Privacy AU

Last updated and effective date: July 24, 2024

This privacy notice describes how Olaplex, Inc. (“Olaplex”, “we”, “us” or “our”) collects, uses, shares, and protects personal information. It also tells you about the rights and choices you have with respect to your personal information, and how you can reach us to get answers to your questions. You can click on the following links to go directly to the corresponding sections of this privacy notice.

What Our Privacy Notice Covers

This privacy notice covers the “personal information” that Olaplex obtains about you in various contexts, both online and offline, including when you visit our websites where this Privacy Notice is posted (“Sites”), download and use our mobile applications (“Apps”), communicate with us, participate in any of our programs or events, or when you otherwise interact with us. This Privacy Notice does not cover Olaplex’s processing of personal information relating to job applicants, employees or other staff members. Our Sites may include links to third party websites and/or applications.

Please note that we have no control over the privacy practices of websites or applications that we do not own, and we encourage you to review the privacy notices of these third party websites.

How and What We Collect

We obtain information about you from a variety of sources depending on our relationship with you. The following are examples of the types of personal information that we collect directly from you:

Activity	Examples of Personal Information Collected
Account Registration	When you create an account with us or join our loyalty program, we collect your name, e-mail address, login details and country. You can choose to save certain information in your account to use for future purchases, such as your shipping addresses or payment information.
Quiz	When you fill out a quiz on the Sites, such as our Hair Diagnostic Quiz, we will collect information such as your hair concerns, hair texture, and hair damage. This may include some general health and wellness related information.
Communications With Us	When you communicate with us, including contacting us for support (including through the "Chat with us" function on our website), to provide feedback or comments, to participate in a survey, or to make a request or other inquiry, we will collect your name and contact information (such as e-mail address or phone number), as well as any other information that you choose to provide to us. In some cases, we record customer service calls for training and quality assurance.
Posting in Public Forums	If you choose to submit or post information, reviews or photos in a public space on our Sites, or on our social media pages, such as creating a public profile, rating our products, submitting content as part of Olaplex’s online community, or leaving a testimonial about an Olaplex influencer, we collect the information you share. You should use caution before posting or providing any personal information on public Sites.
Promotional Communications	When you sign up to receive promotional communications from us, such as e-mail communications, mobile messages (including text and/or push notifications), and postal mailings, we collect your contact information such as name, email address, mobile phone number and/or mailing address. We may also collect certain information about how you interact with the e-mails and promotional messages we send you to better understand your interests and send you relevant messages. For information about how to opt-out of receiving such promotional communications, please see the “Your Choices” section below.
Refer a Friend	When you sign up to our Refer a Friend program, we collect your name and email address, as well as the email address of any friend you choose to refer.
Purchasing Online	When you place an order for a product or service on our Sites, we collect your name, shipping address, payment information, and billing address.
Sweepstakes, Contests, and Promotions	When you participate in a sweepstakes, contest, or other similar campaign or promotion, we collect your name, contact information, and in some cases limited demographic information and content generated by participants. Some campaigns and promotions have a social networking component where you can choose to submit additional information such as social media profiles and handles, photographs, and other content.
Professional Information	If you register for a professional account on the Sites, in addition to your name and contact details, we will collect your professional license number or student identification number, your license expiration date, whether or not you are a salon owner and your salon details, and the details required to verify that you are a professional (such as a copy of a business card, professional website link, photo of professional certification, or professional distributor store and location). If you choose to become a certified Olaplex stylist, we will collect information regarding your enrollment in our Certification course, your responses in each of our Certification quizzes and whether or not you receive an Olaplex Certificate.

In addition to the personal information we collect from you directly, we may also obtain information about you from other sources, including third parties, other users of the website (e.g. when they Refer a Friend), business partners (e.g., salon owners or distributors), our corporate affiliates (i.e., other entities in the Olaplex group), social networks, vendors that provide services on our behalf, or publicly available sources. For example, if you have given Olaplex permission to store your credit card information and your credit card issuer provides an account updater service, we may receive updated credit card information (including credit card number and expiration date) from the credit card issuer.

Information we collect automatically

When you visit our Sites, we may obtain certain information by automated means, such as through cookies, web beacons, web server logs and other technologies. A “cookie” is a text file that websites send to a visitor’s computer or other internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. A “web beacon,” also known as an internet tag, pixel tag or clear GIF, links web pages to web servers and cookies and may be used to transmit information collected through cookies back to a web server. The information we collect in this manner may include your device IP address, unique device identifier, web browser characteristics, device characteristics, operating system, language preferences, referring URLs, media access control, clickstream data, and dates and times of website visits.

When you use our Apps, we also may collect certain information by automated means, such as through device logs, server logs and other technologies. The information we collect in this manner may include the device type used, the mobile operating system, device identifiers and similar unique identifiers, device settings and configurations, IP addresses, battery and signal strength, usage statistics, referring emails and web addresses, dates and times of usage, actions taken on the App, and other information regarding use of the App.

We may use these automated technologies on our Sites and Apps to collect information about your equipment, browsing actions, and usage patterns, including the content you view; how long you view the content; your interactions with the content; and how you access and use our services. These technologies help us (1) remember your information so you do not have to re-enter it; (2) track and understand how you use and interact with our Sites and Apps; (3) tailor the Sites and Apps around your preferences; (4) measure the quality and usability of our Sites and Apps and the effectiveness of our communications; and (5) otherwise manage and enhance our products and services, and help ensure they are working properly. For more information on our use of automated technologies for interest-based advertising and analytics, please see below.

Your browser may tell you how to be notified about certain types of automated collection technologies and how to restrict or disable them. Please note, however, that without these technologies, you may not be able to use all of the features of our Sites and Apps. For mobile devices, you can manage how your device and browser share certain device data by adjusting the privacy and security settings on your mobile device. You may also adjust your preferences by visiting our Cookies Settings/Privacy Preference Centre.

How We Use Your Personal Information

We use personal information when required in order for us to perform our contract with you, or take steps to form a contract with you, such as to:

provide our products and services;
fulfill your requests, such as to process your transactions for products and services or to process returns; and
communicate with you about your orders, subscriptions.

We also use your information in order to pursue our legitimate interests in offering you the best service and customer experience possible, securing our website and customers, and running our business efficiently. For example we process your information to:

assess your hair needs and send you content that is useful in your hair journey, including product recommendations;
maintain your account, including offering functionalities such as easy checkout and the ability to save user preferences and transaction history;
provide our Refer a Friend program and other loyalty schemes or programs;
respond to and/or follow-up on your issues or feedback, and provide information in response to your requests and inquiries;
identify you when you visit our Sites and Apps;
conduct research and analytics, including improving our services and product offerings;
understand your opinions and provide a forum for discussion, questions, posting of photos and reviews, and sharing of experiences;
provide and maintain the functionality of our Sites and Apps, including identifying and repairing errors or problems;
detect security incidents, and investigate, prevent, or take action regarding possible malicious, deceptive, fraudulent, or illegal activity, including attempts to manipulate or violate our policies, procedures, and terms and conditions;
support core business functions, including maintaining records related to business process management and loss and fraud prevention, and collect amounts owing to us; and
establish or exercise our legal rights, and defend ourselves against legal claims.

We will obtain your consent to use your personal information for the purposes above, where required by applicable law.

We also use your information so that we can send marketing and advertising communications and other promotional materials such as trend alerts, promotions, sweepstakes, contests, new product launches, and event invitations, and understand how you interact with our communications with you. We may also use services provided by third-party platforms (such as social media and other websites) to serve targeted advertisements on such platforms to you or others, and we may provide your email address (converted into a unique numerical value) to the platform provider for such purposes. To opt-out of this sharing, please contact us as set out under “Communicating with us” below. If you are an individual located in the European Union, United Kingdom or Canada, we will not send you marketing and advertising material without your prior consent, unless otherwise permitted to do so by applicable law. In addition, if you are located in Australia, we will not send you marketing and advertising material via email, SMS or MMS without your prior consent.

In addition, we will only use general health and wellness information that we collect for the purposes of recommending products and treatments, when we have your consent to do so, or are otherwise permitted to do so by applicable law.

Finally, we use your information when necessary in order to comply with and enforce applicable legal requirements, relevant industry standards and Olaplex policies, including our

We also may use the information we collect in other ways for which we provide specific notice at the time of collection or as you otherwise consent.

Typically, we retain your personal information for the period necessary to fulfill the purposes outlined in this privacy notice, unless a longer retention period is required or permitted by law.

Third-Party Analytics Services

We use third-party analytics services on our Sites and Apps, such as Google Analytics and Shopify Reports to help us gather and analyze information about the areas visited on the Sites (such as the pages most read, time spent, search terms and other engagement data) in order to evaluate and improve the user experience and the Sites. The information we obtain through the Sites and Apps may be disclosed to or collected directly by these services using cookies and other automated technologies. For more information about Google Analytics, visit "How Google uses data when you use our partners' sites or apps", (located at www.google.com/policies/privacy/partners). You may adjust your preferences by visiting our Cookies settings/ Privacy Preference Centre.

Interest-Based Advertising

On our Sites and Apps, we and our third party advertising partners may obtain information about your online activities to provide you with advertising about products and services that may be tailored to your interests. This section of our privacy notice provides details and explains how you can exercise certain choices.

You may see our ads on other websites because we use third-party ad services. Through these ad services, we can target our messaging to users considering demographic data, users’ inferred interests and browsing context. These services track your online activities over time and across multiple websites and apps by collecting information through automated means, including through the use of cookies, web server logs, web beacons and other similar technologies. The ad services use this information to show you ads that may be tailored to your inferred individual interests. The information these ad services may collect includes data about your visits to websites that serve Olaplex advertisements, such as the pages or ads you view and the actions you take on the websites or apps. This data collection takes place both on our Sites and Apps and on third-party websites and apps that participate in these ad services. This process also helps us track the effectiveness of our marketing efforts. To learn more and adjust your preferences on our Site, please visit our Cookies Settings/Privacy Preference Centre.

The Sites and Apps are not designed to respond to “do not track” signals from browsers.

To learn how to opt out of interest-based advertising on your web browser from third-party advertising companies participating in the Digital Advertising Alliance (US) or Digital Advertising Alliance of Canada, please visit https://youradchoices.com/ or https://youradchoices.ca/en/tools for more information.

How We Share Your Personal Information

In addition to the specific situations discussed elsewhere in this privacy notice, we disclose or share personal information in the following circumstances:

We may share personal information with our corporate affiliates within the Olaplex group for the purposes described in this Privacy Notice. We also share personal information with our professional advisors, such as our lawyers and accountants.

We share certain personal information with third parties that perform services to support our core business functions, Sites and Apps, and internal operations (e.g., hosting and securing our Sites, providing web support to our Sites, processing and fulfilling orders, delivering packages, complying with your request for the shipment of products to or the provision of services by a third party intermediary, sending postal mail and e-mails, analyzing customer data, providing marketing and advertising assistance, processing credit card and debit card payments, investigating fraudulent activity, conducting customer surveys, and providing customer service).

With your consent where legally required, and consistent with applicable law, we may share with third parties (such as social networks and advertising partners) information about your use of the Sites and Apps, including your browsing actions; the content you view; how long you view the content; your interactions with the content; and how you access and use our services.

Some of our Sites have features such as plugins, widgets, or other tools made available by third parties that may result in information being collected or shared between us and the third party. For example, if you use Facebook’s “Like” feature, Facebook may register the fact that you “liked” a product and may post that information on Facebook. The use of your information by third parties is not governed by this privacy notice.

We and our affiliated and unaffiliated service providers may disclose personal information in response to subpoenas, warrants, court orders, government inquiries or investigations, or to comply with relevant laws and regulations or if otherwise required or permitted to do so by applicable Canada, US, Australia or other foreign law (which may include lawful access by US or foreign courts, law enforcement or other government authorities). We may also disclose information to establish, exercise, or protect the rights of our company, employees, agents, and affiliates; to defend against a legal claim; to protect the safety and security of our visitors; to detect and protect against fraud; and to take action regarding possible illegal activities or violations of our policies.

We may share personal information with another company that buys some, or all, of the assets or shares of Olaplex, and that company may use and disclose personal information for purposes similar to what is described in this notice. Olaplex may also share personal information with prospective purchasers to evaluate the proposed transaction.

We may ask if you would like us to share your information with other third parties who are not described elsewhere in this privacy notice.

How We Protect Your Personal Information

We maintain administrative, technical and physical safeguards designed to protect the personal information you provide against accidental, unlawful or unauthorized access, destruction, loss, alteration, disclosure or use. Personal information is accessed by authorized Olaplex employees and subcontractors as necessary to perform their customer service, finance, marketing or other job functions.

Children’s Privacy

Our Sites and Apps are designed for a general audience and are not directed to children. In connection with the Sites and Apps, we do not knowingly solicit or collect personal information from children under the age of 16 without parental consent. If we learn that we have collected personal information from a child under age 16 without parental consent, we will either seek parental consent or promptly delete that information. If you believe that a child under age 16 may have provided us with personal information without parental consent, please contact us as specified in the Communicating With Us section of this privacy notice.

Your Choices

You have the following choices regarding your personal information:

Your Options	What you need to do
Accessing Your Personal Information	You may request access to your personal information by emailing DataPrivacy@Olaplex.com or by calling 1-800-665-4086. To the extent required by law, upon request, we will grant you access to the personal information we have about you within a reasonable period after the request is made.
Updating/Correcting Your Information	If you have created an account, you can update, rectify, or correct your name, e-mail address, security questions, and other preferences by logging into your account and clicking on the “My Account” page. You may also contact us to update or correct your information by emailing DataPrivacy@Olaplex.com. Where we refuse to correct your information, we will provide you with a notice outlining the reasons for the refusal (expect to the extent it is unreasonable to do so) and other required information. If you have given Olaplex permission to store your credit card information and you don’t want merchants like Olaplex to receive your updated credit card information through your credit card issuer’s account updater service, please contact your card issuer.
Receiving Communications From Us	You may choose to provide us with your e-mail address for the purpose of allowing us to send you free newsletters, surveys, offers, and other promotional materials. You can stop receiving promotional e-mails at any time by clicking on the “unsubscribe” link at the bottom of any promotional e-mail that you receive and you can stop receiving our promotional text messages by replying STOP to any text message. You can also edit your e-mail preferences by logging into your account and clicking on the “My Account” page. Please note that you may continue to receive transactional or account-related communications from us.
Withdraw Consent	Subject to applicable law, where we rely on your consent for the purposes of our use of your personal information you have the right to withdraw your consent at any time. This will not affect the lawfulness of our use of your personal information prior to your withdrawal of consent. You may withdraw your consent at any time by emailing DataPrivacy@Olaplex.com
Removing Content From Olaplex Public Forums	You can request that we remove content or information that you have posted on a public page on some of our Sites by e-mailing details to Customer Service at DataPrivacy@Olaplex.com. Please note that while we will endeavor to honor your request, our removal of your content or information does not ensure complete or comprehensive removal of that information from our Sites. For example, historical copies, or “caches,” may remain.

If you are located in the United Kingdom and are unsatisfied with our processing practices or our response to your request, you may lodge a complaint with the Information Commissioner’s Office.

If you are located in Australia and are unsatisfied with our response to your request, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) (whose contact details are as set out here).Information for California Residents

If you are a California consumer, for more information about our privacy practices and your privacy rights, please see our

Transfer of Information to Other Countries

Olaplex is located in the United States and our service providers may be located in the United States or other countries As a result, your personal information may be collected, accessed, or stored or processed outside of your jurisdiction including in a foreign country where privacy laws may be less stringent than the laws in your country. Where you are an individual located in Australia, this practically means your personal information may be disclosed to recipients in the United States, Europe and/or the United Kingdom.

By submitting your personal information to us you agree to the transfer, storage and processing of your personal information in a country other than your country of residence including, but not necessarily limited to, the United States.

If you have any questions about the manner in which our service providers treat your personal information, please contact us at the contact information in the Communicating With Us section below.

Communicating With Us

If you have any questions or complaints about our privacy or security practices, or for information about our use of service providers outside of your jurisdiction, you can contact Olaplex:

Olaplex, Inc.

1187 Coast Village Road #1-520

Santa Barbara, CA

Data Privacy Officer

(800) 665-4086

DataPrivacy@Olaplex.com

We may request certain personal information for the purpose of verifying your identity when you contact us.

If we need, or are required, to contact you concerning any event that involves your personal information we may do so by e-mail, telephone, or mail.

Changes to This Policy

We may revise this privacy notice from time to time. We will notify you of material changes by posting a notice of the update on the Olaplex website.

Information about our Privacy Governance Policies and Practices

We are committed to protecting personal information and have implemented policies and practices that govern our treatment of personal information. These policies and procedures include, among other things, the following:

We have implemented policies and procedures designed to protect personal information in our custody and control from unauthorized access, use or disclosure.
We have implemented processes to respond to data subject requests and complaints in a timely and effective manner.
We have implemented a framework for the retention and destruction of personal information to ensure compliance with legal obligations, and to securely destroy personal information once no longer required.
We have implemented a privacy framework that defines the roles and responsibilities for our employees with respect to the treatment of personal information.
We provide our employees with privacy training and awareness.