent requests (including online data and technical and browsing data). Loyalty: For loyalty programs, We or Our service provider use personal information to set up and verifying Your account, communicate with You about the program, track rewards/points You earn under the terms of the financial incentive program, and providing You with benefits associated with this program. We may offer unique rewards provided by third parties. We will help exchange loyalty points for products, promotional materials, and other items from such third parties. To do so, we will need to disclose personal information about You (such as basic identifiers, contact information, commercial or purchasing information) with third parties to complete Your request. Refer-a-Friend Program. Refer a friend programs enable individuals on Our Sites to create either a code or send a communication to a friend or family. If you refer a friend, we use personal information to process the request. We track things like Your contact information, the reward You’re offered, and whether your friend used Your referral. We and Our service provider also use cookies and other technologies to prevent fraud and measure how well the program is working.	Identifiers basic identifiersonline identifiersOther Personal Information contact dataCommercial or Purchasing InformationInternet or Other Network Activity technical databrowsing data
	Identifiers: basic identifiersonline identifiersOther Personal Information: contact datapreferences datauser generated contenthealth and medical dataDemographic informationInternet or Other Network Activity technical databrowsing dataAudio/Visual InformationCommercial or Purchasing Information,GeolocationInferences
	Identifiers:basic identifiersonline identifiersOther Personal Information contact datapreferences dataphysical characteristicshealth and medical datauser generated contentCommercial or Purchasing InformationCharacteristics of Protected Classes demographic databiometric dataInternet or Other Network Activity technical databrowsing dataAudio/Visual InformationGeolocationInferences

Information about Our Advertising (including Interest-Based Advertising):

We provide tailored and personalized content, services, advertisements and offers, including based on personal information We know about You as well as Your beauty characteristics and preferences. While the beauty profile with each brand is kept separately, We create groups of consumers with shared characters or interests (called audience segments) that pulls from all Brands, which We use to decide who sees which ads.

We take part in interest-based advertising as discussed in greater detail, below. We use third party companies to serve advertisements tailored to Your individual interests based on how You browse and shop online, as well as to provide advertising-related services such as measuring the performance and engagement with Our ads, as well as to provide analytics, preference, and interest information.

Use of Cookies

Companies like ad network providers, social platforms, and/or analytics providers place their own tracking technology (“Cookies”) on Our Site and on other non-L’Oréal Sites. They use these Cookies to capture information about Your device, use, and engagement online. They use information collected to build profiles of Your interests and understand Your habits to show You ads (for Our products or for products or services of other companies) on other sites or to other devices connected to You (cross-device advertising) based on preferences or interests known or inferred from the data collected through Cookies. They also use this information to limit the number of times You see an advertisement, measure the effectiveness of advertising, and improve their products and optimize their own ad targeting systems.

Additionally, We work with companies like Google and Meta to share some personal information (typically an email or phone number) You entered on the Site in a non-readable format called hashing. The third-party compares the hash to its own records to see if there is a match without Us directly exposing directly identifying details. If there is a match, We can use this information to optimize Our advertising campaign(s), choose whether or not to serve an advertisement to the matched individual on these platforms, conduct analytics (e.g., better inform where to place Our advertisements), and measure the effectiveness of Our advertising.

We (or Our ad partners) may also recognize Your information across different devices that You use or log in from (i.e., computers or mobile devices.). We (or a third party described above) may recognize that one Cookie or device ID (i.e., from a computer) may be connected to another device (i.e., smart phone) by the Cookie or device ID or log in. This may result in You searching for one of Our products on one device but seeing an ad later for that product on another device. Knowing what devices are being used by a person or household helps Us (or a third party from whom we buy advertising) limit the number of times You may see the same ad across different devices.

We use Google Analytics Advertising Features to help show You more relevant ads on other websites, based on how You use Our Site. These features allow Google Analytics to collect data for advertising purposes, including collecting data via marketing cookies and identifiers (including via third-party cookies such as Google advertising cookies). Specifically, we have enabled these Google features:

Remarketing with Google Analytics: Advertising based on Your behavior on Our Site. For example, if You viewed a product but did not buy it, You may later see an ad for that product elsewhere.
Google Display Network Impression Reporting: This enables tracking how and where Our ads appear across the Google advertising network.
Demographic and Interest Reporting: This enables the tracking of background and preferences of visitors to Our Site. It provides data on age, gender, and interest categories to help Us better understand our Site visitors.

We use Google Signals. If You are signed into Your Google account and have allowed it, Google connects Your activity on Our Site with other Google data (like location data, Your search or YouTube history, or data from sites that partner with Google) to help Us understand how You use Our Site across devices and to improve Our ad targeting.

We provide information about third parties that set Cookies on Our Site related to the above on Our Cookie Disclosure Page, which is current as of the date listed.

Beauty Profile (Offline) Information

We collect personal information about You as described in this Notice, and We centralize this personal information and analyze it to evaluate and attempt to figure out Your personal preferences, interests, or needs. When We send or display personalized communications or content, We use personal information in one or more beauty profiles a Brand or Brands maintain about You (e.g., internet and network browsing information, basic identifiers, online identifiers, contact data, preferences data, physical characteristics, health and medical information, demographic data, user generated content, geolocation, inferences, commercial/purchasing information) to send or display communications or other content We believe You would like to see. For example, based on information We collect We may conclude that You are interested in certain products and services We provide, and then We send or display communications or content tailored to those preferences, interests, or needs.

We work with third-party platforms, including social media platforms, to show you advertisements or measure the effectiveness of our advertisements on other websites or social media platforms (e.g., Google, Meta, Snapchat, Amazon, Pinterest, TikTok). We (by ourselves or with Our service providers) create audience segments, including through algorithmic recommendations using internal or third-party machine learning or artificial intelligence models.

We will distribute these audience segments by:

(A) Matching: We convert personal information about You into a coded ID (so it cannot be read directly) and share that code with a third-party. The third-party compares the code to its own records to see if there is a match without Us handing over Your name, email, or other directly identifying details.

For example, the third party can compare the identifier to identifiers in its own database. If there is a match, We can use this information to optimize Our advertising campaign(s), choose whether or not to serve an advertisement to the matched individual on these platforms, conduct analytics (e.g., better inform where to place Our advertisements), and measure the effectiveness of Our advertising. We can also use and provide an identifier to advertising technology companies (like demand side platforms) to serve You with advertising on websites that take part in online auctions of their ad inventory; or

(B) Secure Data Sharing: We use a secure, restricted environment where neither side can see the other’s raw data (sometimes called a clean room) that allows Us and a third-party measure ad performance, develop shared insights about Our mutual customers, and to build and distribute audience segments.

We make available information about third parties with whom We share audience segments on Our Audience Segment page, which is current as of the date listed.

Other Purposes. We collect and use any personal information We collect for other legitimate purposes, such as Our day-to-day business operations, to analyze and improve Our business, for corporate governance, and to follow laws and regulations. For these purposes, We may use any categories of personal information collected by Us.

Day-to-Day Business Operations & Product Improvement. We use personal information We have collected for other purposes needed for day-to-day operations, such as accounting, collecting payments due and owing to Us, financial reporting, business analytics, operational and strategic business planning, real-estate management, and expense management.
Corporate Governance. We also use any personal information We collect for planning, managing, and carrying out restructuring, redundancies, or other change programs, evaluating or conducting a merger, sale of a business unit, restructuring, reorganization, dissolving, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which personal information by Us is among the assets transferred.
Compliance with Laws & Regulations. We use personal information We collect to comply with local, state, and federal laws; enforce Our legal rights and obligations; and for any purpose related to legal claims, reports of violations, or allegations made by, against, or involving, Us, and to the otherwise comply with lawful requests by public authorities, e-discovery requests or where required or permitted by applicable laws, court orders, government regulations, or regulatory authorities.

How We Share Personal Information

Third Parties Providing Services On Our Behalf:

We rely on third parties to perform a range of business operations on Our behalf. Service providers may also use personal information for their own internal business purposes, such as improving their processes or products. For instance:

Third parties that help Us in providing digital and e-commerce services.

These include: social listening, store locator services, loyalty programs, quizzes and product finders, name collection and lead generation, identity management, ratings and reviews, teleconsultations tools and services, product recommendations, predictive sort, product search, personalized services, virtual try-on tools, coupons, loyalty, refer-a-friend program management, customer relationship management, data management tools, provide subscription or recurring purchases, gift cards purchase and redemption, sampling and redemption services; web chat features, and user generated content curation tools.

Third parties that help Us in delivering Our advertising, analyze and measure their effectiveness, and understand how Our customers use Our Site, products and services, and Our retail locations. They also help Us with customer service and support. For example, providers that:
- Advertising and marketing companies that help Us send Our direct mail, email, and SMS marketing messages.
- Technology companies that help Us personalize Our Sites.
- Ad and media agencies that help Us manage Our events.
- Technology companies that deliver Our ads (e.g., demand side platforms, ad servers, content optimization).
- Companies that help Us analyze Our customers, including analytics vendors.
Third parties providing IT services, such as platform providers, hosting services, master data management, maintenance, and support on Our databases as well as on Our software and applications that may contain data about You.
Third parties providing consulting services in the field of market research and analytics, and who help Us collect feedback on our products and services.
Third parties providing bot and fraud detection and prevention, legal, compliance, and risk management services.
Third parties providing: order processing, fulfilment, shipping, and return management services; delivery and shipment notifications; transactions and payment processing services; customer service and support; services to assess customer satisfaction.
Third parties that help Us with customer care and cosmetovigilance purposes.

In the last 12 months, We share these categories of personal information with these third parties: identifiers; internet or network activity; geolocation data; purchasing information; protected classifications; professional or employment-related information; audio-visual information; other categories of personal information; biometric information; geolocation information; payment information; other information; and inferences generated from the above categories of information. The exact categories shared depend on the specific business relationship.

Transactions You Have Requested or to Which You Have Agreed

We may also share personal information about You to complete a transaction you requested. For example, payments You make to pay for goods and services through some of Our Sites are completed using a third party’s online payment system (e.g., Apple Pay, PayPal). Additionally, You may elect to use buy now pay later services available on Our Sites (e.g., Afterpay). To complete Your request, categories of personal information such as identifiers, internet or similar network activity, contact information, and purchasing information is shared to complete the transaction You requested.

Additionally, some of Our Sites may offer the opportunity to post content in a public forum or provide user generated content. For example, providing ratings & reviews about Our products and services, granting Us permission to host user-generated content; posting on Our social media pages or channels; or taking part in contests, blogs, or videos. This content is intended for public consumption, and We may display this content. Once displayed publicly that information can be collected and used by others. If You decide to submit information or allow Us to post it in these public forums, the information will be publicly available.

Related to advertising or Our Sites, You may be asked to receive information and/or marketing offers from someone else, or to agree to the sharing of Your information with a third party.

Other Third Parties (Ad Networks and Advertising Companies):

We share or make available personal information (such as identifiers, Internet or similar network activity, commercial information, inferences) with third party marketing and advertising networks and social media platforms to serve You tailored and personalized advertisements on other websites and services and across other devices as outlined in “Information About Our Advertising”.

Sharing this information may count as a ‘sale’ or ‘share’ or use of personal information for targeted advertising under some state laws, and You may have the right to opt-out. Please see Privacy Rights Available under State Laws for more information.

Some of Our Sites have features such as plugins, widgets, or other tools provided by third parties. These tools collect identifiers along with internet or similar network activity (e.g., IP address and what page You are visiting). If You engage with such plugins, widgets, or other tools, other information may be shared. For example, if You use Facebook’s “like” feature, Facebook may register the fact that You ‘liked’ a product and may post that information on Facebook. This use of information is not governed by Our privacy notice.

These companies use personal information they receive to improve their own products and improve their own ad targeting systems.

L’Oréal Group; Business Transfers:

As noted in the “What Personal Information We Collect & Use Section of this Notice”, We also share information about You, including information collected through cookies (and similar technologies) between Our L’Oréal USA family of Brands to harmonize and update the information We maintain about You, including to perform statistics based on Your characteristics, and to tailor Our communications.

Other members of the L’Oréal Group access information about You when they perform services on behalf of L’Oréal USA and, unless prohibited under applicable law, for use on their own behalf for the purposes described in this Notice. Please visit the L’Oréal Group website, for further details on the L’Oréal Group, its brands, and its locations.

As We continue to develop Our business, We (or Our affiliates) may sell or purchase assets, reorganize or restructure Our company, or be acquired by, merged with, or invested in by another company. If another entity buys Us or Our assets, or assets related to the Sites or Our business, personal information, and any other information that We have collected may be disclosed to such entity as one of the transferred assets. If We’re planning on these types of major business transactions, We will need to share personal information about You with the professionals involved, such as lawyers, auditors, lenders, and other third-party advisors to help plan or complete the transaction.

Finally, if any bankruptcy or reorganization proceeding is brought by or against Us, all such information may be considered an asset of Ours and as such may be sold or transferred to third parties.

Legal Disclosure; Security and Protection of Rights:

L’Oréal USA may transfer and disclose information, including personal information about You, in several circumstances. First, comply with a legal and compliance obligation. Second, when We believe in good faith that the law requires it. Third, when a government agency requests it as part of an investigation. For example, We may disclose personal information in response to subpoenas, courts orders, and other lawful requests by regulators and law enforcement, including responding to national security or law enforcement disclosure requirements. This may include regulators, government entities, and law enforcement. In addition, it may include certain disclosures that We must make under applicable laws, such as making available (including to the public) names of sweepstakes or contests winners.

We may disclose personal information where We believe doing so is necessary to protect the services, Sites, Our rights and property, or the rights, property, and safety of others. For example, We may disclose personal information to (i) prevent, detect, investigate, and respond to fraud, unauthorized activities and access, illegal activities, and misuse of the services and Sites; (ii) situations involving potential threats to the health, safety, or legal rights of any person or third party; or (iii) enforce, and detect, investigate, and take action in response to, violations of Our Terms of Use. We may also disclose personal information related to litigation and other legal claims or proceedings in which We are involved, as well as for Our internal accounting, auditing, compliance, recordkeeping, and legal functions.

How Long We Retain Personal Information

We keep personal information in the beauty profile kept by a Brand for marketing as long as You are active with that Brand. If you have not interacted with a Brand after five (5) years, such as not logging in, not purchasing products, or not opening a Brand’s emails, We will delete or de-identify/anonymize the personal information in that Brand’s beauty profile used for marketing unless We are required to keep it for legal reasons or Our legitimate business purposes.

Outside of the beauty profile We will retain personal information about You for as long as Your account is active, You engage with Us, as needed to provide You services, for Our legitimate business purposes, as necessary to comply with Our legal and/or regulatory obligations, to resolve disputes, to manage Our rights, and to enforce Our agreements.

In accordance with Our routine record keeping, We may delete certain records that contain personal information You have submitted through the Sites. We are under no obligation to store such personal information forever and disclaim any liability arising out of, or related to, the destruction of such personal information. In addition, You should be aware that it is not always possible to completely remove or delete all information about You from Our databases without some leftover data because of backups and other reasons.

We do not control certain privacy settings and preferences maintained by Our social media partners like Facebook and X. If You wish to make changes to those settings and preferences, You may do so by visiting the settings page of the appropriate social media site.

Your Privacy Choices

Email Marketing Messages:

You may change Your preferences and unsubscribe from email services from Our Brands by: (i) modifying Your registered user information on the Sites; (ii) sending Us an e-mail to the address listed in Contact Us located at the end of this Notice; or (iii) following the unsubscribe instructions in the communications that You receive.

SMS Marketing Text Messages:

We may send marketing text messages if You have agreed to receive them from one of Our Brands. Your agreement to receive SMS messages from one Brand does not mean agreement to receive messages from other Brands. To stop receiving messages from this Brand, please text any of the following keywords to any text message You receive from this Brand to unsubscribe: STOP, END, CANCEL, UNSUBSCRIBE, QUIT, REVOKE, or OPT OUT. You may also contact Our customer care team and request to unsubscribe. After the request to cancel or unsubscribe is processed, We may send You an additional text message to confirm that You have been unsubscribed. If at any time You have questions about the text messages, please text “HELP.” Message and data rates may apply. If you unsubscribe from one of Our marketing text message programs, You may continue to receive text messages from Us or other L’Oréal brands through any other program You have joined until You separately unsubscribe from those programs (which may include non-marketing text messages).

Push Notices; Uninstallation of Mobile Apps:

You may at any time opt out from push notifications or allowing Us to access location data by adjusting the permissions in Your mobile device. Some features on the Sites may require access to the camera or other features of Your device. You can adjust the settings or Your device to control access to the camera or other features. You can stop all further collection of information by Our mobile applications by uninstalling the mobile application.

Note: Uninstalling a mobile application does not fully erase your device’s identifier from Our records. If you reinstall the mobile application on the same device, We may be able to reconnect this identifier to Your previous transactions and activities.

Geo-Location and In-Store Location:

You may prevent Your mobile device from sharing Your location data by adjusting the permissions on Your mobile device or within the relevant app.

Cookies, Tracking, and Interest-Based Advertising:

We use Google Analytics Advertising Features to share information with Google about Your use of this site to allow Us to deliver relevant and personalized advertising or content to You on other websites as outlined in Information About Our Advertising. In short: this lets Us show You more relevant ads on other websites based on how You use Our Site. You may learn more about how Google Analytics processes information here: Google Analytics Terms of Use and Google Privacy Policy. You may download and install the Google Analytics Browser Add-on, which allows You to disable Google Analytics across all websites.

You can opt out of receiving targeted advertising through Digital Advertising Alliance Opt-Out page. Options are Device-specific, so if You use multiple devices, You should opt out on each one. You can also opt out of certain targeted advertising programs by clicking on the AdChoices icon that may appear on Our advertising. Even if You opt-out of targeted advertising, You may still see Our advertisements while You are browsing, but they may not be targeted to You based on Your interests.

Some social networks (such as Facebook), allow You to exercise ad choices, limit data collection and clear Your history on that platform as well.

Do Not Track & “Global Privacy Control”:

Browser ‘Do Not Track’ Signals: Some web browsers offer a general “Do Not Track” setting. Since there is no industry-wide standard for how companies should respond to it, We do not currently act on it.

Global Privacy Control (GPC) Signal: The GPC Signal is a specific, newer signal. We recognize the GPC signal as a valid request to opt-out of the sale/sharing of personal information and targeted advertising in the U.S. states that require such recognition ((e.g., California, Texas, Colorado, etc.). Please see ‘Privacy Rights Available under State Laws’ for details.

Retail Analytics Services:

Related to analytics used in Our retail locations, You may opt-out of having a mobile device counted in statistics. You may opt-out by visiting this website.

Delete an Account:

If You have an online account with this brand (where available), You may request deletion of this account. To submit this request please contact Us using the toll-free number in the “How to Contact Us” section below. Consumers in certain states have additional rights, which are addressed below in the Privacy Rights Available under State Laws section. Once we confirm Your verifiable consumer request, We will delete the account and the beauty profile the Brand maintains about You. Some exceptions apply.

Shine the Light Act

If You live in California, You may ask us what information we have shared with other companies for their own marketing purposes. This right comes from California’s Shine the Light law. We provide You with choices about how Your personal information is shared with third parties. Please visit Privacy Rights Available under State Laws to exercise those rights.

Removal of Content

If You live in California and are under the age of 18, and a registered user of any site where this policy is posted, California Business and Professions Code Section 22581 permits You to request and obtain removal of content or information You have publicly posted.

To make such a request, please write to us at the address listed at the end of this Notice and provide as much details as possible (i.e., date and caption) as to the post(s) You would like removed. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information You have posted and that there may be circumstances in which the law does not require or allow removal even if asked.

California Privacy Rights Act

Categories of Personal Information Collected.

While Our processing of personal information varies based upon Our relationship and interactions with You, the information below names categories of personal information collected about California residents in the last 12 months. Please see our “Data Glossary” for more information about each category.

Categories of Personal Information	Examples
Identifiers	NamePostal AddressTelephone numberMobile numberOnline identifiers (e.g., Cookie IDs/MAC address)Internet Protocol addressE-mail addressAccount name/usernameSocial handle or moniker Device identifiers
Internet or similar network activity	Browsing historyAccount login information Search historyInformation on Your interaction with a website, application, or advertisement and related information Smart device and sensor data
Payment Information	Credit or debit card informationInformation to process payments and prevent fraud
Legally Protected Characteristics	Characteristics of protected classes or groups under state or federal law. For example: Age (40 and over) Race, ethnicity, national originSex, gender identity, gender expressionMarital status
Purchasing Information	Products or services purchased, obtained, or consideredOther purchasing or consuming histories or tendencies (e.g., beauty routines, beauty concerns) Loyalty activity and redemptionAccount information Customer service records Health and safety-related information User-generated content (e.g., product testimonials, ratings, and reviews, etc.)
Geolocation Data	Geolocation data includes information such as the following: General location information showing the general physical location of you or your device (e.g., IP address or zip code that provides a general location of the device used) Precise information about your location if you allow us (or a third party who provides it to us) to collect it (like GPS coordinates)
Audio Visual Information
Professional or employment-related personal information	Career/professionProfessional credentials (e.g., professional license)
Other Information Considered Personal Information* *Some information in this category is addressed in other categories as well.	NameContact details such as telephone number and addressAgeSignature (including electronic signature)Physical characteristics or descriptionsPayment informationAddressDriver’s license or state ID numberEducationEmploymentMedical/health information If you use beauty tools we collect, capture, and process the picture You provide through one of Our online beauty tools, and data obtained or created from Your picture (including the automated recognition of various facial landmarks/facial geometry), that might qualify as biometric data, biometric information, or a biometric identifier under various laws.
Inferences drawn from any of these personal information categories	Inferences: conclusions We draw from personal information, sometimes using AI (Ours or a third party’s): For example: Beauty and related preferencesCharacteristicsBehaviors on and off SitePurchase patternsDemographicsHousehold information

California law considers some personal information as ‘sensitive’. This includes:

Health information (like skincare concerns).
Demographic information like race or ethnicity.
Government issued identifiers.
Account information, credentials, and financial information.
Precise geolocation.
Information that may qualify as biometric information under applicable law.
Information collected and analyzed concerning gender or sexual identity.

Since We use this information for non-exempt purposes, You have the right limit how a Brand uses it. Please see “Privacy Rights Available under State Laws.”

Sources of Personal Information; Purposes of Collection, Use, and Disclosure.

The sources from which We collect personal information are summarized in “How We Collect Personal Information”. The business or commercial purposes for which We collect and sell and/or share (for cross-contextual behavioral advertising) personal information are as summarized in Our Notice at Collection, and as described in more detail in “What Personal Information We Collect and Use” section in Our detailed Privacy Notice. For more information about the categories of personal information We share or disclose for business or commercial purposes, and the categories of recipients, please see “How We Share Personal Information” section of Our Detailed Privacy Notice.

Sales/Sharing of Personal Information

We do not ‘sell’ (as ‘sell’ is traditionally defined) personal information about Our consumers (e.g., name, phone number, email address, other personal information) to third parties in exchange for money. However, like most companies, We do share personal information with third-party advertising and social media networks. They use it to show You ads for products You might like. In California, this type of activity is considered (1) a ‘sale’, (2) a ‘share’ of personal information for cross-contextual behavioral advertising, or (3) both, and subject to a right of opt-out. Specific information on these activities is available in “Information About Our Advertising” section of Our Notice. To exercise the right of opt-out please visit Privacy Rights Available under State Laws.

We do not knowingly sell/share personal information of consumers under 16 years of age.

In the past 12 months: We have disclosed the following categories of personal information that may be considered “sale”/ “sharing” under California law: Identifiers, Other Personal Information, Commercial or Purchasing Information, Internet or Online Information, Geolocation Data, Professional or Employment-Related Information, and Inferences (inferred and derived data).

Categories of third parties to whom We shared or made available personal information was disclosed that likely is considered a “sale”/ “sharing” under California law: publishers (i.e., companies that operate websites that You visit such as an online newspaper who serve Our advertisements); retailers who sell Our products that offer advertising programs that allow Us to serve Our advertisements (on their ecommerce platforms or elsewhere); AdTech companies who help Us place and/or deliver Our advertisements (including demand side platforms), data analytics providers (i.e., Google Analytics for Advertiser features), streaming services (video on demand, over the top video providers), and online platforms and social media networks such as Google, Amazon, Microsoft, Pinterest, Reddit, Snapchat, and Meta; and other marketing companies with whom We work to place Our advertisements or online companies who sell Us advertising space to deliver Our ads such as advertising networks or marketplace sellers.

Metrics

For metrics about Requests to Know, Delete, and Do Not Sell or Share My Personal Information requests submitted under the California Consumer Privacy Act (as amended) that We received, fulfilled (in whole or in part), and denied between January 1, 2025, and December 31, 2025, please visit Our CCPA Metrics Report.

Please note this data reflects all requests received from individuals in the U.S. We may deny a request (in whole or in part) if, for example, we cannot verify Your identity, the request is a duplicate or excessive request, or the information requested is legally exempt from disclosure.

Privacy Rights Available Under State Law

Rights Available Under State Law

If you live in one of many U.S. states (including California, Colorado, Texas, Virginia, and others), You may be able to exercise some or all the following rights in relation to personal information about you that we have collected (subject to certain limitations under state law). You may appoint an agent to submit requests on Your behalf. If someone else is submitting a request on Your behalf, We will need proof that You provided authorization. For example, a signed permission form or Power of Attorney. Where permitted, We may also require You to provide proof You provided the authorized agent signed permission to act on Your behalf, and to verify Your identity with Us directly.

Summary:

RIGHT	WHAT IT MEANS	HOW TO EXERCISE
Right to Know	See what data We have and how We use it
Right to Delete	Ask Us to delete Your data
Right to Correct	Fix inaccurate data
Right to Opt-Out	Limit certain data uses related to targeted ads
Right to Limit	Limit certain data uses related to sensitive personal information

Detailed Information

Right to Know. The right lets You ask what personal information We have about You. Specifically:
- The categories of personal information We collect.
- The categories of sources for the personal information We collect.
- Our business or commercial purpose for collecting personal information.
- The categories of third parties with whom We share that personal information, or, where required by state law, a specific list of third parties.
For individuals who live in Washington and Nevada, this extends to receiving a list of third parties and affiliates (and contact information) with whom We shared or ‘sold’ consumer health data.

The specific personal information We collected about You.
For individuals who live in California, by default, We will provide information about personal information collected since January 1, 2022.

Right to Access and Portability. The right to confirm whether We are processing personal information about You and to get a copy of such personal information we have collected about You, and, where required by law, get a copy of such personal information in a portable and, to the extent technically feasible, readily usable format.
Right of Deletion. To delete personal information provided to or obtained by Us. You have the right to ask that We delete personal information about You, subject to certain exceptions and to the extent required by law. Once We receive and confirm Your verifiable consumer request, We will delete personal information about You from Our records, unless an exception applies.
There are some cases where We may need to keep personal information about You after receipt of a deletion request. For example, personal information may need to be kept to:

Complete a transaction for which We collected the personal information, provide a good or service You asked We provide (such as the sale of Our beauty products to You), or reasonably needed within the context of a relationship with Us.
Track consumer complaints or product issues (e.g., collecting, evaluating, and monitoring reports of undesirable events during or after use of Our products and services).
Detect security incidents, and to protect against malicious, deceptive, fraudulent, or illegal activity.
Comply with a legal obligation.
Maintain a log of delete requests submitted, including name, date of request, manner of request, and date of fulfillment.
Enable solely internal uses that are reasonably aligned with consumer expectations based on Your relationship with Us.
Other internal uses compatible with the context in which You provided Us with personal information.

Right of Correction. The right to correct inaccuracies in personal information, considering the nature and purposes of the processing of personal information. In other words, if something We have on file about You is wrong, You can ask Us to fix it.
The Right to Control over Sensitive Personal Information(including consumer health data for individuals who live in Washington and Nevada). Depending on where You live, You have the right to ask that we limit Our use and disclosure of Sensitive Personal Information to certain purposes permitted by law and/or revoke consent to Our processing of Sensitive Personal Information. Residents of Washington and Nevada have the right to withdraw consent related to Our processing of ‘consumer health data.’
Right to Opt-Out. Depending on Your State You have the right to opt-out of certain types of processing of personal information, including:
- To opt-out of the ‘sale’ of personal information or sharing or use of personal information for targeted advertising.
- To opt-out of any processing of personal information for purposes of making decisions that produce legal or similarly significant effects.

The above applies to residents of Alabama (effective May 1, 2027), California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Louisiana (effective January 1, 2027), Maryland, Minnesota, Montana, Nebraska, Oklahoma (effective January 1, 2027), New Hampshire, New Jersey, Oregon, Rhode Island, Texas, Tennessee, Utah, Vermont (January 1, 2028), and Virginia have certain rights under applicable privacy laws, subject to certain conditions. Residents of Washington and Nevada have certain rights related to ‘consumer health data’ under applicable Washington and Nevada state law.

How to Exercise Privacy Rights Available Under State Law (Access, Correct, Delete)

To submit Your data subject privacy request for this Brand please access Our Brand-specific consumer request portal or contact the Brand using the toll-free number in How to Contact Us. If You want this to apply to another L’Oréal Brand or all L’Oréal brands, please access Our general consumer request portal.

Only You or a person that You authorize to act on Your behalf, may make a request related to personal information about You. You may also make a verifiable consumer request on behalf of Your minor child.

The verifiable consumer request must:

Provide sufficient information that allows Us to reasonably verify You are the person about whom We collected personal information or an authorized representative of the person who wishes to make a request.
To protect Your privacy, We need to confirm it is really You (or someone You have authorized) before fulfilling a request. If we cannot verify Your identity, or can’t find Your information in Our system, We may not be able to complete Your request. Making a verifiable consumer request does not require You to create an account with Us. We will ask You for the email information that You used to interact with Us or sign up for a loyalty, email, or to make purchases along with other information You submit (such as contact information like name, address, phone number) and the information We have in Our systems, to help verify Your identity or authority to make the request and confirm that Your information is in Our system. We will use information You provide to submit a request only in connection with the request. We may ask you to provide more personal information so that we can properly identify You. If You choose not to provide this information, We may only be able to process Your request to the extent We are able to identify You in Our systems.

We will try to respond to a verified consumer request within 45 days. If We require more time, We will inform You of the reason and extension in writing (including by email).

We do not charge a fee to process or respond to a verified consumer request unless it is excessive, repetitive, or without merit. If We determine that the request requires a fee, We will provide explanation and a cost estimate before completing the request.

You may only make a request for access or data portability twice within a 12-month period (unless applicable law allows You to make more requests).

How to Exercise Rights Available Under State Law (Sales of Personal Information (or Consumer Health Data) & Sharing or Use of Personal information for Targeting)

To exercise the right of opt-out related to a (1) a ‘sale’, (2) a ‘share’ or ‘use’ of personal information for targeted advertising, or both, where available in Your jurisdiction please use one or more of the following:

Offline Settings. Scroll to the bottom of Our Site and click the “Your Privacy Choices” link on the footer of a brand Site to submit a request about offline (non-browsing) personal information. You may also use Our Brand-Specific consumer request portal to directly access Our form for this Brand, or if You want this to apply to another L’Oréal Brand or to all L’Oréal Brands, please use Our general consumer request portal. You may also contact Us using the toll-free number in How to Contact Us.
Online Settings: Click “Online Preferences” link on the footer of a Brand’s Site and change the setting about online (browsing) personal information.
Automatic Browsing Signals. Global Privacy Control (GPC) is a browser or extension setting. When enabled it tells websites You do not want personal information about You sold or used for targeted ads. We recognize GPC as valid requests to opt-out of the sale/sharing of personal information and targeted advertising in the U.S. states that require this (e.g., California, Texas, Colorado, etc.). Here is how it works:
- If You did not log in or a log in is not available: We will opt You out for only that specific browser.
- If You did log in (where available): We will also apply this choice to the offline beauty profile the Brand maintains about You.

We may ask for information necessary to complete the request, such as information We need to identify the consumer whose information is the subject of the opt-out request.

How to Exercise Rights Available Under State Law (Sensitive Personal Information (including Consumer Health Data))

You may ask Us to stop using sensitive personal information for uses beyond what is needed to:

To perform services or provide goods reasonably expected by the consumer who requested the services or goods.
To prevent, detect, and investigate security incidents.
To resist malicious, fraudulent, deceptive, or illegal actions.
Ensure the physical safety of natural persons.
Short-term, transient uses. For example, brief, one-time uses that are not stored long-term.
To perform services on Our behalf.
To verify or maintain the quality or safety of a product, service, or device owned, manufactured, manufactured for, or controlled by Us, and to improve, upgrade, or enhance such product, service, or device.
For purposes that do not infer characteristics about a consumer.
If You would like to opt-out of other uses of sensitive personal information (or revoke a previously given to Our use of sensitive personal information), please submit Your request by clicking “Your Privacy Choices” link at the bottom of Our Sites. You may also use Our Brand-Specific consumer request portal to directly access Our form for this brand or contact Us using the toll-free number in How to Contact Us. If you want Us to this to apply to another Brand or to all L’Oréal Brands, please use Our general consumer request portal. You may also use the toll-free number in How to Contact Us.

Notice of Financial Incentives /Bona Fide Loyalty Program Disclosure

Offers like coupons or loyalty rewards are sometimes called ‘financial incentive.’ This section explains what that means for You.

We offer such incentives, such as a coupon or discount on purchase in exchange for personal information (e.g., email sign-up). We may also offer a loyalty program that will provide certain perks, such as rewards and exclusive offers, as well as other programs like sweepstakes or contests. Each of those incentives or programs (which We call “Programs” below) may be considered a ‘financial incentive’ or a ‘bona fide loyalty program’ under one or more U.S. state privacy laws. Through participating in these Programs, You may provide Us with any of the categories of information set forth in the “What Personal Information We Collect & Use” section of this Notice. Please see Our Notice of Financial Incentives for more information.

Children’s Information

Children: Our Sites are not directed to children under 13, and We do not knowingly collect, use or disclose personal information from anyone under 13 years of age. If We determine upon collection that a user is under this age, We will not use or maintain his/her personal information without the parent/guardian’s consent. If We become aware that We have unknowingly collected personal information from a child under the age of 13, We will make reasonable efforts to delete such information from Our records. If You believe that We might have any information from or about a child under age 13, please contact Us through one of the methods listed in the Contact Us section at the end of this notice.

Parental Consent: Minors between 13 years of age and the age of majority in their state must ask their parent or guardian for permission to use any L’Oréal USA properties. For L’Oréal USA brands offering e-commerce, You may only make purchases if You are 18 years of age or older, or the age of majority where You live.

Parental participation: We strongly recommend that minors 13 years of age or older ask their parents for permission before sending any information about themselves to anyone over the Internet and We encourage parents to teach their children about safe internet use practices.

Securing Personal Information About You

L’Oréal USA maintains reasonable safeguards to protect personal information against loss, unauthorized use, disclosure, or destruction and when transferring information for processing and requires third parties providing services on Our behalf to do the same. However, no electronic data transmission or storage of information can be guaranteed to be 100% secure. Please note that We cannot ensure or warrant the security of any information You send to Us.

Third Party Links; Social Login

The Sites may have links to third party websites that are not owned or run by L’Oréal USA. This includes links from advertisers, sponsors and/or partners that may use Our logo(s) as part of a co–branding or co–marketing agreement. We are not responsible for other companies’ websites, even if You reach them through a link on Our Site. Be sure to check their own privacy policies. These other websites may send their own cookies or other tracking technologies to Your device; they may independently collect data or ask for personal information and may or may not have their own published privacy policies. You should also independently assess the authenticity of any site, which appears or claims that it is one of Our Sites (including those linked to through an email or social networking page).

We may also offer You the opportunity to use Your social media login. If You do so, please be aware that You share Your account profile information with Us depending on Your social media platform settings. Please visit the relevant social media platform and review its privacy policy to understand how Your personal information is shared and used in this context.

Cross-Border Transfers

The Sites are governed by and run in, and in accordance with the laws of, the United States, and are intended for the enjoyment of residents of the United States. Country or region-specific websites are available for L’Oréal brands and products around the world. L’Oréal makes no representation that the Sites are governed by or run following the laws of any other nation. Given that We are an international business, Our use of Your information necessarily involves the transmission of data on an international basis. If You are in the European Union, Canada or elsewhere outside of the United States please be aware that by using Our Site, personal information about You is sent to and processed in the United States, where privacy laws may be different from those where You live. By using the Sites, or providing Us with any information, You (a) acknowledge that the Sites are subject to the laws of the United States, (b) consent to the collection, processing, maintenance and transfer of such information in and to the United States and other applicable territories in which the privacy laws may not be as comprehensive as or equivalent to those in the country where You live and/or are a citizen, and (c) waive any claims that may arise under those laws.

Updates to this Privacy Notice

Please note, We may change information on the Sites and/or this Privacy Notice at any time and any changes will be effective immediately upon the publication of revisions.

Data Glossary

CATEGORY	SUB-CATEGORY	DESCRIPTION / EXAMPLES
Identifiers	Basic Identifiers	Name, alias, account name, postal address, email address, signature, username, social media handle
Identifiers	Government Identifiers	Driver’s license number or other government-issued identifier
Identifiers	Online Identifiers	Device identifiers, IP address, cookies, beacons, pixel tags, mobile ad identifiers, MAC address, device fingerprints, browser informationThese are technical details that identify Your device or browser.
Other Personal Information	Contact Data	Home address, shipping address, telephone number(s), mobile number(s), email address(es)
Other Personal Information	Preferences Data	Subscription type, contact preference (email, SMS), preferred store or channel, recurring order/subscription information, date created/changed, permission status
Other Personal Information	Payment / Financial Data	Credit or debit card number or other payment information
Other Personal Information	Physical Characteristics	Personal descriptions, skin tone and type, hair color, eye color, and other beauty profile information
Other Personal Information	Health and Medical Data	Skin conditions (e.g., acne, rosacea) and other health information collected in connection with a beauty service, online or in-store experience, or product recommendation.Attendance/visitor forms may collect welfare/health data (recently sick, recently had a procedure, etc.). Additionally, health and medical data is collected in case of an incident at one of Our facilities.
Other Personal Information	User Generated Content
Commercial / Purchasing Information	Purchasing Information	Products or services (e.g., gift cards, gift certificate information) purchased, obtained, or considered; order and transaction details; cart contents; shipping/return status; store location; loyalty status/loyalty activity/, points, and redemption; channel or store preference; subscription or recurring order-related information; gift certificate information (e.g., sender name, recipient name, recipient email, message, redemption/value); purchasing or consuming histories or tendencies This may include (in certain cases) public blockchain addresses if you use digital currencies to purchase goods or services.
Characteristics of Protected Classes	Demographic Data	Age, gender, race, ethnicity, household information, birthday, or age range; some of which may include protected classifications under state or federal law
Characteristics of Protected Classes	Biometric Data	Information constituting a biometric identifier or biometric information under applicable state law
Internet / Network Activity	Technical Data	Browser type/size/version, operating system type/version, device information/type, language setting, smart device and sensor data, email client, screen size/resolution, IP-inferred location, ISP, network domain name
Internet / Network Activity	Browsing Data	Referrer source (i.e., where you came from), login details, navigation data (scroll, mouse movements), pages/ads/content shown, viewed, or clicked/tapped, visit duration, products searched or added to basket, email opens, and link clicks; other information related to the use of Our Site.This also includes what You are doing on Your device, like if a mouse is moving (which can help Us (and our third-party service providers) tell humans from bots.
Audio / Visual Information	Audio / Visual
Geolocation	Geolocation	Location You provide, IP-based geographic estimates, or precise geolocation from Your device if enabled
Inferences	Inferences	Information (i.e., predictions about new, unseen data) generated from other personal information maintained about You. For example, summaries of individual preferences and characteristics, including beauty preferences, behaviors on and off site, purchase patterns, demographics, and household information