California Consumer Policy

Olaplex: California Consumer Privacy Statement

Last Updated: July 1, 2023

This California Consumer Privacy Statement (“Statement”) supplements the Privacy Notice and applies solely to California consumers. This Statement does not apply to Olaplex personnel. Sections 2-5 of this Statement do not apply to job applicants.

This Statement uses certain terms that have the meaning given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations (collectively, the “CCPA”).

Notice of Collection and Use of Personal Information

We may collect (and may have collected during the 12-month period prior to the Last Updated date of this Statement) the following categories of personal information about you:

• Identifiers: identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number, professional license number, unique pseudonym, or user alias; telephone number and other forms of persistent or probabilistic identifiers), online identifier, internet protocol address, email address, account name, driver’s license number, and other similar identifiers
• Additional Data Subject to Cal. Civ. Code § 1798.80: physical characteristics or description, credit card number, debit card number, and other financial information, and medical information
• Protected Classifications: characteristics of protected classifications under California or federal law, such as race, gender, disability, and veteran status (if you apply for a job with us and choose to provide this information)
• Commercial Information:commercial information, including records of personal property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies
• Online Activity:Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements
• Geolocation Data
• Professional Information:professional or employment-related information
• Sensory Information: audio, electronic, visual, thermal, and similar information
• Inferences:inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

We may use (and may have used during the 12-month period prior to the Last Updated date of this Statement) your personal information for the purposes described in our Privacy Notice and for the following business purposes specified in the CCPA:

• Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, providing storage, or providing similar services
• Auditing related to a current interaction with you and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance
• Short-term, transient use, including, but not limited to, non-personalized shown as part of your same interaction with us
• Helping to ensure security and integrity
• Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity
• Debugging to identify and repair errors that impair existing intended functionality
• Undertaking internal research for technological development and demonstration
• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us
• Managing career opportunities with Olaplex
• Managing our relationships with current or prospective partners, corporate customers and vendors and other business partner personnel.

To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Collection and Use of Sensitive Personal Information

We may collect (and may have collected during the 12-month period prior to the Last Updated date of this Statement) certain categories of personal information for the purpose of inferring characteristics about consumers. This information, which is considered “sensitive personal information” under California law, may include health information.

In addition to using this category of information for the purpose of inferring characteristics about consumers, we also may use (and may have used during the 12-month period prior to the Last Updated date of this Statement) the information for marketing and consumer research purposes.

Retention of Personal Information

We will retain your personal information as described in the “How We Use Your Personal Information” section of the Privacy Notice. 

Sources of Personal Information

During the 12-month period prior to the Last Updated date of this Statement, we may have obtained personal information about you from the following categories of sources:

• Directly from you, such as when you make a purchase, register for an account, or otherwise communicate with us
• Your devices, such as when you visit our Sites
• Your family or friends, such as when they provide us with your contact information so we can send information that may interest you
• Our affiliates
• Vendors who provide services on our behalf
• Our joint marketing partners
• Online advertising services and advertising networks
• Data analytics providers
• Operating systems and platforms
• Social networks
• Recruiting and talent agencies;
• Job references (such as your employers and teachers);
• Publicly available sources (such as public databases)
• Data brokers (credit bureaus, credit reporting service providers and background check services)

Sale or Sharing of Personal Information

We do not sell or share your personal information in exchange for monetary consideration. We may share your information with certain third parties (such as online advertising services) or allow them to collect your personal information via automated technologies on our Sites for cross-context behavioral advertising purposes in exchange for non-monetary consideration. We share the categories of personal information listed below for online advertising purposes and to provide third-party social network features and functionality on our Sites. This kind of sharing may be considered a “sale” or “sharing” under California law when the personal information is exchanged for non-monetary consideration. You have the right to opt-out of this disclosure of your information, which may be considered a “sale” or “sharing” under California law.

We may sell or share for cross-context behavioral advertising purposes (and may have sold or shared during the 12-month period prior to the Last Updated date of this Statement) the following categories of personal information about you to online advertising services and social networks:

• Identifiers
• Online Activity
• Inferences

We do not have actual knowledge that we sell or share personal information of minors under 16 years of age.

Disclosure of Personal Information

During the 12-month period prior to the Last Updated date of this Statement, we may have disclosed your personal information with certain categories of third parties, as described below.

We may have disclosed the following categories of personal information about you for the business purposes described above to the following categories of third parties: