FLAWLESS By Bree is committed to making sure your information is safe when you shop online. Our Privacy Policy explains how FLAWLESS By Bree collects, uses, stores, and shares your information.

​

1. What information do we collect about you?

Information we collect directly from you

We collect information about you when you use our Sites, visit our Stores, purchase our Products, and engage in Communications with us, including when you register an account, update your profile, access our content, make a purchase, participate in a promotion or incentive program, participate in our loyalty program, or engage in our customer support. This information includes:

• Basic Identifying Information. Information such as your full name, signature, postal address, e-mail address, phone number, account name, username, and other similar identifiers.

• Device Identifier and other Unique Identifiers. Information we collect automatically when you engage with our Sites and Products, or engage in Communications with us, such as your device identifier, internet protocol (IP) address, cookies, beacons, pixel tags, mobile ad identifier, and other unique identifiers. For more information, see Cookies and Related Tracking Technologies.

• Health Information. Information such as your skin condition, scalp condition, and related information.

• Payment Information. Information such as your payment information, credit card information, and other forms of payment to permit you to purchase our Products. We may collect this information directly from you and from our Third Party partners.

• Internet or Other Network Activity. Information such as your browsing or search history, and other information regarding your interactions with our Sites, emails, and advertisements. We gather this information automatically from your devices, from you directly, and from our Third Party partners.

• Geolocation Information. Information that permits us to determine your general location, such as zip code, so that we can best determine the closest Store to your location, or where to ship our Products. We gather this information directly from you when you engage with our Sites.

• Commercial Information. Information such as the nature of the Products you’ve considered on our Sites and in our Stores, your preferences, your purchase history, your loyalty account history, and related information concerning your commercial activity. We obtain this information directly from you when you engage with our Stores, Sites, and Products.

• Demographic Information. Information such as number of members in your household, age, gender, and related demographic information. We obtain this information directly from you and from our Third Party partners.*

• User Content. Information such as your Communications with us and any other content you provide, such as social media profiles, photographs, images, videos, survey responses, comments, product reviews, testimonials, and other content.

• Biometric Information. Information such as your facial geometry when you use our Virtual Beauty Try-On feature or related features through our Sites, Stores, or Products. We obtain this information directly from you and from our Third Party partners.

• Audio and Visual Information. Information such as photographs, images, videos, and recordings of your voice (such as when we record customer service calls for quality assurance). We obtain this information directly from you and from our Third Party partners.

• Inferences. Information such as inferences we may draw on the above information and your interaction with us. We obtain this information directly from you, automatically from your devices, and from our Third Party partners.

Information we collect automatically from you

When you use our Sites, Products, and engage in Communications with us, we may collect certain information from you automatically, including:

• Usage Information. Information such as the features you use on our Sites, the links you click and the items you view, pages you visit, emails and advertisements you view, Products you view and purchase, the time of day you browse, and your referring and exiting pages. We may collect this information through a variety of tools, including but not limited to session replay software.

• Device Data. Information about the device you are using, including but not limited to the type of device you use, the temporary or persistent unique device identifier (UDID) placed by us or our service providers, the IP address of your device, your operating system, the type of browser you use, and data from the way you use our Sites.

• Location Data. Information such as imprecise location data (such as location derived from an IP address or data that indicates a city or postal code level). Our Sites may also collect information about the location of your device. Your device should require you to provide permission before our Sites obtain precise geolocation information from a browser's geolocation API or from technologies like GPS, WiFi, and/or cell towers. We and our service providers may use this approximate location and/or precise geolocation information, along with other information submitted by you, to provide you with location-based services like local Store information, search results, special offers, and other personalized content. Most browsers and mobile devices allow users to enable or disable precise geolocation using pop-ups or controls located in the settings menu.

• Cookies. Cookies are small data files stored on your device that act as a unique tag to identify your browser. We use two types of cookies on our Sites: session cookies and persistent cookies. Session cookies make it easier for you to navigate our Sites and expire when you close your browser. Persistent cookies help with personalizing your experience, remembering your preferences, and supporting security features. Additionally, persistent cookies allow us to bring you advertising both on and off the Sites. Persistent cookies may remain on your device for extended periods of time, and generally may be controlled through your browser settings.

• Pixels (also known as web beacons). This is a type of code that is embedded in a website, video, email, or advertisement that sends information about your use to a server. There are various types of pixels, including image pixels (which are small graphic images) and JavaScript pixels (which contains JavaScript code). When you access a website, video, email, or advertisement that contains a pixel, the pixel may permit us or a separate entity to drop or read cookies on your browser. Pixels are used in combination with cookies to track activity by a particular browser on a particular device. We may incorporate pixels from separate entities that allow us to track our communications, bring you advertising both on and off the Sites, and provide you with additional functionality, such as the ability to connect our Sites with your social media account.

• App Technologies. Information concerning technologies included in our mobile applications and Sites that are not browser-based like cookies and cannot be controlled by browser settings. For example, our Sites may include SDKs, which is code that sends information about your use to a server. These SDKs allow us to track our Communications, bring you advertising both on and off the Sites, and provide you with additional functionality, such as the ability to connect our Sites with your social media account.

Information we collect from our Third Party partners

From time to time, we may collect information about you from Third Parties, including:

• Partners, such as those that offer co-branded Products, sell or distribute our Products, or engage in joint marketing or advertising activities.

• Publicly available sources, such as data in the public domain and through widely available media sources.

• Service providers, such as those who performance services on our behalf for advertising, analytics, payment processing, delivery, fulfillment, fraud prevention and security, and other related services.

2. Cookies and Related Tracking Technologies

Cookies help us improve the Sites by providing us with information about which parts of the Sites are most popular, enabling us to analyze technical and navigational information about the Sites, and helping us to detect and prevent fraud. We also use cookies and other data collection tools (such as web beacons and server logs) to help improve your experience with the Sites. For example, we use analytic service providers to help analyze how users use the Sites. These tools use cookies to collect standard Internet log information and visitor behavior information in an anonymous form. The information generated by the cookie about your use of the Sites (including IP address) is transmitted to our data collection tool service providers. This information is then used by us to evaluate visitors’ use of the Sites.

We use analytics services, such as Google Analytics, to help us understand how users access and use the Sites, as well as help us understand market trends and popularity of our products and services. As part of this process, we may incorporate tracking technologies into our own Sites, and some of our Communications. You can learn more about Google Analytics by visiting How Google uses information from sites or apps that use our services.

Session Replay

Our Sites may, from time to time, utilize technology often known as “session replay” technology that allows FLAWLESS By Bree to understand how users interact with the Sites, including replays of their interaction with our Sites. By using our Sites, you represent you have read this disclaimer and understand that FLAWLESS By Bree may use this session replay technology to record how you interact with our Sites, which may be used by FLAWLESS By Bree for its own internal analytical purposes, and to improve and enhance our Sites.

3. How do we use your information?

We use your information to:

• Fulfill your requests, such as Product orders and responses to email questions;

• Support our core business functions, such as order fulfillment, internal business process management, authentication, loss and fraud prevention, and public safety functions;

• Communicate with you about our Products and promotions;

• Provide the Sites and Stores to you;

• Improve our Sites, Products, and Stores;

• Maintain your FLAWLESS By Bree account and;

• Improve our marketing and promotions;

• Statistically analyze the usage of our Sites, Communications, and Stores;

• Contact you;

• Resolve disputes, investigate problems, and enforce our terms;

• Help diagnose problems with our server, manage our Sites, and to enhance our Products; and

• Perform a business transaction, such as a merger, acquisition, sale of assets, bankruptcy, or related transactions.

4. How do we disclose your information?

We may disclose your information in the following circumstances:

• With Your Consent. We may disclose or make available your information with your consent, which may be obtained in writing, online, through “click-through” agreements, when you accept our terms for our Sites, orally (including over the telephone), or by other means.

• With Service Providers & Business Partners. We may disclose or make available your information with Third Parties, such as service providers, affiliates and subsidiaries, business partners, credit / debit card processing partners, partners that facilitate billing, shipping, and customer service, third-party auditors and law firms, marketing and advertising networks (including those that provide ad measurement services), internet service providers, data analytics providers, companies that help debug and identify and repair errors that may impair the functionality of our Sites, and third parties that help protect against malicious, deceptive, fraudulent, or illegal activity. We may also disclose your information in connection with financial products or services related to our business, such as private label credit cards. We may also disclose your information in connection with co-branded Product offerings.

• In A Business Transfer. We may disclose or make available your information as part of a business transaction, such as a merger or acquisition, joint venture, corporate reorganization, financing, or sale of company assets, or in the unlikely event of insolvency, bankruptcy, or receivership, in which such information could be transferred to third parties as a business asset in the transaction.

• For Legal Process & Protection. We may disclose or make available your information to satisfy any law, regulation, legal process, governmental request, or where we have a good faith belief that access, use, preservation or disclosure of such information is reasonably necessary to: (1) enforce or apply agreements, or initiate, render, or bill for use of the Sites; (2) protect our rights or interests, property or safety or that of others; (3) in connection with claims, disputes, or litigation - in court or elsewhere; (4) protect users of our Sites and other carriers, providers, or partners from fraudulent, abusive, unlawful, or otherwise improper use of our Sites; (5) facilitate or verify the appropriate calculation of taxes, fees, or other obligations due to a local, state, or federal government.

The use and disclosure of "Virtual Beauty Information" is governed by the Virtual Beauty Try-On. Additional Terms and Conditions in the Site Terms & Conditions.

5. How do we secure your information?

Although no system or website can guarantee the complete security of your information, we take all commercially reasonable steps to ensure your information is protected in accordance with all applicable laws and regulations, as appropriate to the sensitivity of your information.

6. How long do we keep your information?

We keep your information for as long as is necessary in accordance with the purpose for which it was collected, our business needs, and our legal and regulatory obligations. If we dispose of your information, we will do so in a way that is secure and appropriate to nature of the information subject to disposal.

7. Links to third party sites

Our Sites may include links to websites/applications that are owned or operated by Third Parties. Please note these links are provided for your convenience and information and may operate independently from us and have their own privacy policies and/or notices. This Privacy Policy does not cover the practices of those websites/applications. We encourage you to review the privacy policies on those websites/applications to see how they collect and use information.

8. Do Not Track

Our Sites may, from time to time, collect information about your online activities, over time and across our different websites. When you use our Sites, third parties may also collect information about your online activities, over time and across different internet websites, online or cloud computing services, online applications, or mobile applications. Some browsers support a “Do Not Track” feature, which is intended to be a signal to websites that you do not wish to be tracked across different websites you visit. Our Sites do not currently change the way they operate based upon detection of a “Do Not Track” or similar signal. Our Sites do, however, recognize a global privacy signal, as outlined in Your Choices below.

9. Social Media Widgets and Single Sign-On Services

Our Sites use third-party social media widgets such as buttons or similar mechanisms from Facebook, Twitter, Instagram, Pinterest, YouTube, and/or FourSquare. Such third-party features may collect information about you, like your IP address and the page(s) you visit on our Sites. They may also place cookies on your device. These social media widgets are either hosted by a Third Party or by our Sites. Your interactions with those features are governed by the privacy policies of the third-party social media networks that provide them.

10. Virtual Beauty Information

The collection of “Virtual Beauty Information” is governed by the Virtual Beauty Try-On. Additional Terms and Conditions in the Site Terms & Conditions.

11. Children

Our Sites are directed to adults and we do not knowingly collect the personal information from children under the age of 13. If you are the parent or guardian of a child under the age of 13, and you believe your child has provided their personal information to us, please contact us.

12. Your Choices

US State Rights

Depending on where you live, you may have the following rights:

• Right to Know / Access / Portability. Request that we confirm whether we are processing your information, obtain details about the processing activities, and obtain a copy of such information, subject to exceptions.

• Right to Delete. Request that FLAWLESS By Bree delete your information, subject to exceptions.

• Right to Correct. Request that FLAWLESS By Bree correct your information, subject to exceptions. Regardless of where you live, you may view and correct your account information by logging into your account online or contacting us and requesting such changes.

• Limit the Processing of Sensitive Personal Information. If you live in California, you have a right to ask that FLAWLESS By Bree limit how it processes your sensitive personal information, subject to exceptions.

• Opt-Out of Selling, Sharing, or Targeted Advertising. Our use of certain online tracking technologies may be considered a “sale”, “sharing”, or “targeted advertising” under applicable law. You can opt-out of this type of activity by clicking the “Do Not Sell or Share My Personal Information” link at the bottom of our Sites. Because we may also engage in a “sale”, “sharing” or use of your personal information for targeting advertising purposes outside of the context of online tracking technologies as well, you may separately opt-out of this process by submitting the request via the link below. Finally, you may exercise your right to opt-out of the online tracking technologies process by using the Global Privacy Control (GPC) (on the browsers and extensions that support such a signal). If you choose to use the GPC signal, you will need to turn it on for each supported browser extension you use.

• Right to Appeal. Appeal any denial of a Right to Access, Delete, Correct, or Opt-Out, as described above.

• To exercise all of your above Choices, please click on the Data Request.

• Additional Health Data Rights. If you are a resident of Nevada, Connecticut, or Washington, you have additional rights concerning your health data, including the right to submit a request to know or access, deletion, and the right to appeal any denial of these rights. You may exercise these rights by clicking on the Health Data Request.

​

13. California Privacy Notice

CALIFORNIA CONSUMER PRIVACY ACT

Definitions

• Personal information. Information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you or your household.

• Sensitive personal information. Social security number, driver’s license number, state identification card, passport number, account log-in and password, financial account and password, debit or credit card number and access code, precise geolocation information, race, ethnic origin, religious or philosophical beliefs, union membership, the content of your mail, email or texts other than those communications with us, genetic data, biometric information, health information, and information that concerns your sex life or sexual orientation.

• Sell, sale, or sold. Selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or other means, your personal information to a third party for money or other valuable consideration.

• Share, shared, or sharing. Sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or other means, your personal information to a third party for cross-context behavioral advertising, whether for monetary or other valuable consideration.

California Rights

You have a right to submit requests to know/access, delete, correct, opt-out of the sale / sharing of your personal information, and to limit the processing of your sensitive personal information. To submit such requests, please see Your Choices. You have a right to exercise the above rights without being discriminated against.

Notice of Collection

Below is a list of the categories of personal information FLAWLESS By Bree has collected about California residents in the 12 months preceding the date this Privacy Policy was last updated. This list includes information about: (1) the categories of sources from which the information was collected; (2) the business or commercial purpose for collecting, selling, or sharing the information; and (4) the categories of Third Parties with whom we share the information.

• Identifiers (Includes Sensitive Personal Information): Includes information such as your name, signature, alias, postal address, and telephone number, unique personal identifier, online identifier, IP address, account log-in, email address, account name, driver’s license number. Sensitive personal information within this category includes your social security number, driver’s license number, state identification number.

• Personal Characteristics (Includes Sensitive Information): Includes information such as your age, race, ethnicity, gender expression, and gender identity. Sensitive personal information within this category includes information about your race.

• Financial Information (Includes Sensitive Information): Includes information such as your FLAWLESS By Bree account name and log-in information, bank account number and access code, and credit card and debit card number and access code. Sensitive personal information in this category includes your account log-in and password, bank account number and access code, and credit card and debit card number and access code.

• Internet or other Electronic Network Activity Information: Includes information described above.

• Biometric information, such as your face or hand geometry.

• Commercial Information, such as records of your Products considered and purchased.

• Geolocation Information, such as your zip code and general location.

• Audio, Electronic, Visual, Thermal, and Related Information: Includes information such as photographs, video recordings, recorded messages, and in some cases personal temperature where appropriate.

• Inferences, derived from the above information.