Our Privacy Policy Statement

Including for California Residents

This U.S. state privacy notice (“Beauty Services Notice”) applies specifically to personal data collected via our Instant Makeup Try On, Skin Pro Advisor, and Foundation Finder tools (“Beauty Services”) and supplements the information contained in our U.S. Privacy Policy available here , and in our U.S. State Privacy Notice available here . This Beauty Services Notice applies to users of the Beauty Services who are residents of certain states with generally applicable privacy laws (“consumers” or “you”), namely, California, Colorado, Connecticut, Utah, and Virginia. Consumers in these states have certain privacy rights as specified under state law, and this Beauty Services Notice describes state-specific requirements. Any terms defined in the applicable state privacy laws that we use here have the same meaning when used in this Beauty Services Notice. When we use the term "personal data,” in this Beauty Services Notice we are also including “personal information” as that term is defined under applicable state privacy laws. Information We Collect As more fully described under the Personal Data We Collect section in our U.S. Privacy Policy, we collect (and have collected within the last twelve (12) months) the following categories of personal data: Identifiers, including answers to our quiz (such as your makeup and product preferences, skin type, skin color, and skin condition), and your IP address. Characteristics of protected classifications, including gender identity, race, color, and age. Geolocation data, such as the city you live in. Audio, electronic, visual, or similar information, including an image of your face (either live or as an uploaded image/selfie). Inferences drawn from information identified above (such as typical climate data (UV index, humidity, pollution) in the area you live in based on your geolocation data. For purposes of this Beauty Services Notice, personal data may not include: • Publicly available information lawfully made available from government records, or information that we have a reasonable basis to believe was made publicly available by you and not restricted to a specific audience. • Information otherwise excluded from the scope of various state privacy laws. Disclosure of Personal data to Third Parties and Other Recipients The categories of personal data we may have disclosed for a business purpose (in the preceding 12 months, where applicable) include: identifiers; characteristics of protected classifications; geolocation; audio, electronic, visual, or similar information; and inferences. The categories of third parties and other recipients to whom we may have disclosed personal data for a business purpose may include: affiliates and subsidiaries; advertising and marketing providers; and our provider for Beauty Services, Revieve Oy. Sources of Personal data We generally collect personal data from the following categories of sources: Directly or indirectly from you. Purposes of Collecting and Disclosing Personal data. As more fully described in the How We May Use Personal Data section of our U.S. Privacy Policy in general we collect and process personal data for the following business or commercial purposes: • Providing, supporting, developing, and improving our Instant Makeup Try On, Skin Pro Advisor, and Foundation Finder tools. • Marketing to users based on their answers to our quiz. Sensitive Personal Data We do not collect, use, or disclose sensitive personal data beyond the purposes authorized by applicable state privacy laws. Retention of Personal Information We retain your personal information for as long as needed or permitted, based on the reason we obtained it (consistent with applicable law). When deciding how long to keep your personal information, we consider whether we are subject to any legal obligations (e.g., any laws that require us to keep records for a certain period before we can delete them) or whether we have taken any legal positions (e.g., issued any legal holds or otherwise need to preserve the information). Rather than delete your data, we may also deidentify it by removing identifying details. Where we have committed to maintaining and using personal information in a deidentified form, we agree not to reidentify deidentified data except as permitted by applicable law. Sales and Sharing of Personal Data; Use for Targeted Advertising Certain state laws, including the California Consumer Privacy Act, define "sale" as disclosing or making available personal data to a third-party in exchange for monetary or other valuable consideration, and “sharing” or “targeted advertising” as disclosing or making available personal data to a third-party for purposes of cross-contextual behavioral advertising. We do not sell or share the personal data covered by this privacy notice, or use it for targeted advertising. Additionally, we do not sell or share personal data about individuals we know are under age 16. Your Privacy Rights and Choices Residents of California, Colorado, Connecticut, Utah, and Virginia states may have the following rights regarding their personal data, subject to certain exceptions and qualifications under their respective state laws. Access and Data Portability. You may have the right to request details about the personal data we have collected about you, such as whether we have collected personal data about you, the categories of sources, the purposes for which we have collected the personal data, the categories of recipients, and the specific pieces of personal data we have collected. You may also have the right to receive a copy of your personal data in a readily usable format. Correction. You may have the right to request we correct incorrect or inaccurate personal data, subject to restrictions regarding the determination of accuracy of the existing personal data. Deletion. You may have the right to request deletion of your data unless an exception applies. Opt-Out of Sale, Sharing, or Targeted Advertising. You have the right to opt-out of “sales” and “sharing” of your personal data, and to opt-out of the use of your personal data for “targeted advertising” as those terms are defined under applicable state privacy laws. However, we do not sell, share or use for targeted advertising the personal data covered by this privacy notice. Limit Use and Disclosure. We do not engage in uses of sensitive personal data that would trigger a right to limit use and disclosure of sensitive personal data under applicable state privacy law. Opt-Out of Profiling with Legal or Significant Effects. You may have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. However, as stated above, we do not engage in such activities as described under applicable state privacy law, so there is no need to exercise this right. Non-Discrimination. We will not discriminate against you in terms of price or service level for exercising any of the rights described in this section. Exercising Your Privacy Rights To exercise your privacy rights, please submit a request to us by emailing us at privacy@kikocosmetics.com or completing our webform here. You may designate someone as an authorized agent to submit requests and act on your behalf. For security purposes, authorized agents will be required to provide proof of their authorization in their first communication with us, and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent. You may make a request for access or data portability, free of charge, either once or twice within a 12-month period, depending on applicable state privacy law. The request must: • Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal data or an authorized representative. • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We cannot respond to your request or provide you with personal data if we cannot verify your identity or authority to make the request and confirm the personal data relates to you. Therefore, we will need your first and last name, email address, and, if applicable, customer number. In some cases, we may request additional information to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for the denial. Right to Appeal If we deny or reject your privacy rights request, you may have a right to appeal our decision if permitted by your state’s privacy law. To appeal our denial or rejection, please contact us at privacy@kikocosmetics.com and include in the subject line “Request to Appeal Privacy Right Request Decision.” Please provide us sufficient information to locate your privacy right request record, such as any unique number you were provided. Our privacy office will review your appeal request, our original determination, and will inform you of our decision on your appeal. Last update: July 25, 2024.