Privacy IT
Last updated and effective date: 19 November 2021
This privacy notice describes how Olaplex, Inc. (“Olaplex”, “we”, “us” or “our”) collects, uses, shares, and protects personal information. It also tells you about the rights and choices you have with respect to your personal information, and how you can reach us to get answers to your questions. You can click on the following links to go directly to the corresponding sections of this privacy notice.
What Our Privacy Notice Covers
This privacy notice covers the “personal information” that Olaplex obtains about you in various contexts, both online and offline, including when you visit our websites (“Sites”), download and use our mobile applications (“Apps”), communicate with us, or participate in any of our programs or events. This Privacy Notice does not cover Olaplex’s processing of personal information relating to job applicants, employees or other staff members. Our Job Applicant Privacy Notice can be accessed here. Our Sites may include links to third party websites and/or applications. Please note that we have no control over the privacy practices of websites or applications that we do not own, and we encourage you to review the privacy notices of these third party websites.
What We Collect
We obtain information about you from a variety of sources depending on our relationship with you. The following are examples of the types of personal information that we collect:
|
Activity |
Examples of Personal Information Collected |
|
Account Registration |
When you create an account with us or join our loyalty program, we collect your name, e-mail address, login details and location. You can choose to save certain information in your account to use for future purchases, such as your shipping addresses. |
|
Quiz |
When you fill out a quiz on the Sites, such as our Hair Diagnostic Quiz, we will collect information such as your hair concerns, hair texture, and hair damage. This may include some general health and wellness related information. |
|
Newsletter |
When you choose to receive our newsletter, we collect your e-mail address. |
|
Communications With Us |
When you communicate with us, including contacting us for support, to provide feedback or comments, to participate in a survey, or to make a request or other inquiry, we will collect your name and contact information (such as e-mail address or phone number), as well as any other information that you choose to provide to us. In some cases, we record customer service calls for quality assurance.. |
|
Posting in Public Forums |
If you choose to submit or post information, reviews or photos in a public space on our Sites, or on our social media pages, such as creating a public profile, rating our products, submitting content as part of Olaplex’s online community, or leaving a testimonial about an Olaplex influencer, we collect the information you share. |
|
Promotional Communications |
When you sign up to receive promotional communications from us, such as e-mail communications, mobile messages (including text and/or push notifications), and postal mailings, we collect your contact information. We may also collect certain information about how you interact with the e-mails and promotional messages we send you. |
|
Refer a Friend |
When you sign up to our Refer a Friend program, we collect your name and email address, as well as the email address of any friend you choose to refer. |
|
Purchasing Online |
When you place an order for a product or service on our Sites, we collect your name, shipping address, payment information, and billing address. |
|
Sweepstakes, Contests, and Promotions |
When you participate in a sweepstakes, contest, or other similar campaign or promotion, we collect your name, contact information, and in some cases limited demographic information and content generated by participants. Some campaigns and promotions have a social networking component where you can choose to submit additional information such as social media profiles and handles, photographs, and other content. |
|
Professional Information |
If you register for a professional account on the Sites, in addition to your name and contact details, we will collect your license number or student identification number, your license expiration date, whether or not you are a salon owner and your salon details, and the details required to verify that you are a professional (such as a copy of a business card, professional website link, photo of professional certification, or professional distributor store and location). If you choose to become a certified Olaplex stylist, we will collect information regarding your enrollment in our Certification course, your responses in each of our Certification quizzes and whether or not you receive an Olaplex Certificate. |
In addition to the personal information we collect from you directly, we may also obtain information about you from other sources, including third parties, business partners (e.g., salon owners or distributors), our corporate affiliates (i.e., other entities in the Olaplex group), social networks, vendors that provide services on our behalf, or publicly available sources. For example, if you have given Olaplex permission to store your credit card information and your credit card issuer provides an account updater service, we may receive updated credit card information (including credit card number and expiration date) from the credit card issuer.
Information we collect automatically
When you visit our Sites, we may obtain certain information by automated means, such as through cookies, web beacons, web server logs and other technologies. A “cookie” is a text file that websites send to a visitor’s computer or other internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. A “web beacon,” also known as an internet tag, pixel tag or clear GIF, links web pages to web servers and cookies and may be used to transmit information collected through cookies back to a web server. The information we collect in this manner may include your device IP address, unique device identifier, web browser characteristics, device characteristics, operating system, language preferences, referring URLs, media access control, clickstream data, and dates and times of website visits.
When you use our Apps, we also may collect certain information by automated means, such as through device logs, server logs and other technologies. The information we collect in this manner may include the device type used, the mobile operating system, device identifiers and similar unique identifiers, device settings and configurations, IP addresses, battery and signal strength, usage statistics, referring emails and web addresses, dates and times of usage, actions taken on the App, and other information regarding use of the App.
We may use these automated technologies on our Sites and Apps to collect information about your equipment, browsing actions, and usage patterns. These technologies help us (1) remember your information so you do not have to re-enter it; (2) track and understand how you use and interact with our Sites and Apps; (3) tailor the Sites and Apps around your preferences; (4) measure the usability of our Sites and Apps and the effectiveness of our communications; and (5) otherwise manage and enhance our products and services, and help ensure they are working properly.
Your browser may tell you how to be notified about certain types of automated collection technologies and how to restrict or disable them. Please note, however, that without these technologies, you may not be able to use all of the features of our Sites and Apps. For mobile devices, you can manage how your device and browser share certain device data by adjusting the privacy and security settings on your mobile device.
You can learn more about our use of cookies and how you can control your cookie settings by visiting ourCookie Notice
How We Use Your Personal Information
We use personal information when required in order for us to perform our contract with you, or take steps to form a contract with you, such as to:
- provide our products and services;
- fulfill your requests, such as to provide you with products and services or to process returns; and
- communicate with you about your orders, subscriptions.
We also use your information in order to pursue our legitimate interests in offering you the best service and customer experience possible, securing our website and customers, and running our business efficiently. For example we process your information to:
- assess your hair needs and send you content that is useful in your hair journey, including product recommendations;
- maintain your account, including offering functionalities such as easy checkout and the ability to save user preferences and transaction history;
- provide our Refer a Friend program and other loyalty schemes or programs;
- respond to and/or follow-up on your issues or feedback, and provide information in response to your requests and inquiries;
- identify you when you visit our Sites and Apps;
- conduct research and analytics, including improving our services and product offerings;
- understand your opinions and provide a forum for discussion, questions, posting of photos and reviews, and sharing of experiences;
- provide and maintain the functionality of our Sites and Apps, including identifying and repairing errors or problems;
- detect security incidents, and investigate, prevent, or take action regarding possible malicious, deceptive, fraudulent, or illegal activity, including attempts to manipulate or violate our policies, procedures, and terms and conditions;
- support core business functions, including maintaining records related to business process management and loss and fraud prevention, and collect amounts owing to us; and
- establish or exercise our legal rights, and defend ourselves against legal claims.
We also use your information so that we can send marketing and advertising communications and other promotional materials such as trend alerts, promotions, sweepstakes, contests, new product launches, and event invitations, and understand how you interact with our communications with you.
If you are an individual located in the European Union or United Kingdom, we will not send you marketing and advertising material without your prior consent, unless otherwise permitted to do so by applicable law. In addition, we will only use general health and wellness information that we collect for the purposes of recommending products and treatments, when we have your consent to do so, or are otherwise permitted to do so by applicable law.
Finally, we use your information when necessary in order to comply with and enforce applicable legal requirements, relevant industry standards and Olaplex policies, including our Terms & Conditions.
We also may use the information we collect in other ways for which we provide specific notice at the time of collection.
Typically, we retain your personal information for the period necessary to fulfill the purposes outlined in this privacy notice, unless a longer retention period is required or permitted by law.
Third-Party Analytics Services
We use third-party analytics services on our Sites and Apps, such as Google Analytics and Shopify Reports. The information we obtain through the Sites and Apps may be disclosed to or collected directly by these services.
You can learn more about the analytics services we use on our Sites and Apps by visiting ourCookie Notice.
Interest-Based Advertising
On our Sites and Apps, we may obtain information about your online activities to provide you with advertising about products and services that may be tailored to your interests. This section of our privacy notice provides details and explains how you can exercise certain choices.
You may see our ads on other websites because we use third-party ad services. Through these ad services, we can target our messaging to users considering demographic data, users’ inferred interests and browsing context. These services track your online activities over time and across multiple websites and apps by collecting information through automated means, including through the use of cookies, web server logs, web beacons and other similar technologies. The ad services use this information to show you ads that may be tailored to your individual interests. The information these ad services may collect includes data about your visits to websites that serve Olaplex advertisements, such as the pages or ads you view and the actions you take on the websites or apps. This data collection takes place both on our Sites and Apps and on third-party websites and apps that participate in these ad services. This process also helps us track the effectiveness of our marketing efforts.
The Sites and Apps are not designed to respond to “do not track” signals from browsers.
To learn how to opt out of interest-based advertising, please visit www.youronlinechoices.com for more information.
How We Share Your Personal Information
In addition to the specific situations discussed elsewhere in this privacy notice, we disclose personal information in the following circumstances:
We may share personal information with our corporate affiliates within the Olaplex group. We also share personal information with our professional advisors, such as our lawyers and accountants.
We share certain personal information with third parties that perform services to support our core business functions, Sites and Apps, and internal operations (e.g., hosting and securing our Sites, providing web support to our Sites, processing and fulfilling orders, delivering packages, complying with your request for the shipment of products to or the provision of services by a third party intermediary, sending postal mail and e-mails, analyzing customer data, providing marketing assistance, processing credit card and debit card payments, investigating fraudulent activity, conducting customer surveys, and providing customer service).
Some of our Sites have features such as plugins, widgets, or other tools made available by third parties that may result in information being collected or shared between us and the third party. For example, if you use Facebook’s “Like” feature, Facebook may register the fact that you “liked” a product and may post that information on Facebook. Their use of your information is not governed by this privacy notice.
We may disclose personal information in response to subpoenas, warrants, court orders, government inquiries or investigations, or to comply with relevant laws and regulations. We may also disclose information to establish, exercise, or protect the rights of our company, employees, agents, and affiliates; to defend against a legal claim; to protect the safety and security of our visitors; to detect and protect against fraud; and to take action regarding possible illegal activities or violations of our policies.
We may share personal information with another company that buys some, or all, of the assets or shares of Olaplex, and that company may use and disclose personal information for purposes similar to what is described in this notice. Olaplex may also share personal information with prospective purchasers to evaluate the proposed transaction.
We may ask if you would like us to share your information with other third parties who are not described elsewhere in this privacy notice.
How We Protect Your Personal Information
We maintain administrative, technical and physical safeguards designed to protect the personal information you provide against accidental, unlawful or unauthorized access, destruction, loss, alteration, disclosure or use.
Children’s Privacy
Our Sites and Apps are designed for a general audience and are not directed to children. In connection with the Sites and Apps, we do not knowingly solicit or collect personal information from children under the age of 16 without parental consent. If we learn that we have collected personal information from a child under age 16 without parental consent, we will either seek parental consent or promptly delete that information. If you believe that a child under age 16 may have provided us with personal information without parental consent, please contact us as specified in the Communicating With Us section of this privacy notice.
Your Choices
You have the following choices regarding your personal information:
|
Your Options |
What you need to do |
|
Accessing Your Personal Information |
You may request access to your personal information by filling out this form here. To the extent required by law, upon request, we will grant you access to the personal information we have about you. |
|
Updating Your Information |
If you have created an account, you can update your name, e-mail address, security questions, and other preferences by logging into your account and clicking on the “My Account” page. You may also contact us to update your information by filling out this form here. If you have given Olaplex permission to store your credit card information and you don’t want merchants like Olaplex to receive your updated credit card information through your credit card issuer’s account updater service, please contact your card issuer. |
|
Deleting of Your Personal Information |
You may, however, request that we delete your personal information by filling out this form here. If required by law, we will grant a request to delete information. Please note that in some cases we may be required to retain your personal information to comply with our legal obligations, resolve disputes, enforce our agreements, protect against fraudulent, deceptive, or illegal activity, or for another one of our business purposes. |
If you are located in the United Kingdom or European Union and are unsatisfied with our processing practices or our response to your request, you may lodge a complaint with the data protection regulator in your jurisdiction.
Transfer of Information to Other Countries
Olaplex is located in the United States and our service providers may be located in the United States or other countries. As a result, your personal information may be processed outside of the UK and EU, in a jurisdiction that does not provide adequate protection for personal information and without any other appropriate safeguards in place (such as standard contractual clauses). We transfer your personal information outside the UK and EU in order to perform our contract with you or to take steps requested by you in order to enter into a contract. For example, we may transfer your personal information to the United States (or another location) for the purposes of creating your account or providing our services. In certain circumstances, we may be required to transfer your personal information outside the UK and EU to establish if Olaplex has a legal claim, to make a legal claim or to defend a legal claim.
In limited circumstances, we may also rely on your explicit consent to transfer personal information outside the UK and EU. We will inform you of the purposes for which we require your personal information, as well as other supplementary information, at the point at which we obtain your personal information.
Communicating With Us
If you have any questions about our privacy or security practices, you can contact Olaplex:
Olaplex, Inc.
1187 Coast Village Road #1-520
Santa Barbara, CA
Data Privacy Officer
If we need, or are required, to contact you concerning any event that involves your personal information we may do so by e-mail, telephone, or mail.
If you are located in the UK, you may contact our representative at:
DataRep
107-111 Fleet Street
London, EC4A 2AB, United Kingdom
(Please note that any communications must be addressed to DataRep and not Olaplex.)
If you are located in Italy, you may contact our representative at:
DataRep
Viale Giorgio Ribotta 11
Piano 1
Rome, Lazio, 00144, Italy
(Please note that any communications must be addressed to DataRep and not Olaplex.)
If you are located in Spain, you may contact our representative at:
DataRep
Calle de Manzanares 4
Madrid, 28005, Spain
(Please note that any communications must be addressed to DataRep and not Olaplex.)
Changes to This Policy
We may revise this privacy notice from time to time. We will notify you of material changes by posting a notice of the update on the Olaplex website.
