Privacy Policy

We might collect, record, hold, store, use, disclose, receive and/or process (collectively referred to as "Process") Personal Data from you via our websites, forms, apps, devices, L’Oréal products, Brand pages on social media or otherwise. Sometimes you may give this to us directly, such as when you create an account, contact us, or purchase from our websites, apps, stores or beauty salons. Sometimes we collect it indirectly, such as through cookies, or receive it from third parties, including other L’Oréal Group entities.

When we collect Personal Data, we indicate mandatory fields with an asterisk where the Personal Data is necessary for us to:

• - Perform our contract with you;
• - Provide you with a service you have requested; or
• - Comply with legal requirements.

If you do not provide Personal Data marked as mandatory, this may affect our ability to provide products and services to you.

Depending on the purpose, the legal basis for Processing your Personal Data may be:

• Your consent;
• Our legitimate interests, including improving our products and services, preventing fraud and securing our tools;
• The performance of a contract; or
• Legal grounds where Processing is required by law.

For purposes of securing transactions placed through our websites, apps and devices against fraud and misappropriation, we use third-party solutions. Fraud detection may be based on comparisons, association, clustering, prediction, outlier detection, intelligent agents, data-fusion techniques and data-mining techniques.

This process may be completely automated or may involve human intervention where a person makes the final decision. We take reasonable precautions and safeguards to limit access to your Personal Data.

As a result of automated fraud detection, you may experience a delay while a transaction is reviewed or be limited or excluded from a service if a risk of fraud is identified. You have the right to access information on which we base our decision. Please see “Your Rights and Choices” below.

When we send or display personalised communications or content, we may use techniques classified as “profiling”—automated Processing of Personal Data to evaluate or predict personal preferences, interests, economic situation, behaviour, location, health, reliability or movements.

We may centralise and analyse Personal Data collected in the situations described above to evaluate and predict your preferences or interests and send or display communications and content tailored to your needs. You have the right to object to profiling in certain circumstances. Please see “Your Rights and Choices” section below.

We may share your Personal Data within the L’Oréal Group to comply with legal obligations, prevent fraud, secure our tools, improve our products and services, or after obtaining your consent.

Access is provided on a need-to-know basis and, where possible, in a pseudonymised way (not allowing direct identification).

We may share pseudonymised Personal Data with L’Oréal Research & Innovation scientists, including those located outside Singapore, for research and innovation. Where permitted, we may share Personal Data collected through cookies between our Brands to harmonise and update information, conduct statistics and tailor communications.

Please visit the L’Oréal group website, for further details on the L’Oréal Group, its brands and its locations.

We may direct you to dedicated opt-in pages operated by third-party partners for their own direct-marketing purposes.

Those partners Process Personal Data as separate organisations or data controllers under their own terms and privacy policies. You should carefully check their documentation before consenting to the disclosure of your information to that third party.

Trusted third-party providers may Process Personal Data on our behalf.

We only provide them with the information they need to perform the service, and we require that they do not use your Personal Data for any other purpose. We always use our best efforts to ensure that all third parties we work with keep your Personal Data secure. For instance, we may entrust services requiring the Processing of your Personal Data to:

• Digital and e-commerce services;
• Advertising, marketing and social-media services;
• Postal and delivery services;
• IT, platform, hosting, maintenance and support services;
• Payment and credit-reference services;
• Customer-care and vigilance services; and
• Market research, analytics, feedback and customer-relationship services.

The legal basis for this sharing may be our legitimate interests in improving products and services, engaging with you, preventing fraud, securing our tools, designing new features, using appropriate suppliers and ensuring alignment with L’Oréal’s values.

We may also disclose Personal Data to third parties:

• If we sell a business or assets, in which case Personal Data relating to those assets may be disclosed to the prospective buyer;
• If we must comply with a legal obligation, or to enforce or apply our applicable terms and conditions;
• If needed to protect the rights, property or safety of L’Oréal, our customers or employees;
• If we have your consent to do so; or
• If we are otherwise permitted to do so by law.

We may disclose your Personal Data to our partners:

• Where a service is co-created with a partner (for example, a co-branded app), both L’Oréal and the partner may Process your Personal Data for their own purposes under their respective privacy policies;
• By L’Oréal in accordance with this Privacy Policy;
• By the partner acting also as a separate organisation or data controller under its own terms and conditions and privacy policy.
• Social-network content may also place cookies on your device when displayed on our sites/apps; please consult the relevant social network’s cookie policy for more information.

Information that Google collects and shares with us

We may incorporate and use Google services, including advertising and analytics, on our websites and apps. Google may access and use your Personal Data in accordance with Google’s Privacy & Terms.

Information that Facebook collects and shares with us

We may incorporate and use Facebook features and services on our websites and apps. These are governed by the Facebook Data Policy, in which you can find more information about your privacy rights and settings options.

By using this website/app, you may:

- Sign up with your Facebook login. If you do so, you consent to share some of your public profile information with us;

- Use Facebook social plug-ins, such as “like” or “share” our content on the Facebook platform;

- Accept cookies such as the Facebook Pixel, which help us understand your activities, including information about your device, how you use our services, purchases you make and ads you see, whether or not you have a Facebook account or are logged into Facebook.

These features may allow us to display relevant advertisements on Facebook (or Instagram, Messenger or other Facebook services) and measure the effectiveness of our websites, apps and advertising. Facebook does not share your matched personal information with us and deletes the information promptly after the matching process is complete.

We do not offer or sell your Personal Data.

Personal Data may be Processed, transferred to, accessed from and stored outside Singapore. It may also be Processed by L’Oréal employees or service providers operating outside Singapore.

L’Oréal transfers Personal Data outside Singapore only in a secure and lawful way. We take steps to ensure that third parties adhere to the commitments in this Privacy Policy, including reviewing privacy and security standards and entering into appropriate contracts.

For further information, please contact us as per the “Contact” section below.

We keep Personal Data only for as long as needed for the purpose for which we hold it, to meet your needs, or to comply with legal obligations.
To determine the data retention period, we use the following criteria as guidance:

• The duration of our contractual relationship for purchases;
• The duration of a promotional offer;
• The period needed to process an enquiry;
• Until you request account deletion or after a defined period of inactivity;
• Until you unsubscribe, request deletion or after a defined period of inactivity for direct marketing; and
• For as long as necessary to achieve the purpose of cookies.

We may retain some Personal Data to comply with legal or regulatory obligations, as well as to allow us to manage our rights, or for statistical or historical purposes.

When we no longer need Personal Data, it is removed from our systems and records or anonymised so that you can no longer be identified from it.

We are committed to keeping your Personal Data secure and take reasonable precautions to do so. We contractually require trusted third parties who handle Personal Data for us to do the same.

Although we use strict procedures and security features to prevent unauthorised access, internet transmission is not completely secure and we cannot guarantee the security of Personal Data transmitted to our site. Any transmission is at your own risk.

Our websites and apps may contain links to partner, advertiser and affiliate websites. These websites have their own privacy policies, for which we are not responsible or liable. Please check these policies before you submit any Personal Data to these websites.

If we offer social-media login, please be aware that the profile information shared with us depends on your platform settings. Please visit the relevant social media platform and review its privacy policy to understand how your Personal Data is shared and used in this context.

Content submitted to one of our social media platforms can be viewed by the public, so you should be cautious about providing certain Personal Data, e.g. financial information or address details. We are not responsible for any actions taken by other individuals if you post Personal Data on one of our social media platforms, and we recommend that you do not share such information.

To deal with your request, we may require proof of your identity.