Privacy Policy

This privacy policy describes how we collect, use, disclose, and protect our customers' personal information. It also tells you about the rights and choices you have with respect to your personal information, and how you can reach us to get answers to your questions.

What Our Privacy Policy Covers

This privacy policy covers our customer and applies to the personal information we obtains in various contexts, both online and offline, including when you access or use our websites or services that link to this privacy policy; visit us in our stores, communicate with us; shop with our third-party partners; engage with us on social media; or participate in any of our programs or events.

We may provide different or additional privacy notices in connection with certain activities, programs, and offerings. We may also provide additional "just-in-time" notices that may supplement or clarify our privacy practices or provide you with additional choices regarding your personal information.

Our websites may include links to websites and/or applications operated and maintained by third parties. Please note that we have no control over the privacy practices of websites or applications that we do not own. We encourage you to review the privacy practices of those third parties.

What Personal Information We Collect

The types of personal information we obtain about you depends on how you interact with us and our products and services. When we use the term "personal information," we are referring to information that identifies, relates to, describes, or can be associated with you. The following are the categories and specific types of personal information that we collect:

Basic Identifying Information

Including your full name, alias, postal address, e-mail address, phone number, date of birth, account name, signature, username, social media handle, or other similar identifiers.

Government-Issued Identifiers

Including your driver's license number or other similar government identifier.

Device Information and Other Unique Identifiers

Including device identifier, internet protocol (IP) address, cookies, beacons, pixel tags, mobile ad identifier, or similar unique identifiers.

Internet or Other Network Activity

Including browsing or search history and information regarding your interactions with our websites, emails, or advertisements.

Geolocation Data

Including information that permits us to determine your location, such as if you manually provide location information or enable your mobile device to send us precise location information.

Payment Information

Including credit or debit card numbers.

Commercial Information

Including products or services you have purchased, returned, exchanged, or considered; preferences; and rewards activity related to membership.

Health and Medical Information

Including information you choose to provide regarding skin conditions or medications in connection with a beauty service, in-store digital experience, or product recommendation.

Demographic Data

Including age, gender, race, ethnicity, estimated income, and household information.

User Content

Including your communications with us and any other content you provide (such as social media profiles, photographs, images, videos, survey responses, comments, product reviews, testimonials, and other content).

Audio and Visual Information

Including photographs, images, videos, and recordings of your voice.

Inferences

Inferences drawn from or created based on any of the information identified above.

How We Collect Your Personal Information

We collect personal information about you from various sources.

Directly from You

We collect personal information you provide, such as when you make a purchase; register for an account or create a profile; contact us; respond to a survey; book a reservation; make an appointment for in-store or virtual services; interact with us in store; respond to a survey; apply for a job; or sign up to receive emails, text messages, and/or postal mailings.

Using Online Tracking Technologies and Other Automatic Data Collection Technologies

When you visit our websites, use our Mobile Apps, open or click on emails we send you, or interact with our advertisements, we or third parties we work with automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies. For more information, please see "Cookies and Similar Online Tracking Technologies" section below.

From Our Business Partners

We obtain information from businesses that we have partnered with and other partners we choose to collaborate or work with. If you apply for and/or use a credit card, based on your direction to intentionally disclose the information, we may receive Basic Identifying Information, Payment Information, Demographic Data, and Commercial Information from the credit card issuer. Additionally, if you have given us permission to store your Payment Information, your credit card issuer may provide us with updated Payment Information (including credit card number and expiration date) in connection with the credit card issuer's account updater service.

From Social Media Platforms and Networks

If you interact with us on social media or use features, such as plugins, widgets, or other tools made available by social media platforms or networks (including Instagram, Facebook, Twitter, Google, YouTube, and Pinterest) in connection with our websites or Mobile Apps, we collect information that you disclose to us, or that the social media platforms disclose to us. For more information about the privacy practices of those social media platforms, please review the privacy policies and settings of the social media platforms and networks that you use.

From Other Sources

For example, we may obtain information about you from other sources, such as data analytics providers, marketing or advertising service providers, fraud prevention service providers, vendors that provide services on our behalf, or publicly available sources. We also create information based on our analysis of the information we have collected from you.

Cookies and Similar Online Tracking Technologies

We and our third–party partners and service providers (such as advertising and analytics providers) use pixels, web beacons, software developer kits, third–party libraries, cookies, and other similar online tracking technologies (collectively, "online tracking technologies") to gather information when you interact with our websites, Mobile Apps, and email communications. Some online tracking technologies help us maintain the security of our websites and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We also permit third parties and service providers to use online tracking technologies on our websites and Mobile Apps for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, or to send abandoned shopping cart reminders (depending on your communication preferences). The third parties and service providers use their technology to provide advertising about products and services tailored to your interests which may appear either on our websites or on other websites.

To the extent these online tracking technologies are deemed to be a "sale" / "sharing" (which includes targeted advertising, as defined under the applicable laws) under the laws, you can opt-out of these online tracking technologies. Please note, some features of our websites may not be available to you as a result.

How We Protect Your Personal Information

Personal information is maintained on our servers or those of our service providers, and is accessible by authorized employees, representatives, and agents as necessary for the purposes described in this privacy policy.

We realize that individuals trust us to protect their personal information. We maintain reasonable and appropriate physical, electronic, and procedural safeguards designed to help protect your personal information. While we attempt to protect your personal information in our possession, no method of transmission over the internet or security system is perfect, and we cannot promise that information about you will remain secure in all circumstances.

For your convenience, our websites and Mobile Apps include functionality that allows you to remain logged in so that you do not have to re-enter your password each time you want to access your account. If you choose to remain logged in, you should be aware that anyone with access to your device will be able to access and make changes to your account and may be able to make purchases through your account. For that reason, if you choose to remain logged in, we strongly recommend that you take appropriate steps (such as enabling the "Passcode Lock" security feature on your mobile device) to protect against unauthorized access to, and use, of your account. Please also notify us as soon as possible if you suspect any unauthorized use of your account or password.

Children's Privacy

Our website is not intended for or directed to children under the age of 13. We do not knowingly collect personal information directly from children under the age of 13 without parental consent. If we become aware that a child under the age of 13 has provided us with personal information, we will delete the information from our records.

Communicating With Us

If you have any questions about our privacy or security practices, you can contact General Counsel by mail, telephone, or e-mail.

Changes To This Policy

We may revise this privacy policy from time to time. We will provide additional notice to you if we make any changes that materially affect your privacy rights.