Our Privacy Policy Statement

This section of the privacy policy (“Policy”) applies to individuals located in the U.S., and describes how KIKO collects, uses, discloses, and otherwise process personal data.

Residents of certain states, including California, can read our U.S. State Notice by clicking here

By using our website or services (collectively, “Website”), you acknowledge that your personal data will be handled as described in this Policy. Your use of our Website and any dispute over privacy, is subject to this Policy and our Terms of Use, available at [insert URL], including their applicable terms governing limitations on damages and the resolution of disputes. 1. Personal Data We Collect As further described below, we collect personal data directly from you, automatically through your use of the Website, and from other, third-party sources. To the extent permitted by applicable law, we may combine the information we collect from publicly available or third-party sources. Personal data We Collect Directly From You. While the personal data we collect varies depending upon your use of our Website and our interactions with you, in general, we may collect the following personal data directly from you: Contact Information. When you contact us, we collect your name, email address, phone number, the nature of your inquiry, and any other information you so choose to provide. Account Information. When you register for an account with us, we collect your name, date of birth, gender, email address, password, and any other information used in connection with accessing your account. Purchases and Payments. If you make purchases through our Website, we collect payment information such as name, payment information, and billing and shipping address. Communications and Interactions. When you send email, call, or otherwise communicate with us and with members of our team, we collect and maintain a record of your contact details, communications, and our responses. Responses and Feedback. If you participate in our surveys or questionnaires, we collect your responses and feedback, such as user satisfaction or other information related to your use of our Website, and any other information you so choose to provide. Marketing and Promotions. If you agree to receive marketing communications from us, we collect your email, name, phone number, preferences, and if relevant, information about your account. If you participate in promotions we offer, we collect your name and other information related to the activities available through our Website. Preferences. We also may collect information about your preferences, including communications preferences. Interacting with other KIKO Group Companies. If you consent to us providing your personal data to other KIKO Group companies we may collect such personal data as is needed for these purposes. Collect and publish individual user’s reviews. If you purchase a KIKO product, we may ask you to provide us with your review (and upload an image of the product purchased) and publish it, Loyalty Program. If you consent to join KIKO ME loyalty program, we may collect your name, email address, phone number, date of birth, preferred language, password, and any other information needed to enroll you in the loyalty program. Personal data We Collect Automatically. We and our third-party providers automatically collect personal data related to your use of our Website, including using cookies and other similar technologies. The personal data we may automatically collect includes: Device and Browsing Information. When you visit our Website, we may collect IP address, browser type, domain names, access times, date/time stamps, operating system, language, device type, unique ID, Internet service provider, referring and exiting URLs, clickstream data, and similar device and browsing information. Activities and Usage. We also collect activity information related to your use of the Website, such as information about the links clicked, searches, features used, items viewed, time spent within the Website, your interactions with us within the Website, and other activity and usage information. Location Information. We may also collect or derive location information about you, such as through your IP address. If you choose to enable location-based sharing with us through your device settings, we may collect precise location information to provide content that is more relevant to your location and to otherwise improve your interactions with our Website. You may turn off location data sharing through your device settings. For more information about our use of cookies and other similar technologies, please see the “Cookies and Other Tracking Mechanisms” section below. Personal data We Collect from Other Sources. In addition, we may collect and receive certain personal data from business partners, clients and customers, data analytics providers, Internet service providers, operating systems and platforms, public databases, and service providers. 2. How We May Use Personal data We collect, use, disclose and otherwise process the personal data we collect about you for the following purposes: Website and Support. To allow you to maintain your account with us, provide and operate our Website, communicate with you about your use of the Website, respond to your inquiries, and to otherwise run our day-to-day operations. Interactive Website Features. To allow you to use our interactive website features, such as our virtual reality makeup try-on tool. Analytics and Improvement. To better understand how users access and use the Website, and for other research and analytical purposes, to develop our Website and its features, and for internal quality control and training purposes. Communicate With You. To respond to your inquiries, send you requested materials and newsletters, as well as information and materials regarding our Website and offerings, and to communicate with you through text regarding your shipment and our Website. We also use this information to send administrative information to you, for example, information regarding the Website and changes to our terms, conditions, and policies. Marketing and Promotions. For marketing and promotional purposes. For example, to send you information about our Website, such as newsletters and other marketing content that you sign up to receive. Research and Surveys. To administer surveys and questionnaires, such as for market research or user satisfaction purposes. Security and Protection of Rights. To protect the Website and our business operations, and to protect our rights or those of our stakeholders; to prevent and detect fraud, unauthorized activities and access, and other misuse; where we believe necessary to investigate, prevent or act regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third party, or violations of our Terms of Use. Compliance and Legal Process. To comply with applicable legal or regulatory obligations, including as part of a judicial proceeding; to respond to a subpoena, warrant, court order, or other legal process; or as part of an investigation or request, whether formal or informal, from law enforcement or a governmental authority. Auditing, Reporting, and Other Internal Operations. To conduct financial, tax and accounting audits; audits and assessments of our operations, privacy, security and financial controls, risk, and compliance with legal obligations; our general business, accounting, record keeping and legal functions, and to maintain appropriate business records and enforce company policies and procedures. General Business and Operational Support. To assess and implement mergers, acquisitions, reorganizations, bankruptcies, and other business transactions such as financings, and to administer our business, accounting, auditing, compliance, recordkeeping, and legal functions. 3. How We May Disclose Personal data We may disclose the personal data we collect for the purposes described above and as follows: Affiliates, Subsidiaries, and Business Partners. We may disclose the personal data we collect to our corporate affiliates and subsidiaries. We may also partner with other businesses to offer our products, and we may disclose personal data to those business partners as necessary to facilitate your orders or requests. Vendors and Service Providers. We may disclose the personal data we collect to service providers who perform functions on our behalf, such as IT and website hosting, marketing, and marketing research providers, customer support, data storage, analysis and processing providers, auditors, consultants, and legal counsel. Marketing and Analytics Providers. We may also disclose your personal data, such as device and browsing, and activities and usage information, to marketing and advertising networks, data analytics providers, and other companies who provide marketing or analytics services on our behalf. For more information see the “Cookies and Other Tracking Mechanisms” section below. In Support of Business Transfers. If we or our affiliates are or may be acquired by, merged with, or invested in by another company, or if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may disclose or transfer the personal data we have collected from you with or to the other company. We may also disclose certain personal data as necessary prior to the completion of such a transaction or other corporate transactions such as a financing or restructuring, to lenders, auditors, and third-party advisors, including attorneys and consultants. Compliance and Legal Obligations. To comply with our legal and compliance obligations and to respond to the legal process. For example, we may disclose information in response to subpoenas, court orders, and other lawful requests by regulators and law enforcement, including responding to national security or law enforcement disclosure requirements. Security and Protection of Rights. Where we believe doing so is necessary to protect the us, our rights and property, or the rights, property, and safety of others. We may also disclose personal data related to litigation and other legal claims or proceedings in which we are involved, as well as for our internal accounting, auditing, compliance, recordkeeping, and legal functions. Aggregate and Deidentified Information. Notwithstanding anything else in this Policy, we may use, disclose, and otherwise process aggregate and deidentified information related to our business and the Website with third parties for quality control, analytics, research, development, and other purposes. Other Disclosures. We may disclose personal data in other ways not described above, but will notify you and, if necessary, obtain your consent. 4. Cookies and Other Tracking Mechanisms We and our third-party providers use cookies and other similar tracking mechanisms to automatically collect information about browsing activity, type of device, and similar information within our Website. We use this information to, for example, analyze and understand how you access, use, and interact with us through our Website, to identify and resolve bugs and errors in our Website, to assess, secure, protect, optimize, and improve the performance of our Website, analytics purposes. We may also aggregate such information to analyze trends, administer our Website, and gather broad demographic information. Cookies. “Cookies” are alphanumeric identifiers we transfer to your device’s hard drive through your web browser for tracking purposes. Some cookies allow us to make it easier for you to navigate our Website, while others are used to enable a faster log-in process, support the security and performance of the Website, or allow us to track activity and usage data within the Website. Third Party Analytics. We use third party tools, such as Google Analytics, which are operated by third party companies, to evaluate usage of our Website. These third-party analytics companies use cookies, and other tracking technologies to collect usage data about our Website to provide us with reports and metrics that help us evaluate usage of our Website, improve our Website, and enhance performance and user experiences. To learn more about Google’s privacy practices, please review the Google Privacy Policy at https://www.google.com/policies/privacy/partners/. You can also download the Google Analytics Opt-out Browser Add-on to prevent your data from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout. Cross-Device Tracking. We and our providers may use the information we collect about you within our Website and on other third-party websites and services to help us and these third parties identify other devices that you use (e.g., a mobile phone, tablet, other computer, etc.) to interact or engage with us or the Website. Do Not Track. Currently, our Website does not recognize “Do-Not-Track” requests. You may, however, disable certain tracking as discussed below (e.g., by disabling cookies). 5. Your Privacy Choices We make available several ways for you to manage choices about your personal data, including preferences regarding cookies, advertising, whether you want to receive marketing and promotional emails from us, and choices regarding your account and profile information. Cookie Settings. To prevent cookies from tracking your activity on our Website or visits across multiple websites, you can set your browser to block certain cookies or notify you when a cookie is set; you can also delete cookies. The “Help” portion of the toolbar on most browsers will tell you how to prevent your device from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to delete cookies. Visitors to our Website who disable cookies will be able to browse the Website, but some features may not function. Industry Ad Choice Programs. You can also control how participating third-party ad companies use the information that they collect about your visits to our Website, and those of third parties, in order to display more relevant targeted advertising to you. If you are in the U.S., you can obtain more information and opt out of receiving targeted ads from participating third-party ad networks at aboutads.info/choices (Digital Advertising Alliance). Opting out of participating third party ad networks does not opt you out of being served advertising. You may continue to receive generic or “contextual” ads on our Website. You may also continue to receive targeted ads on other websites, from companies that do not participate in the above programs. Marketing Communications. You can opt out of receiving marketing emails from us by using the unsubscribe feature in any such email we send you. You can also log in to your account and change your marketing/communications preferences. Account and Profile Information. If you have an account with us, you may access, review, and update your account and profile information, such as your name, email address, contact information, preferences, and other profile information by logging in and accessing the information directly within your account. 6. Children’s Information Our Website is not designed for children, and we do not knowingly collect personal data from children under the age of 13. If you are a parent or legal guardian and you believe we have collected your child’s information in violation of applicable law, please contact us using the contact information below. 7. External Links and Features

Our Website may contain links to third-party websites or features. Any access to and use of such linked websites or features is not governed by this Policy, but instead is governed by the privacy policies of those third parties. We are not responsible for the information practices of such third parties, including their collection of your personal data. You should review the privacy policies and terms for any third parties before proceeding to those websites or using those features. 8. Security

We have implemented safeguards that are intended to protect the personal data that we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our efforts, no data security measures can guarantee security.