OLAPLEX - Privacy Notice
Last updated and effective date: July 1, 2024
This privacy notice describes how Olaplex, Inc. (“Olaplex”, “we”, “us” or “our”) collects, uses, shares, and protects personal information. It also tells you about the rights and choices you have with respect to your personal information, and how you can reach us to get answers to your questions. You can click on the following links to go directly to the corresponding sections of this privacy notice.
What Our Privacy Notice Covers
This privacy notice covers the “personal information” that Olaplex obtains about you in various contexts, both online and offline, including when you visit our websites where this Privacy Notice is posted (“Sites”), download and use our mobile applications (“Apps”), communicate with us, participate in any of our programs or events, or when you otherwise interact with us. This Privacy Notice does not cover Olaplex’s processing of personal information relating to job applicants, employees or other staff members. Our Sites may include links to third party websites and/or applications.
Please note that we have no control over the privacy practices of websites or applications that we do not own, and we encourage you to review the privacy notices of these third party websites.
How and What We Collect
We obtain information about you from a variety of sources depending on our relationship with you. The following are examples of the types of personal information that we collect directly from you:
|
Activity
|
Examples of Personal Information Collected
|
|
Account Registration
|
When you create an account with us or join our loyalty program, we collect your name, e-mail address, login details and country.
You can choose to save certain information in your account to use for future purchases, such as your shipping addresses, or payment information.
|
|
Quiz
|
When you fill out a quiz on the Sites, such as our Hair Diagnostic Quiz, we will collect information such as your hair concerns, hair texture, and hair damage. This may include some general health and wellness related information.
|
|
Communications With Us
|
When you communicate with us, including contacting us for support (including through the "Chat with us" function on our website), to provide feedback or comments, to participate in a survey, or to make a request or other inquiry, we will collect your name and contact information (such as e-mail address or phone number), as well as any other information that you choose to provide to us. In some cases, we record customer service calls for training and quality assurance.
|
|
Posting in Public Forums
|
If you choose to submit or post information, reviews or photos in a public space on our Sites, or on our social media pages, such as creating a public profile, rating our products, submitting content as part of Olaplex’s online community, or leaving a testimonial about an Olaplex influencer, we collect the information you share. You should use caution before posting or providing any personal information on public Sites.
|
|
Promotional Communications
|
When you sign up to receive promotional communications from us, such as e-mail communications, mobile messages (including text and/or push notifications), and postal mailings, we collect your contact information such as name, email address, mobile phone number and/or mailing address. We may also collect certain information about how you interact with the e-mails and promotional messages we send you to better understand your interests and send you relevant messages. To opt-out of receiving such promotional communications, please see the "Your Choices" section below.
|
|
Refer a Friend
|
When you sign up to our Refer a Friend program, we collect your name and email address, as well as the email address of any friend you choose to refer.
|
|
Purchasing Online
|
When you place an order for a product or service on our Sites, we collect your name, shipping address, payment information, and billing address.
|
|
Sweepstakes, Contests, and Promotions
|
When you participate in a sweepstakes, contest, or other similar campaign or promotion, we collect your name, contact information, and in some cases limited demographic information and content generated by participants. Some campaigns and promotions have a social networking component where you can choose to submit additional information such as social media profiles and handles, photographs, and other content.
|
|
Professional Information
|
If you register for a professional account on the Sites, in addition to your name and contact details, we will collect your professional license number or student identification number, your license expiration date, whether or not you are a salon owner and your salon details, and the details required to verify that you are a professional (such as a copy of a business card, professional website link, photo of professional certification, or professional distributor store and location). If you choose to become a certified Olaplex stylist, we will collect information regarding your enrollment in our Certification course, your responses in each of our Certification quizzes and whether or not you receive an Olaplex Certificate.
|
In addition to the personal information we collect from you directly, we may also obtain information about you from other sources, including third parties, business partners (e.g., salon owners or distributors), our corporate affiliates (i.e., other entities in the Olaplex group), social networks, vendors that provide services on our behalf, or publicly available sources. For example, if you have given Olaplex permission to store your credit card information and your credit card issuer provides an account updater service, we may receive updated credit card information (including credit card number and expiration date) from the credit card issuer.
Information we collect automatically
When you visit our Sites, we may obtain certain information by automated means, such as through cookies, web beacons, web server logs and other technologies. A “cookie” is a text file that websites send to a visitor’s computer or other internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. A “web beacon,” also known as an internet tag, pixel tag or clear GIF, links web pages to web servers and cookies and may be used to transmit information collected through cookies back to a web server. The information we collect in this manner may include your device IP address, unique device identifier, web browser characteristics, device characteristics, operating system, language preferences, referring URLs, media access control, clickstream data, and dates and times of website visits.
When you use our Apps, we also may collect certain information by automated means, such as through device logs, server logs and other technologies. The information we collect in this manner may include the device type used, the mobile operating system, device identifiers and similar unique identifiers, device settings and configurations, IP addresses, battery and signal strength, usage statistics, referring emails and web addresses, dates and times of usage, actions taken on the App, and other information regarding use of the App.
We may use these automated technologies on our Sites and Apps to collect information about your equipment, browsing actions, and usage patterns, including the content you view, how long you view the content, your interactions with the content, and how you access and use our services. These technologies help us (1) remember your information so you do not have to re-enter it; (2) track and understand how you use and interact with our Sites and Apps; (3) tailor the Sites and Apps around your preferences; (4) measure the quality and usability of our Sites and Apps and the effectiveness of our communications; and (5) otherwise manage and enhance our products and services, and help ensure they are working properly. For more information on our use of automated technologies for interest-based advertising and analytics, please see below.
Your browser may tell you how to be notified about certain types of automated collection technologies and how to restrict or disable them. Please note, however, that without these technologies, you may not be able to use all of the features of our Sites and Apps. For mobile devices, you can manage how your device and browser share certain device data by adjusting the privacy and security settings on your mobile device. You may also adjust your preferences by visiting our Cookies Settings/Privacy Preference Centre.
How We Use Your Personal Information
We use personal information when required in order for us to perform our contract with you, or take steps to form a contract with you, such as to:
- provide our products and services;
- fulfill your requests, such as to process your transactions for products and services or to process returns; and
- communicate with you about your orders, subscriptions.
We also use your information in order to pursue our legitimate interests in offering you the best service and customer experience possible, securing our website and customers, and running our business efficiently. For example we process your information to:
- assess your hair needs and send you content that is useful in your hair journey, including product recommendations;
- maintain your account, including offering functionalities such as easy checkout and the ability to save user preferences and transaction history;
- provide our Refer a Friend program and other loyalty schemes or programs;
- respond to and/or follow-up on your issues or feedback, and provide information in response to your requests and inquiries;
- identify you when you visit our Sites and Apps;
- conduct research and analytics, including improving our services and product offerings;
- understand your opinions and provide a forum for discussion, questions, posting of photos and reviews, and sharing of experiences;
- provide and maintain the functionality of our Sites and Apps, including identifying and repairing errors or problems;
- detect security incidents, and investigate, prevent, or take action regarding possible malicious, deceptive, fraudulent, or illegal activity, including attempts to manipulate or violate our policies, procedures, and terms and conditions;
- support core business functions, including maintaining records related to business process management and loss and fraud prevention, and collect amounts owing to us; and
- establish or exercise our legal rights, and defend ourselves against legal claims.
We will obtain your consent to use your personal information for the purposes above, where required by applicable law.
We also use your information so that we can send marketing and advertising communications and other promotional materials such as trend alerts, promotions, sweepstakes, contests, new product launches, and event invitations, and understand how you interact with our communications with you.
We may also use services provided by third-party platforms (such as social media and other websites) to serve targeted advertisements on such platforms to you or others, and we may provide your email address (converted into a unique numerical value) to the platform provider for such purposes. To opt out of this sharing, please contact us as set out under “Communicating with us” below. If you a California or Texas resident, please see the “Information for California Residents” and “Information for Texas Residents” sections below, respectively, to opt out of this sharing. If you are an individual located in the European Union, United Kingdom or Canada, we will not send you marketing and advertising material without your prior consent, unless otherwise permitted to do so by applicable law. In addition, we will only use general health and wellness information that we collect for the purposes of recommending products and treatments, when we have your consent to do so, or are otherwise permitted to do so by applicable law.
Finally, we use your information when necessary in order to comply with and enforce applicable legal requirements, relevant industry standards and Olaplex policies, including our Terms & Conditions.
We also may use the information we collect in other ways for which we provide specific notice at the time of collection or as you otherwise consent.
Typically, we retain your personal information for the period necessary to fulfill the purposes outlined in this privacy notice, unless a longer retention period is required or permitted by law.
Third-Party Analytics Services
We use third-party analytics services on our Sites and Apps, such as Google Analytics and Shopify Reports to help us gather and analyze
information about the areas visited on the Sites (such as the pages most
read, time spent, search terms and other engagement data) in order to
evaluate and improve the user experience and the Sites. The information we obtain through the Sites and Apps may be disclosed to or collected directly by these services using cookies and other automated technologies. For more information about Google Analytics, visit "How Google uses data when you use our partners' sites or apps", (located at www.google.com/policies/privacy/partners). You may adjust your preferences by visiting our Cookies settings/ Privacy Preference Centre.
Interest-Based Advertising
On our Sites and Apps, we and our third party advertising partners may obtain information about your online activities to provide you with advertising about products and services that may be tailored to your interests. This section of our privacy notice provides details and explains how you can exercise certain choices.
You may see our ads on other websites because we use third-party ad services. Through these ad services, we can target our messaging to users considering demographic data, users’ inferred interests and browsing context. These services track your online activities over time and across multiple websites and apps by collecting information through automated means, including through the use of cookies, web server logs, web beacons and other similar technologies. The ad services use this information to show you ads that may be tailored to your inferred individual interests. The information these ad services may collect includes data about your visits to websites that serve Olaplex advertisements, such as the pages or ads you view and the actions you take on the websites or apps. This data collection takes place both on our Sites and Apps and on third-party websites and apps that participate in these ad services. This process also helps us track the effectiveness of our marketing efforts. To learn more and adjust your preferences on
our Site, please visit our Cookies Settings/Privacy Preference Centre.
The Sites and Apps are not designed to respond to “do not track” signals from browsers.
To learn how to opt out of interest-based advertising on your web browser from third-party advertising companies participating in the Digital Advertising Alliance (US) or Digital Advertising Alliance of Canada, please visit https://youradchoices.com/ or https://youradchoices.ca/en/tools for more
information.
How We Share Your Personal Information
In addition to the specific situations discussed elsewhere in this privacy notice, we may disclose or share the categories of personal information we obtain about you (as described above) with the categories of third parties described in this section:
We may share personal information with our corporate affiliates within the Olaplex group for the purposes described in this Privacy Notice. We also share personal information with our professional advisors, such as our lawyers and accountants.
We share certain personal information with third parties that perform services to support our core business functions, Sites and Apps, and internal operations (e.g., hosting and securing our Sites, providing web support to our Sites, processing and fulfilling orders, delivering packages, complying with your request for the shipment of products to or the provision of services by a third party intermediary, sending postal mail and e-mails, analyzing customer data, providing marketing and advertising assistance, processing credit card and debit card payments, investigating fraudulent activity, conducting customer surveys, and providing customer service).
With your consent where legally required, and consistent with applicable law, we may share with third parties (such as social networks and advertising partners)
information about your use of the Sites and Apps, including your browsing actions;
the content you view; how long you view the content; your interactions with the
content; and how you access and use our services.
Some of our Sites have features such as plugins, widgets, or other tools made available by third parties that may result in information being collected or shared between us and the third party. For example, if you use Facebook’s “Like” feature, Facebook may register the fact that you “liked” a product and may post that information on Facebook. Their use of your information by third parties is not governed by this privacy notice.
We and our affiliated and unaffiliated service providers may disclose personal information in response to subpoenas, warrants, court orders, government inquiries or investigations, or to comply with relevant laws and regulations or if otherwise required or permitted to do so by applicable Canada, US, or other foreign law (which may include lawful access by US or foreign courts, law enforcement or other government authorities). We may also disclose information to establish, exercise, or protect the rights of our company, employees, agents, and affiliates; to defend against a legal claim; to protect the safety and security of our visitors; to detect and protect against fraud; and to take action regarding possible illegal activities or violations of our policies.
We may share personal information with another company that buys some, or all, of the assets or shares of Olaplex, and that company may use and disclose personal information for purposes similar to what is described in this notice. Olaplex may also share personal information with prospective purchasers to evaluate the proposed transaction.
We may ask if you would like us to share your information with other third parties who are not described elsewhere in this privacy notice.
How We Protect Your Personal Information
We maintain administrative, technical and physical safeguards designed to protect the personal information you provide against accidental, unlawful or unauthorized access, destruction, loss, alteration, disclosure or use. Personal information is
accessed by authorized Olaplex employees and subcontractors as necessary to
perform their customer service, finance, marketing or other job functions.
Children’s Privacy
Our Sites and Apps are designed for a general audience and are not directed to children. In connection with the Sites and Apps, we do not knowingly solicit or collect personal information from children under the age of 16 without parental consent. If we learn that we have collected personal information from a child under age 16 without parental consent, we will either seek parental consent or promptly delete that information. If you believe that a child under age 16 may have provided us with personal information without parental consent, please contact us as specified in the Communicating With Us section of this privacy notice.
Your Choices
You have the following choices regarding your personal information:
|
Your Options
|
What you need to do
|
|
Accessing Your Personal Information
|
You may request access to your personal information by emailing DataPrivacy@Olaplex.com or by calling 1-800-665-4086. To the extent required by law, upon request, we will grant you access to the personal information we have about you.
|
|
Updating/ Correcting Your Information
|
If you have created an account, you can update, rectify, or correct your name, e-mail address, security questions, and other preferences by logging into your account and clicking on the “My Account” page. You may also contact us to update or correct your information by emailing DataPrivacy@Olaplex.com. If you have given Olaplex permission to store your credit card information and you don’t want merchants like Olaplex to receive your updated credit card information through your credit card issuer’s account updater service, please contact your card issuer.
|
|
Deleting of Your Personal Information
|
You may request that we delete your personal information by emailing DataPrivacy@Olaplex.com. If required by law, we will grant a request to delete information. Please note that in some cases we may be required to retain your personal information to comply with our legal obligations, resolve disputes, enforce our agreements, protect against fraudulent, deceptive, or illegal activity, or for another one of our business purposes.
|
|
Restrict Processing
|
Subject to applicable law, you may request that we restrict the use of your personal information in certain circumstances, such as while we consider another request that you have submitted, for example a request that we update your personal information.
|
|
Object to Processing
|
Subject to applicable law, you may request that we cease to process certain personal information where you object to its use, we do not have an overriding legitimate interest in carrying out the processing and it is not necessary for the establishment, exercise or defence of legal claims.
|
|
Receiving Communications From Us
|
You may choose to provide us with your e-mail address for the purpose of allowing us to send you free newsletters, surveys, offers, and other promotional materials. You can stop receiving promotional e-mails at any time by clicking on the “unsubscribe” link at the bottom of any promotional e-mail that you receive and you can stop receiving our promotional text messages by replying STOP to any text message. You can also edit your e-mail preferences by logging into your account and clicking on the “My Account” page. Please note that you may continue to receive transactional or account-related communications from us.
|
|
Data Portability
|
Subject to applicable law, you may request that we provide a copy of your personal information to you in a structured, commonly used and machine readable format.
|
|
Withdraw Consent
|
Subject to applicable law, where we rely on your consent for the purposes of our use of your personal information you have the right to withdraw your consent at any time. This will not affect the lawfulness of our use of your personal information prior to your withdrawal of consent. You may withdraw your consent at any time by emailing DataPrivacy@Olaplex.com
|
|
Removing Content From Olaplex Public Forums
|
You can request that we remove content or information that you have posted on a public page on some of our Sites by emailing details to Customer Service at DataPrivacy@Olaplex.com. Please note that while we will endeavor to honor your request, our removal of your content or information does not ensure complete or comprehensive removal of that information from our Sites. For example, historical copies, or “caches,” may remain. Where required by applicable law, you may also request that we cease disseminating personal or de-index any hyperlink attached to your name that provides access to personal information.
|
If you are located in the United Kingdom and are unsatisfied with our processing practices or our response to your request, you may lodge a complaint with the Information Commissioner’s Office.
Information for Texas Residents
Sale of Data to Third Parties
We do not sell your personal information in exchange for monetary consideration. We may disclose your information to certain third parties (such as online advertising
services) or allow them to collect your personal information via automated technologies on our Sites for targeted advertising purposes in exchange for non-
monetary consideration. This disclosure may be considered a “sale” or processing of your personal information for targeted advertising under Texas law. You have the right to opt out of the sale of your personal information and targeted advertising as described below.
|
Your Texas Privacy Rights
|
If you are a Texas consumer and interact with us in an individual or household capacity, you have the right to (1) request access to, or correction or deletion of, your personal information as described above; (2) if available in a digital format, to obtain a copy of the personal information you have provided to us in a portable and, to the extent technically feasible, readily usable format (data portability); and (3) to opt out of (a) targeted advertising or (b) the sale of your personal information. We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers, as defined by the Texas Data Privacy and Security Act.
|
|
Identity Verification
|
To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your correction or deletion request. If you have an account with us, we may verify your identity by requiring you to sign in to your account. If you do not have an account with us, we may require you to provide any of the following information: products purchased in your last transaction with Olaplex, amount of your last transaction, and confirmation number of your last transaction.
|
|
Submitting a Rights Request
|
If you are a Texas resident and wish to submit an access, correction or deletion request, fill our the Data Privacy form here or call us at 1-800-665-4086. To opt-out of targeted advertising or the sale of your personal information, click here or call us at 1-800-665-4086. You may have an authorized agent submit a request to opt out of the processing of your personal information for purposes of targeted advertising and the sale of your personal data on your behalf by emailing us at DataPrivacy@Olaplex.com . If you wish to use an authorized agent, we will take steps to verify your identity (as described above) and the authorized agent’s authority to act on your
behalf.
|
|
Appealing a Decision
|
You may appeal our decision with respect to a request you have submitted by emailing us at DataPrivacy@Olaplex.com with the subject line “Privacy Rights Request Appeal”.
|
Information for California Residents
If you are a California consumer, for more information about our privacy practices and your privacy rights, please see our California Consumer Privacy Statement.
Transfer of Information to Other Countries
Olaplex is located in the United States and our service providers may be located in the United States or other countries. As a result, your personal information may be collected, accessed, or stored or processed outside of your jurisdiction, including in a foreign country where privacy laws may be less stringent than the laws in your country. By submitting your personal information to us you agree to the transfer, storage and processing of your personal information in a country other than your country of residence including, but not necessarily limited to, the United States. If you have any questions about the manner in which our service providers treat your personal information, please contact us at the contact information in
the Communicating With Us section below.
Communicating With Us
If you have any questions or complaints about our privacy or security practices, or for information about our use of service providers outside of your jurisdiction, you can contact Olaplex:
Olaplex, Inc.
1187 Coast Village Road #1-520
Santa Barbara, CA
Data Privacy Officer
(800) 665-4086
DataPrivacy@Olaplex.com
We may request certain personal information for the purpose of verifying your identity when you contact us.
If we need, or are required, to contact you concerning any event that involves your personal information we may do so by e-mail, telephone, or mail.
Changes to This Policy
We may revise this privacy notice from time to time. We will notify you of material changes by posting a notice of the update on the Olaplex website.
Information about our Privacy Governance Policies and Practices
We are committed to protecting personal information and have implemented policies and practices that govern our treatment of personal information. These policies and procedures include, among other things, the following:
- We have implemented policies and procedures to protect personal information in our custody nd control from unauthorized access, use or disclosure.
- We have implemented processes to respond to data subject requests and complaints in a timely and effective manner.
- We have implemented a framework for the retention and destruction of personal information to ensure compliance with legal obligations, and to securely destroy personal information once no longer required.
- We have implemented a privacy framework that defines the roles and responsibilities for our employees with respect to the treatment of personal information.
- We provide our employees with privacy training and awareness.
OLAPLEX - Privacy Notice
Last updated and effective date: July 1, 2024
This privacy notice describes how Olaplex, Inc. (“Olaplex”, “we”, “us” or “our”) collects, uses, shares, and protects personal information. It also tells you about the rights and choices you have with respect to your personal information, and how you can reach us to get answers to your questions. You can click on the following links to go directly to the corresponding sections of this privacy notice.
What Our Privacy Notice Covers
This privacy notice covers the “personal information” that Olaplex obtains about you in various contexts, both online and offline, including when you visit our websites where this Privacy Notice is posted (“Sites”), download and use our mobile applications (“Apps”), communicate with us, participate in any of our programs or events, or when you otherwise interact with us. This Privacy Notice does not cover Olaplex’s processing of personal information relating to job applicants, employees or other staff members. Our Sites may include links to third party websites and/or applications.
Please note that we have no control over the privacy practices of websites or applications that we do not own, and we encourage you to review the privacy notices of these third party websites.
How and What We Collect
We obtain information about you from a variety of sources depending on our relationship with you. The following are examples of the types of personal information that we collect directly from you:
|
Activity
|
Examples of Personal Information Collected
|
|
Account Registration
|
When you create an account with us or join our loyalty program, we collect your name, e-mail address, login details and country.
You can choose to save certain information in your account to use for future purchases, such as your shipping addresses, or payment information.
|
|
Quiz
|
When you fill out a quiz on the Sites, such as our Hair Diagnostic Quiz, we will collect information such as your hair concerns, hair texture, and hair damage. This may include some general health and wellness related information.
|
|
Communications With Us
|
When you communicate with us, including contacting us for support (including through the "Chat with us" function on our website), to provide feedback or comments, to participate in a survey, or to make a request or other inquiry, we will collect your name and contact information (such as e-mail address or phone number), as well as any other information that you choose to provide to us. In some cases, we record customer service calls for training and quality assurance.
|
|
Posting in Public Forums
|
If you choose to submit or post information, reviews or photos in a public space on our Sites, or on our social media pages, such as creating a public profile, rating our products, submitting content as part of Olaplex’s online community, or leaving a testimonial about an Olaplex influencer, we collect the information you share. You should use caution before posting or providing any personal information on public Sites.
|
|
Promotional Communications
|
When you sign up to receive promotional communications from us, such as e-mail communications, mobile messages (including text and/or push notifications), and postal mailings, we collect your contact information such as name, email address, mobile phone number and/or mailing address. We may also collect certain information about how you interact with the e-mails and promotional messages we send you to better understand your interests and send you relevant messages. To opt-out of receiving such promotional communications, please see the "Your Choices" section below.
|
|
Refer a Friend
|
When you sign up to our Refer a Friend program, we collect your name and email address, as well as the email address of any friend you choose to refer.
|
|
Purchasing Online
|
When you place an order for a product or service on our Sites, we collect your name, shipping address, payment information, and billing address.
|
|
Sweepstakes, Contests, and Promotions
|
When you participate in a sweepstakes, contest, or other similar campaign or promotion, we collect your name, contact information, and in some cases limited demographic information and content generated by participants. Some campaigns and promotions have a social networking component where you can choose to submit additional information such as social media profiles and handles, photographs, and other content.
|
|
Professional Information
|
If you register for a professional account on the Sites, in addition to your name and contact details, we will collect your professional license number or student identification number, your license expiration date, whether or not you are a salon owner and your salon details, and the details required to verify that you are a professional (such as a copy of a business card, professional website link, photo of professional certification, or professional distributor store and location). If you choose to become a certified Olaplex stylist, we will collect information regarding your enrollment in our Certification course, your responses in each of our Certification quizzes and whether or not you receive an Olaplex Certificate.
|
In addition to the personal information we collect from you directly, we may also obtain information about you from other sources, including third parties, business partners (e.g., salon owners or distributors), our corporate affiliates (i.e., other entities in the Olaplex group), social networks, vendors that provide services on our behalf, or publicly available sources. For example, if you have given Olaplex permission to store your credit card information and your credit card issuer provides an account updater service, we may receive updated credit card information (including credit card number and expiration date) from the credit card issuer.
Information we collect automatically
When you visit our Sites, we may obtain certain information by automated means, such as through cookies, web beacons, web server logs and other technologies. A “cookie” is a text file that websites send to a visitor’s computer or other internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. A “web beacon,” also known as an internet tag, pixel tag or clear GIF, links web pages to web servers and cookies and may be used to transmit information collected through cookies back to a web server. The information we collect in this manner may include your device IP address, unique device identifier, web browser characteristics, device characteristics, operating system, language preferences, referring URLs, media access control, clickstream data, and dates and times of website visits.
When you use our Apps, we also may collect certain information by automated means, such as through device logs, server logs and other technologies. The information we collect in this manner may include the device type used, the mobile operating system, device identifiers and similar unique identifiers, device settings and configurations, IP addresses, battery and signal strength, usage statistics, referring emails and web addresses, dates and times of usage, actions taken on the App, and other information regarding use of the App.
We may use these automated technologies on our Sites and Apps to collect information about your equipment, browsing actions, and usage patterns, including the content you view, how long you view the content, your interactions with the content, and how you access and use our services. These technologies help us (1) remember your information so you do not have to re-enter it; (2) track and understand how you use and interact with our Sites and Apps; (3) tailor the Sites and Apps around your preferences; (4) measure the quality and usability of our Sites and Apps and the effectiveness of our communications; and (5) otherwise manage and enhance our products and services, and help ensure they are working properly. For more information on our use of automated technologies for interest-based advertising and analytics, please see below.
Your browser may tell you how to be notified about certain types of automated collection technologies and how to restrict or disable them. Please note, however, that without these technologies, you may not be able to use all of the features of our Sites and Apps. For mobile devices, you can manage how your device and browser share certain device data by adjusting the privacy and security settings on your mobile device. You may also adjust your preferences by visiting our Cookies Settings/Privacy Preference Centre.
How We Use Your Personal Information
We use personal information when required in order for us to perform our contract with you, or take steps to form a contract with you, such as to:
- provide our products and services;
- fulfill your requests, such as to process your transactions for products and services or to process returns; and
- communicate with you about your orders, subscriptions.
We also use your information in order to pursue our legitimate interests in offering you the best service and customer experience possible, securing our website and customers, and running our business efficiently. For example we process your information to:
- assess your hair needs and send you content that is useful in your hair journey, including product recommendations;
- maintain your account, including offering functionalities such as easy checkout and the ability to save user preferences and transaction history;
- provide our Refer a Friend program and other loyalty schemes or programs;
- respond to and/or follow-up on your issues or feedback, and provide information in response to your requests and inquiries;
- identify you when you visit our Sites and Apps;
- conduct research and analytics, including improving our services and product offerings;
- understand your opinions and provide a forum for discussion, questions, posting of photos and reviews, and sharing of experiences;
- provide and maintain the functionality of our Sites and Apps, including identifying and repairing errors or problems;
- detect security incidents, and investigate, prevent, or take action regarding possible malicious, deceptive, fraudulent, or illegal activity, including attempts to manipulate or violate our policies, procedures, and terms and conditions;
- support core business functions, including maintaining records related to business process management and loss and fraud prevention, and collect amounts owing to us; and
- establish or exercise our legal rights, and defend ourselves against legal claims.
We will obtain your consent to use your personal information for the purposes above, where required by applicable law.
We also use your information so that we can send marketing and advertising communications and other promotional materials such as trend alerts, promotions, sweepstakes, contests, new product launches, and event invitations, and understand how you interact with our communications with you.
We may also use services provided by third-party platforms (such as social media and other websites) to serve targeted advertisements on such platforms to you or others, and we may provide your email address (converted into a unique numerical value) to the platform provider for such purposes. To opt out of this sharing, please contact us as set out under “Communicating with us” below. If you a California or Texas resident, please see the “Information for California Residents” and “Information for Texas Residents” sections below, respectively, to opt out of this sharing. If you are an individual located in the European Union, United Kingdom or Canada, we will not send you marketing and advertising material without your prior consent, unless otherwise permitted to do so by applicable law. In addition, we will only use general health and wellness information that we collect for the purposes of recommending products and treatments, when we have your consent to do so, or are otherwise permitted to do so by applicable law.
Finally, we use your information when necessary in order to comply with and enforce applicable legal requirements, relevant industry standards and Olaplex policies, including our Terms & Conditions.
We also may use the information we collect in other ways for which we provide specific notice at the time of collection or as you otherwise consent.
Typically, we retain your personal information for the period necessary to fulfill the purposes outlined in this privacy notice, unless a longer retention period is required or permitted by law.
Third-Party Analytics Services
We use third-party analytics services on our Sites and Apps, such as Google Analytics and Shopify Reports to help us gather and analyze
information about the areas visited on the Sites (such as the pages most
read, time spent, search terms and other engagement data) in order to
evaluate and improve the user experience and the Sites. The information we obtain through the Sites and Apps may be disclosed to or collected directly by these services using cookies and other automated technologies. For more information about Google Analytics, visit "How Google uses data when you use our partners' sites or apps", (located at www.google.com/policies/privacy/partners). You may adjust your preferences by visiting our Cookies settings/ Privacy Preference Centre.
Interest-Based Advertising
On our Sites and Apps, we and our third party advertising partners may obtain information about your online activities to provide you with advertising about products and services that may be tailored to your interests. This section of our privacy notice provides details and explains how you can exercise certain choices.
You may see our ads on other websites because we use third-party ad services. Through these ad services, we can target our messaging to users considering demographic data, users’ inferred interests and browsing context. These services track your online activities over time and across multiple websites and apps by collecting information through automated means, including through the use of cookies, web server logs, web beacons and other similar technologies. The ad services use this information to show you ads that may be tailored to your inferred individual interests. The information these ad services may collect includes data about your visits to websites that serve Olaplex advertisements, such as the pages or ads you view and the actions you take on the websites or apps. This data collection takes place both on our Sites and Apps and on third-party websites and apps that participate in these ad services. This process also helps us track the effectiveness of our marketing efforts. To learn more and adjust your preferences on
our Site, please visit our Cookies Settings/Privacy Preference Centre.
The Sites and Apps are not designed to respond to “do not track” signals from browsers.
To learn how to opt out of interest-based advertising on your web browser from third-party advertising companies participating in the Digital Advertising Alliance (US) or Digital Advertising Alliance of Canada, please visit https://youradchoices.com/ or https://youradchoices.ca/en/tools for more
information.
How We Share Your Personal Information
In addition to the specific situations discussed elsewhere in this privacy notice, we may disclose or share the categories of personal information we obtain about you (as described above) with the categories of third parties described in this section:
We may share personal information with our corporate affiliates within the Olaplex group for the purposes described in this Privacy Notice. We also share personal information with our professional advisors, such as our lawyers and accountants.
We share certain personal information with third parties that perform services to support our core business functions, Sites and Apps, and internal operations (e.g., hosting and securing our Sites, providing web support to our Sites, processing and fulfilling orders, delivering packages, complying with your request for the shipment of products to or the provision of services by a third party intermediary, sending postal mail and e-mails, analyzing customer data, providing marketing and advertising assistance, processing credit card and debit card payments, investigating fraudulent activity, conducting customer surveys, and providing customer service).
With your consent where legally required, and consistent with applicable law, we may share with third parties (such as social networks and advertising partners)
information about your use of the Sites and Apps, including your browsing actions;
the content you view; how long you view the content; your interactions with the
content; and how you access and use our services.
Some of our Sites have features such as plugins, widgets, or other tools made available by third parties that may result in information being collected or shared between us and the third party. For example, if you use Facebook’s “Like” feature, Facebook may register the fact that you “liked” a product and may post that information on Facebook. Their use of your information by third parties is not governed by this privacy notice.
We and our affiliated and unaffiliated service providers may disclose personal information in response to subpoenas, warrants, court orders, government inquiries or investigations, or to comply with relevant laws and regulations or if otherwise required or permitted to do so by applicable Canada, US, or other foreign law (which may include lawful access by US or foreign courts, law enforcement or other government authorities). We may also disclose information to establish, exercise, or protect the rights of our company, employees, agents, and affiliates; to defend against a legal claim; to protect the safety and security of our visitors; to detect and protect against fraud; and to take action regarding possible illegal activities or violations of our policies.
We may share personal information with another company that buys some, or all, of the assets or shares of Olaplex, and that company may use and disclose personal information for purposes similar to what is described in this notice. Olaplex may also share personal information with prospective purchasers to evaluate the proposed transaction.
We may ask if you would like us to share your information with other third parties who are not described elsewhere in this privacy notice.
How We Protect Your Personal Information
We maintain administrative, technical and physical safeguards designed to protect the personal information you provide against accidental, unlawful or unauthorized access, destruction, loss, alteration, disclosure or use. Personal information is
accessed by authorized Olaplex employees and subcontractors as necessary to
perform their customer service, finance, marketing or other job functions.
Children’s Privacy
Our Sites and Apps are designed for a general audience and are not directed to children. In connection with the Sites and Apps, we do not knowingly solicit or collect personal information from children under the age of 16 without parental consent. If we learn that we have collected personal information from a child under age 16 without parental consent, we will either seek parental consent or promptly delete that information. If you believe that a child under age 16 may have provided us with personal information without parental consent, please contact us as specified in the Communicating With Us section of this privacy notice.
Your Choices
You have the following choices regarding your personal information:
|
Your Options
|
What you need to do
|
|
Accessing Your Personal Information
|
You may request access to your personal information by emailing DataPrivacy@Olaplex.com or by calling 1-800-665-4086. To the extent required by law, upon request, we will grant you access to the personal information we have about you.
|
|
Updating/ Correcting Your Information
|
If you have created an account, you can update, rectify, or correct your name, e-mail address, security questions, and other preferences by logging into your account and clicking on the “My Account” page. You may also contact us to update or correct your information by emailing DataPrivacy@Olaplex.com. If you have given Olaplex permission to store your credit card information and you don’t want merchants like Olaplex to receive your updated credit card information through your credit card issuer’s account updater service, please contact your card issuer.
|
|
Deleting of Your Personal Information
|
You may request that we delete your personal information by emailing DataPrivacy@Olaplex.com. If required by law, we will grant a request to delete information. Please note that in some cases we may be required to retain your personal information to comply with our legal obligations, resolve disputes, enforce our agreements, protect against fraudulent, deceptive, or illegal activity, or for another one of our business purposes.
|
|
Restrict Processing
|
Subject to applicable law, you may request that we restrict the use of your personal information in certain circumstances, such as while we consider another request that you have submitted, for example a request that we update your personal information.
|
|
Object to Processing
|
Subject to applicable law, you may request that we cease to process certain personal information where you object to its use, we do not have an overriding legitimate interest in carrying out the processing and it is not necessary for the establishment, exercise or defence of legal claims.
|
|
Receiving Communications From Us
|
You may choose to provide us with your e-mail address for the purpose of allowing us to send you free newsletters, surveys, offers, and other promotional materials. You can stop receiving promotional e-mails at any time by clicking on the “unsubscribe” link at the bottom of any promotional e-mail that you receive and you can stop receiving our promotional text messages by replying STOP to any text message. You can also edit your e-mail preferences by logging into your account and clicking on the “My Account” page. Please note that you may continue to receive transactional or account-related communications from us.
|
|
Data Portability
|
Subject to applicable law, you may request that we provide a copy of your personal information to you in a structured, commonly used and machine readable format.
|
|
Withdraw Consent
|
Subject to applicable law, where we rely on your consent for the purposes of our use of your personal information you have the right to withdraw your consent at any time. This will not affect the lawfulness of our use of your personal information prior to your withdrawal of consent. You may withdraw your consent at any time by emailing DataPrivacy@Olaplex.com
|
|
Removing Content From Olaplex Public Forums
|
You can request that we remove content or information that you have posted on a public page on some of our Sites by emailing details to Customer Service at DataPrivacy@Olaplex.com. Please note that while we will endeavor to honor your request, our removal of your content or information does not ensure complete or comprehensive removal of that information from our Sites. For example, historical copies, or “caches,” may remain. Where required by applicable law, you may also request that we cease disseminating personal or de-index any hyperlink attached to your name that provides access to personal information.
|
If you are located in the United Kingdom and are unsatisfied with our processing practices or our response to your request, you may lodge a complaint with the Information Commissioner’s Office.
Information for Texas Residents
Sale of Data to Third Parties
We do not sell your personal information in exchange for monetary consideration. We may disclose your information to certain third parties (such as online advertising
services) or allow them to collect your personal information via automated technologies on our Sites for targeted advertising purposes in exchange for non-
monetary consideration. This disclosure may be considered a “sale” or processing of your personal information for targeted advertising under Texas law. You have the right to opt out of the sale of your personal information and targeted advertising as described below.
|
Your Texas Privacy Rights
|
If you are a Texas consumer and interact with us in an individual or household capacity, you have the right to (1) request access to, or correction or deletion of, your personal information as described above; (2) if available in a digital format, to obtain a copy of the personal information you have provided to us in a portable and, to the extent technically feasible, readily usable format (data portability); and (3) to opt out of (a) targeted advertising or (b) the sale of your personal information. We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers, as defined by the Texas Data Privacy and Security Act.
|
|
Identity Verification
|
To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your correction or deletion request. If you have an account with us, we may verify your identity by requiring you to sign in to your account. If you do not have an account with us, we may require you to provide any of the following information: products purchased in your last transaction with Olaplex, amount of your last transaction, and confirmation number of your last transaction.
|
|
Submitting a Rights Request
|
If you are a Texas resident and wish to submit an access, correction or deletion request, fill our the Data Privacy form here or call us at 1-800-665-4086. To opt-out of targeted advertising or the sale of your personal information, click here or call us at 1-800-665-4086. You may have an authorized agent submit a request to opt out of the processing of your personal information for purposes of targeted advertising and the sale of your personal data on your behalf by emailing us at DataPrivacy@Olaplex.com . If you wish to use an authorized agent, we will take steps to verify your identity (as described above) and the authorized agent’s authority to act on your
behalf.
|
|
Appealing a Decision
|
You may appeal our decision with respect to a request you have submitted by emailing us at DataPrivacy@Olaplex.com with the subject line “Privacy Rights Request Appeal”.
|
Information for California Residents
If you are a California consumer, for more information about our privacy practices and your privacy rights, please see our California Consumer Privacy Statement.
Transfer of Information to Other Countries
Olaplex is located in the United States and our service providers may be located in the United States or other countries. As a result, your personal information may be collected, accessed, or stored or processed outside of your jurisdiction, including in a foreign country where privacy laws may be less stringent than the laws in your country. By submitting your personal information to us you agree to the transfer, storage and processing of your personal information in a country other than your country of residence including, but not necessarily limited to, the United States. If you have any questions about the manner in which our service providers treat your personal information, please contact us at the contact information in
the Communicating With Us section below.
Communicating With Us
If you have any questions or complaints about our privacy or security practices, or for information about our use of service providers outside of your jurisdiction, you can contact Olaplex:
Olaplex, Inc.
1187 Coast Village Road #1-520
Santa Barbara, CA
Data Privacy Officer
(800) 665-4086
DataPrivacy@Olaplex.com
We may request certain personal information for the purpose of verifying your identity when you contact us.
If we need, or are required, to contact you concerning any event that involves your personal information we may do so by e-mail, telephone, or mail.
Changes to This Policy
We may revise this privacy notice from time to time. We will notify you of material changes by posting a notice of the update on the Olaplex website.
Information about our Privacy Governance Policies and Practices
We are committed to protecting personal information and have implemented policies and practices that govern our treatment of personal information. These policies and procedures include, among other things, the following:
- We have implemented policies and procedures to protect personal information in our custody nd control from unauthorized access, use or disclosure.
- We have implemented processes to respond to data subject requests and complaints in a timely and effective manner.
- We have implemented a framework for the retention and destruction of personal information to ensure compliance with legal obligations, and to securely destroy personal information once no longer required.
- We have implemented a privacy framework that defines the roles and responsibilities for our employees with respect to the treatment of personal information.
- We provide our employees with privacy training and awareness.
