Summary Privacy Notice & Notice at Collection

Updated March 1, 2025

This brand is part of the L'Oréal Travel Retail Americas, Inc. family of brands and brand Sites ("L'Oréal", "us", "our" or "we"). This Summary Privacy Notice supplements Our Privacy Notice by providing key information to You about how We collect and use personal information about You. This Summary Privacy Notice is for consumers in the United States only.

Our detailed Privacy Notice describes the types of personal information We collect from You directly, from Your interactions with Us (on Our websites, mobile apps, and digital tools (collectively, "Sites") and advertising), and from third parties; how We use it; how We protect it; and Your rights as Our consumer.

Visitors from other countries should visit the L'Oréal brand site for Your part of the world. There is a separate privacy notice located on the L'Oréal Careers website for job applicants. Our contact details are available at the end of the detailed Privacy Notice in the "How to Contact Us" section.

What Types of Personal Information Do We Collect and for What Purposes?

The personal information that We collect about a specific person will depend on, for example, Our relationship or interaction with that person. We collect personal information that You provide to Us, from Your engagement with Our brand Sites and platforms, advertising, media; from third parties who have Your permission to share it with Us; and automatically collected (such as through cookies and other similar technologies).

We collect the following categories of personal information:

Categories of Personal Information	Examples
Identifiers	Name Postal Address Telephone number Mobile number Online identifiers (e.g., Cookie IDs/MAC address) Internet Protocol address E-mail address Account name/username Social handle or moniker Device identifiers
Internet or similar network activity	Browsing history Account login information Search history Information on Your interaction with a website, application, or advertisement and related information Smart device and sensor data
Payment Information	Credit or debit card information Information to process payments and prevent fraud
Legally Protected Characteristics	Characteristics of protected classes or groups under state or federal law. For example: Age (40 and over) Race, ethnicity, national origin Sex, gender identity, gender expression Marital status
Purchasing Information	Products or services purchased, obtained, or considered Other purchasing or consuming histories or tendencies (e.g., beauty routines, beauty concerns) Loyalty activity and redemption Account information Customer service records Health and safety-related information User-generated content (e.g, product testimonials, ratings and reviews, etc.)
Geolocation Data	Geolocation data includes information such as the following: General location information indicating the general physical location of you or your device (e.g., IP address or zip code) Precise information about your location if you allow us (or a third party who provides it to us) to collect it
Audio Visual Information	Photographs that you upload or share with us CCTV video recorded at our facilities Call center recordings Video images
Professional or employment-related personal information	Career/profession Professional credentials (e.g., professional license)
Other Information Considered Personal Information* *Some information in this category is addressed in other categories as well.	Name Contact details such as telephone number and address Age Signature (including electronic signature) Physical characteristics or descriptions Payment information Address Driver's license or state ID number Education Employment Medical/health information (including, as applicable, personal information defined as 'consumer health data' by the Washington State My Health My Data Act and Nevada SB 370).
Inferences drawn from any of these personal information categories	Inferences based on personal information about an individual to create a summary about, for example: Beauty and related preferences Characteristics Behaviors on and off Site Purchase patterns Demographics Household information

We combine information that We collect via one method (e.g., from a website or Our digital advertising) with another method (e.g., an offline event) for the purposes outlined in the Privacy Notice. For example, if You have an account with Us and are logged in, or otherwise provide personal information like an email, We associate information We observe about You with other information You or a third party provide to Us. We do this to get a more complete view of Your preferences for Our beauty products and services, which, in turn, allows Us to serve You better and with more customization and better beauty products.

How we collect and use this information within the L'Oréal family of brands is summarized below:

Fulfil Your requests for products or services, manage Your orders, and process payments	Administer and manage Your account or loyalty program membership
To send You marketing communications, which may be tailored to Your 'beauty profile' based on what personal information we know about You and Your preferences	To provide tailored and personalized content, services, advertisements and offers, including based on Your beauty characteristics and preferences. This includes processing personal information using automated means to generate personalized outputs, such as product recommendations.
Post Your content and reviews on the Sites, our social media pages, and related-third party sites that retail or feature Our brands and products	Manage any competitions, promotions, surveys, sweepstakes, giveaways, or contests You choose to enter
To manage, improve, and develop Our business. This includes improving and developing products and services; enhancing Our data modeling and analytics to provide better results to You and other users of Our products and services; and conducting research about Our products, services, and Our customers. This includes fine-tuning or training models in support of the purposes outlined in the Privacy Notice.	Verify Your identity and detect and prevent fraud, and to maintain the security of Our products, Sites, and systems
To communicate with You, answer questions and otherwise interact with You, and create better experiences	Provide You with requested services or to complete transactions You request
To collect, evaluate, and monitor reports of undesirable events during or after use of Our products	Support Our everyday operations, including to meet risk, legal, and compliance requirements
To enforce Our terms, and to protect Our rights, property, and safety, or the rights, property, and safety of others	For corporate governance, including mergers, acquisitions, and divestitures, and to otherwise comply with applicable laws

Our Sites and services may, including using artificial intelligence (such as machine learning, deep learning, computer vision, or generative AI) (collectively, "AI"), process personal information automatically to generate responses, gain insights, and for other purposes disclosed in this Privacy notice. For example:

• As part of a product or service We provide to You: When You interact with certain of Our Sites and Our beauty tools, such as Virtual Try On tools and other virtual beauty tools available on our Sites, We collect inputs directly from You, as well as inputs We observe or collect automatically or obtain from third-parties, to generate personalized outputs.

• Operations. We leverage a variety of automated technologies, including AI, for Our operational purposes. For example, We leverage automated technologies to identify and classify the reason a customer reaches out to Us, to help Our customer service agents identify solutions, and help Our customer service agents prepare a response.

• Safety and Security. We leverage automated technologies, including AI, to enforce Our terms and policies, protect our rights, and to keep Our products and services safe and secure.

A more detailed description of the information We collect and how We use this information is available in the "How We Collect and Use Personal Information" section of the detailed Privacy Notice.

When Do We Share Personal Information?

We share or make available personal information with third parties (vendors, agencies, and businesses) that help Us run Our Sites, Our business, and retail Our products to further L'Oréal's beauty mission. We partner with The Hut Group to manage and operate websites on TRAM's behalf. We may disclose information to Our service providers, to complete a transaction requested by You, when required by law or authorities, and in the event of a sale or reorganization of Our company. More information is available about how we share personal information about You in the "How We Share Personal Information" section of Our detailed Privacy Notice.

We do not 'sell' (as 'sell' is traditionally defined) personal information about Our consumers. We do not make available or provide consumer's names, phone numbers, addresses, email addresses, or other personal information to third parties in exchange for money. Like many companies, however, We do share or make available personal information We collect with third parties to facilitate Our advertising, including providing You with personalized advertising from Us about Our products and services on other third-party sites or online applications. In some US States, this type of activity is considered (1) a 'sale', (2) a 'share' or 'use' of personal information for targeted advertising, or (3) both, and subject to a right of opt-out.

For example, some third parties allow Us to serve consumers with online promotions by sending identifiers or contact information (e.g., email, phone number, other identifiers (cookie ID, device ID, pseudonymous ID)) We have collected to the third party. The third party compares the identifiers or contact information to identifiers in its own database, and, if there is a match, We can use this information to optimize our advertising campaign(s), choose whether or not to serve an advertisement to the matched individual on a third-party site or platform, and measure the effectiveness of Our advertising. We can also send this information to adtech providers (like demand side platforms) that help Us serve advertisements to You on third-party sites or online applications that participate in online auctions of their ad inventory.

Additionally, We make available personal information to third parties through Our use of cookies and other similar technologies on Our Site. For example, we share or make available online personal information with third parties such as social media platforms or other marketing service companies to optimize our marketing campaigns, help Us display ads for Our goods and services on third-party sites, and measure the effectiveness of those ads on such thirds party sites. These companies use personal information to improve their own products and optimize their own ad targeting systems.

To exercise the right of opt-out where available in Your jurisdiction please use one or more of the following:

• visit the "Your Privacy Choices" link on the footer of Our Site to submit a request regarding offline (non-browsing) personal information.

• click on "Cookie settings" link on the footer of Our Site and change the setting regarding online (browsing) personal information.

• enable a browser-based opt-out signal such as the Global Privacy Control. Where required by applicable law We will treat browser-based opt-out signals as requests to opt-out of the sale/sharing (or use) of personal information for targeted advertising for Your browser. If you are logged-in to Your account (where available), We will associate the browser-based opt-out signal with Your account and apply it to offline personal information

How Long Do We Retain Personal Information?

We will retain personal information about You for so long as Your account is active, you engage with Us, as needed to provide You services, and as necessary to comply with Our legal and/or regulatory obligations, to resolve disputes, to manage Our rights, and to enforce Our agreements. We do not control certain privacy settings and preferences maintained by Our social media partners like Facebook and Twitter. If You wish to make changes to those settings and preferences, You may do so by visiting the settings page of the appropriate social media site.

Detailed Privacy Notice

Table of Contents

1. How We Collect Personal Information

2. What Personal Information We Collect & Use

3. How We Share Personal Information

4. How Long We Retain Personal Information

5. Your Privacy Choices

6. Additional Information for Residents of California

7. Privacy Rights Available under State Laws

8. Notice of Financial Incentives

9. Children's Information

10. Securing Personal Information About You

11. Third Party Links; Social Login

12. Cross-Border Transfers

13. Updates to this Privacy Policy

14. How to Contact Us

1. How We Collect Personal Information

We obtain personal information from the following categories of sources. We combine personal information that We collect from one method (e.g., from a website, digital advertising engagement) with another method (e.g., an offline event). For example, if You have an account with Us and are logged in, or otherwise provide personal information like an email, We associate information We observe about You with other information You or a third party provide to Us. We do this to get a more complete view of preferences for Our beauty products and services, which, in turn, allows Us to serve You better and with more customization and better beauty products.

1. Personal Information You Provide

We (directly or by third parties on Our behalf) collect personal information You provide to Us directly when You Interact with Us. For example:

1. Account creation and management. We collect personal information during the creation or management of an account with Us. When You sign up for an account You will need to provide certain information about Yourself, such as name and email address. You may provide other personal information.
   
   You may also be able to register and log in to Our Sites or chat features using Your social media account, such as Facebook or Google. These platforms may ask Your permission to share certain information with Us (e.g. name, gender, profile picture) and all information is shared subject to their privacy policies. You can control the information that We receive by changing Your privacy settings offered by the relevant social media platform.
   
   

2. Newsletter and marketing subscriptions. We collect and use personal information when You subscribe to receive Our marketing communications.

3. Purchase and order management. We collect and use personal information when You purchase products or services from Us, whether on Our Sites, in one of Our retail locations, or otherwise. This includes payment details to complete a purchase.

4. On Our social media platforms. We collect and use personal information You publicly post on social media platforms or when You mention Us on social media platforms.

5. Promotions. We collect personal information during Your participation in a competition, game, contest, promotional offer, sample request, or response to a survey.

6. User Generated Content. When You submit content (such as images or rating and reviews on one of Our Sites or You agree to allow Us to re-use content You posted on social media). We may ask You to participate in a survey or general research. If you chose to take part in these, You may provide personal information in connection with Your response.

7. Use of Our Sites and Services. When You provide personal information while using Our Sites, such as completing forms or using services on Our Sites. For example, if You use a chat feature on Our Sites, We (and a third-party provider of chat software who provides Us with services) collect personal information You share during the interaction, interactions with Our chat tool, and transcripts of the chat conversation. You may use other features of Our Sites that may ask You to grant permission to access the camera or other features of Your computer or mobile device. For example, to enable augmented reality features We make available.
   
   
   

If You use one of Our virtual try on features, We may collect and store Your image(s), for example, if You use social sharing to send Your image to a friend or post it online or if You save it to Your profile. If You use one of Our online beauty tools We may collect, capture, possess, store, or obtain the picture You provide, and data obtained or created from Your picture (including the automated recognition of various facial landmarks that might qualify as biometric data, biometric information, or a biometric identifier under various laws).

1. Customer Service. When You ask questions relating to Our brands, Our products and their Use, or Your purchases or account.

2. Personal Information We Observe or Collect Automatically

We (directly or by third parties) collect personal information We observe about You in Our physical locations or on Our Sites. For example, We (or third-party companies (e.g., Google)) collect personal information automatically when You use or visit Our Sites, install and use Our mobile apps, view Our advertisements, interact with Our emails or other communications, or use Our products and services. This personal information is collected through a variety of technologies, such as cookies, Flash cookies, JavaScript tags, software development kits, application program interfaces, Web beacons, and other technologies described below. Information collected via automated means include identifiers (e.g., IP address, device ID, cookie ID, mobile advertising identifier), geolocation, commercial information, and internet or network activity (e.g., clickstream data, such as browsing and search history, other interactions with Our Sites). We combine personal information collected automatically with personal information We already have about You.

1. Cookies and Other Technologies: Our Sites, applications, email messages, and advertisements may use cookies and other technologies such as pixel tags, web server logs, server-side tracking, and web beacons. These will collect online activity data such as date and time You visit the Site, duration of access, browser or app version used, URLs You come from and go to, and how You used our Site or interacted with emails and other messages. These technologies are used to help

   • ✔ browse Our Site and use its features,

   • ✔ remember Your information so You do not have to re-enter it,

   • ✔ track and understand how You use and interact with Our Sites,

   • ✔ tailor the Sites and Our advertising around Your preferences,

   • ✔ measure the effectiveness of Our advertising,

   • ✔ manage and measure the usability of the Sites,

   • ✔ understand the effectiveness of Our content,

   • ✔ otherwise enhance the Sites and Our beauty offerings, and

   • ✔ protect the security and integrity of Our Sites.

Our emails include pixels in Our messages to determine whether You open and interact with them. Our Sites also use cookies and other technologies to help keep track of items You put into Your shopping cart including when You have abandoned Your cart and this information is used to determine when to send cart reminders (including messages via SMS).

1. Mobile Services/Apps and Devices: We (directly or by third parties on Our behalf) use technologies that collect information from Your phone when You use Our mobile apps or Our 'smart' devices in Your home. This information could include Your mobile phone or other device identifiers (including a mobile phone identifier (iOS IDFA and Android Advertising ID), Bluetooth ID, or other device identifier), information about Your phone or other device's operating system, how You use the app or device, and Your physical location. Certain of Our mobile apps and tools offer opt–in, geo–location services and push notifications.

   • ✔ Geo-location services provide location–based content and services, such as store locators, local weather, promotional offers, and other personalized content.

   • ✔ Push notifications can include discounts, reminders or details about local events or promotions. Most mobile devices allow You to turn off location services or push notifications.

If You turn on location services, We (or a third party on Our behalf) may collect location information, including information about the Wi–fi routers closest to You and the cell IDs of the towers closest to You to provide location–based content and services. Additionally, most mobile devices will allow You to disable sharing or reset some device identifiers.

1. In-Store Analytics; Call-Recording: We (directly or by third parties on Our behalf) use certain technologies (such as in-store wireless services (such as Wi-Fi networks and Bluetooth beacons)) and cameras to automatically collect information about visitors to Our stores or when You contact Us.

   • ✔ Our Wi-Fi routers capture certain data from mobile devices that interact with the router, including information about Your mobile device (such as a MAC Address, signal strength data, and location of device capturing the information).

   • ✔ Bluetooth beacons are small devices that broadcast a Bluetooth signal to map nearby Bluetooth-enabled mobile devices. We may use the data collected from these in-store wireless services to provide operational insights such as foot traffic volumes and how customers move through Our stores.

   • ✔ We also use cameras in and around Our retail locations for operational and analytics purposes such as measuring traffic patterns. Cameras are also used for safety, fraud detection, theft and loss prevention, and security.

   • ✔ We also record customer service calls for quality assurance, maintain transcripts of chats using our chat tools (provided by a third party), and logs of Your interactions with our automated phone system and our chat bots.

2. Personal Information Received from Third Parties:

We receive personal information from third party sources to update or supplement personal information You provide or We collect automatically. We combine this personal information with personal information We collect either automatically or directly from You.

1. Affiliates. We receive or have access to personal information from other companies and brands under common ownership with Us, as well as our ultimate parent company L'Oréal S.A.

2. Other Users or Individuals who use Our Services. For example, We operate and manage refer-a-friend or similar programs, where We collect email addresses and other contact information about You if a person invites You or refers You.

3. Service Providers. Our service providers that perform services on our behalf collect personal information and share some or all of this personal information with us. For example, if You provide Us with permission to store payment information in Your account, We will receive a tokenized version of the credit card back from Our payment processor, and Your credit card issuer may provide Us with updated Payment Information in connection with the credit card issuer's account update service.

4. Social Media; Authentication Services. You also can engage with Our brands, use chat or try-it-on features, applications, and log into Our Sites via social media platforms, such as Facebook (including Instagram) or Google. If You link, connect, or login to one of Our Sites with a third-party service (e.g., Facebook, Google), We collect Personal Information You share with Us, or that the social media platforms share with Us. When You engage with Our content on or through social media or other third-party platforms, plug-ins, integrations or applications, these platforms may ask Your permission to share certain information with Us (e.g. name, gender, profile picture, likes, interests, demographic information). Such information is shared with Us subject to the third-party platform's privacy policy. You can control the information that We receive by changing Your privacy settings offered by the relevant social media platform.

5. Transactions You Have Requested. We receive personal information about You from third parties to complete a transaction You have requested. For example, if You checkout with PayPal We will receive information back from PayPal to complete the transaction.

6. Other Sources. We collect personal information from publicly available sources, third-party data providers, or through transactions such as mergers and acquisitions. For example, We validate postal address information using third party services or third parties provide Us with additional information about You. We combine that information with other personal information we maintain about You.
   
   

These third-party sources include vendors that provide Us with services, advertising networks, data analytics providers, government entities, social media networks, companies that process payments, other L'Oréal affiliates, data brokers, companies that help Us detect fraud and safety issues, and companies who have received Your permission to share personal information with L'Oréal or when a third party needs to share personal information with Us to complete a transaction You have requested. This also includes information received from third parties about individuals who share common interests or attributes (e.g., color treated hair, individuals who purchased products similar to products We sell) to create user "segments," which help Us to better understand and market to Our current or prospective customers.

This information includes marketing and demographic data (including identifiers, commercial and purchasing information (i.e., products You have purchased or considered)), analytics information (including online information), internet or online information, demographics (e.g., including nationality, race, ethnicity), geolocation, and offline records, as well as inferences.

We may also receive information from other companies that collect or aggregate information, including from publicly available databases. This might include de-identified information about purchasing patterns, location of shoppers, and websites that are of interest to Our consumers.

2. What Personal Information We Collect & Use

Examples of the categories of personal information We collect, and why and how We use this information within the L'Oréal family of brands, is outlined below. Other members of the L'Oréal Group may access personal information about You when they perform services on behalf of L'Oréal Travel Retail Americas and, unless prohibited under applicable law, for use on their own behalf for the purposes described in this Notice.

14. How to Contact Us

If You have any questions about Privacy, please contact Us at:

Attn: Customer Care

Re: Biotherm.com Privacy Policy and Cookie Notice
Telephone: 1 (844) 2457681

Or send Us an e–mail with Your request here.