Privacy Policy

Revlon Consumer Products LLC and our employees, agents, subsidiaries, and affiliates (collectively, “Revlon,” “we,” “our,” or “us”) are committed to safeguarding your personal information. We have adopted and implemented this privacy policy (“Privacy Policy”) as part of our commitment to protecting your personal information across all of our websites, mobile apps, and other online properties that link to this Privacy Policy (the “Sites”). This Privacy Policy applies only to the Sites, and covers only information collected in connection with your access to and use of the Sites. Other websites, mobile applications, and other online properties owned by us that do not link to this Privacy Policy may be governed by different privacy policies, and the applicable privacy policies will be linked or otherwise made available on those properties. We encourage you to read this Privacy Policy to learn about how we collect, use, disclose, and protect your personal information and about the choices you can make regarding information you share. Revlon is the entity responsible for processing personal information (i.e., the data controller) under this Privacy Policy.

Because we are a global company, this Privacy Policy takes into consideration various privacy regulations and frameworks governing the collection, use, maintenance, sharing, and disposition of personal information. Our privacy practices may vary among the countries, and within countries where applicable, in which we operate to reflect local practices and legal requirements. In addition, while this Privacy Policy is intended to describe the broadest range of our personal information processing activities globally, the processing activities in some jurisdictions may be more limited based on restrictions under local laws or based on the products and services being offered.

Additional information relating to our practices and the rights of residents in specific countries and jurisdictions is provided at the end of the Privacy Policy in the Country-Specific Notices section.

Personal Information

Throughout this Privacy Policy, we use the term “personal information” to describe information that can be associated with an identified or identifiable person or household. “Personal information” may include, but is not limited to, your name, postal address (including billing and shipping addresses), telephone number, email address, payment card number, date of birth, driver’s license number, national ID number, and any other information about you that we may hold or process.

Changes to this Privacy Policy

We ask that you read this Privacy Policy from time to time. We may modify this Privacy Policy at any time in our sole discretion (to the extent required by applicable law, we will provide you notice of such changes and/or will take other measures, such as obtaining consent).

The following topics are covered below:

1. Information We May Collect About You
2. Information We May Collect Through Automated Means
3. How We Protect Children’s Privacy
4. How We May Use the Information We Collect about You
5. Do Not Track
6. When We May Share Your Information
7. What We May Do With Your Social Network Account Information
8. How We May Use Cookies
9. How We Retain and Protect Your Information
10. Third-Party Advertisements
11. Business Transfers and Corporate Changes
12. Location and Transfer of Personal Information
13. Links to Other Websites and Third-Party Plug-ins
14. Additional State- and Country-Specific Notices
    Notice to Residents of California and Other U.S. States
    Notice to Residents of the United Kingdom, European Union, and Other Countries
15. How You Can Contact Us

1. Information We May Collect About You

We may collect information about you when you interact with the Sites, including when you log in to the Sites, create an account, join our mailing list, make a purchase, request a service, request information, communicate with customer service, apply for a job, or upload content to the Sites through various means, including your social media account, which may feed information to the Sites. The information that we may collect includes, but is not limited to, the following:.

• Contact and identity information (including name, postal addresses, email address, telephone number, and login credentials);
• Financial information (including payment card information, billing and mailing addresses);
• Commercial information such as information about the products and services that you purchased; Additional identify information such as demographic information (including age/birthdate, gender, and country in which you are located);
• Health information that you provide to us through the Sites regarding your health, activities, and skincare concerns;
• Physical characteristics you provide to us through the Sites such as eye color and skin tone;
• Social media information such as social media handles and content you post on social media linked to our Sites as described below;
• User content including information that you choose to submit in connection with your comments or inquiries, photographs and other content that you provide (e.g., product reviews, videos);
• Preferences regarding products and services, whether provided by you or inferred by us based on other information we collect;
• Contact information for others (including email address) when you use certain features, such as “Send This Job to a Friend”; and
• Employment information such as occupation, professional license number, license type, license expiration date, specialty skills, and company name (obtained from beauty professionals), as well as employment history, education history, and other information contained in a resume uploaded through our Site or submitted through an online application form (obtained from job applicants, to the extent permitted by applicable law).

2. Information We May Collect Through Automated Means

We may automatically collect information about the devices and networks that you use to interact with the Sites, as well as information about how you interact with the Sites. The information that we automatically collect may include, but is not limited to, the following:

• IP address and other device identifiers, which may provide, among other things, location information;
• Browser type and version;
• Operating system type;
• Language your system uses and country and time zone where your device is located;
• Information you searched for on the Sites;
• When and for how long you visited the Sites;
• Pages you visited while on the Sites;
• Time spent on those pages; and
• Web page that referred you to our Sites.

The information that we collect may be associated with any personal information that you have provided to us.

Your Precise Geolocation. When you interact with the Sites, you may be asked for permission to allow us to collect your precise geolocation information. If you consent to such collection, we may use this information to provide you location-based or targeted advertisements and social media posts; to locate our nearby salons, spas, or retailers; or for analytics purposes. You may discontinue our collection and use of geolocation information by changing the settings on your browser or mobile device.

3. How We Protect Children’s Privacy

Our Sites are general audience Sites not directed at children under the age of 13. If we obtain actual knowledge that any information that we collect has been provided by a child under the age of 13, we will promptly delete that information. We will adjust these practices as may be required under applicable law (e.g. in the event a particular jurisdiction requires additional measures in order to process personal information of children under age 16).

4. How We May Use the Information We Collect about You

We may use the information we collect about you to do the following:

Provide Products, Services, and Other Information, including Advertising, That May Interest You

• Facilitate your transactions, including processing and fulfilling purchases, shipping orders, scheduling and confirming appointments, communicating about orders and their status, and personalizing the customer experience, where possible;
• Provide services you have requested;
• Send you promotional materials and other communications, in accordance with applicable laws;
• Respond to your inquiries;
• Send you email alerts relating to investor relations, if you request to receive them;
• Send you text messages, which may use information automatically collected based on your actions while on our sites and may prompt messaging such as cart abandon messages;
• Communicate with you about, and administer your participation in, special events, contests, sweepstakes, programs, offers, loyalty programs, surveys and market research;
• Deliver advertisements based on your interests;
• Send you text messages, which may use information automatically collected based on your actions while on our sites and may prompt messaging such as cart abandon messages;
• Provide you with an interactive social media experience that allows you to connect your social networking community to the Sites;
• Create and manage your account;
• Process your employment application, and notify you of future employment opportunities that may be of interest to you; and
• Help you locate beauty professionals and distributors of our products.

Manage and Improve our Business Operations

• Operate and manage the Sites;
• Operate, evaluate, and improve our business, including by managing, enhancing, improving, and analyzing our products, services, business, and the performance and functioning of the Sites; developing new products and services; managing our communications; and performing accounting, auditing, and other internal functions;
• Enforce our agreements;
• Study how consumers use the Sites; and
• Perform other market research, such as determining trends and business opportunities based on consumer activity.

Ensure a Secure Online Environment and Comply with Legal Requirements

• Protect against and detect fraud, abuse, and other unlawful activity;
• Enforce the Sites’ Terms of Use, other corporate policies, and industry standards; and
• Comply with all applicable laws and our reporting obligations.

Develop Personal Profiles. We may use your personal information to develop a personal profile about you to allow us, for example, to treat you in a more personal way as part of our customer outreach.

Your Choices

• You can choose not to provide personal information to Revlon by refraining from, among other things, making purchases, using our services, applying for a job, and requesting information. You also may refrain from submitting information directly to us. However, if you do not provide personal information when requested, we may not be able to provide you with the full range of our products and services, or with information about our products, services, promotions, and other opportunities.
• Promotional Communications. If you sign up to receive promotional communications from us via email or text message, we will add you to our promotional lists for the method of communication you have selected. We receive and store the information you provide, including your telephone number or whether and when you read an email or text message. Some messages may be general in nature and sent to everyone on our lists, and others may be created based on actions you have taken on our Site. Your mobile carrier’s message and data rates may apply to any text messages we send to you.
• Email Opt-Out. If you no longer want to receive marketing emails from us, please follow the “unsubscribe” instructions in the email you receive from us. We will process your request within a reasonable period of time. We are not responsible for removing your personal information from lists of any third party, such as a business partner, that has previously been provided with your information under this Privacy Policy. Where required by law, Revlon will take reasonable steps to inform the applicable third parties of your request.
• Text Message Opt-Out. If you no longer wish to receive promotional text messages from us, you can opt-out at any time by replying “STOP” to any text message you receive from us.
• You can review, modify, and delete certain information related to your use of our Sites by accessing your account. You also may ask us to update your information or exercise certain choices regarding your information by contacting us at privacypolicy@revlon.com.

Analytics. We may use third-party analytics services, such as Google Analytics, on our Sites. The analytics providers may use technologies such as cookies, web server logs, and web beacons to help us analyze visitors’ use of our Sites. The information collected through these technologies, including your IP address, may be disclosed to the analytics providers and other relevant third parties that use the information to analyze the use of the Sites.

5. Do Not Track

We do not alter our data collection and use practices in response to Do Not Track signals.

6. When We May Share Your Information

We may share your information with our affiliates and subsidiaries for the purposes described in this Privacy Policy, and with third-party service providers who perform services and functions on our behalf to support our interactions with you, including, for example, processing or providing our products and services, sending you advertisements for our products, administering surveys or contests, hosting product reviews, processing payments, or otherwise communicating with you.

In addition, as noted above, we may share your information with third-party analytics companies for the purpose of conducting research about how our Sites are used and what products and services consumers prefer. These third parties use this information to provide us the services and perform the functions for which we have contracted.

We also may provide to third parties, including other businesses and members of the public, aggregated statistical data showing general usage patterns and statistics, interactions, and transactions with our Sites. This data does not personally identify you or provide specific information about individual usage.

We also may share your information with third parties, including law enforcement authorities, where we determine that doing so is appropriate to:

• Enforce our Terms of Use;
• Protect our property, services, and legal rights;
• Prevent physical harm to persons or to the property of others, financial loss, security incidents, or in connection with an investigation of suspected or actual illegal activity;
• Prevent fraud against Revlon and others;
• Support auditing, compliance, and corporate governance functions;
• Comply with subpoenas, court orders, or similar legal processes issued by law enforcement agencies, regulators, and courts; and
• Comply with any and all applicable laws.

7. What We May Do With Your Social Network Account Information

Our Sites may allow you to sign in to your social network accounts, including, but not limited to, Facebook, Twitter, Instagram, and Pinterest, and associate them with our Sites. By using this functionality, you give us permission to access all of the elements of your social network profile information that you have made available to be shared and to use it in accordance with the social network’s terms of use and this Privacy Policy. Please refer to the privacy settings on your social network account for information about what information is shared with us and other connected applications and to manage the information that is shared through your account, including information about your activities while using the Sites.

If you would like to disconnect a social network account from the Sites, refer to the settings of your social network account and its provider.

8. How We May Use Cookies

When you visit our Sites, we may place pieces of code, commonly referred to as “cookies,” or use similar technology (such as web beacons or browser-based local storage) on your devices. Where permitted by law, we may begin collecting information as soon as you visit the Sites. By using the Sites, you permit us to collect and use your information in accordance with this Privacy Policy. We may use cookies to customize your visits to the Sites, track usage patterns on the Sites, or analyze activity online.

Your internet browser or mobile device may allow you to block the transmission of certain information. For example, you may be able to configure your browser to notify you when you receive certain types of cookies, restrict or disable certain cookies, or block cookies altogether. You also may be able to delete certain cookies, called Flash cookies, by visiting the Adobe Flash Website Storage Settings Panel and Global Storage Settings Panel. You may choose to enable these options, but doing so may prevent you from using many of the core features and functions available on the Sites.

For further information about how we use cookies and similar technologies, please read our Cookie Policy.

9. How We Retain and Protect Your Information

We have implemented an information security program that includes administrative, technical, and physical controls that are designed to reasonably safeguard information that can individually identify you. Unless you direct us otherwise, we reserve the right to retain your personal information to the maximum extent permitted by applicable law. However, we do follow the practice of data minimization as may be required by various laws, and we ensure that our collection of personal information is adequate, relevant, and limited to what is reasonably necessary for the applicable purposes.

10. Third-Party Advertisements

Third parties, including advertisers, may collect information about your activities over time and across different websites when you use the Sites. These third parties also may provide us with data collection, reporting, ad response measurement, analytical information, and assist with the delivery of relevant marketing messages and advertisements. These third parties may view, edit, or set their own cookies. The use of these technologies by these third parties is subject to their own privacy policies and is not covered by this Privacy Policy. Many third-party advertisers, and some web browsers and mobile devices, allow you to opt out of third-party advertising. Information and resources about how to opt out of interest-based advertising are available from the Digital Advertising Alliance at http://www.aboutads.info/choices/.

Our Sites may use Google Analytics for advertising to collect analytics about how you use our Sites. We may use the Google Analytics cookie and Google advertising cookies together in order to collect data for advertising purposes. You can opt out of Google Analytics using Google’s Ad Settings, or by using the Google Analytics Opt-Out Browser Add-on. You also may opt out of tracking and receiving targeted advertisements on your mobile device by some mobile advertising companies and other similar entities by downloading the App Choices app at www.aboutads.info/appchoices.

11. Business Transfers and Corporate Changes

We may, in compliance with our legal rights and duties, disclose and transfer all information related to the Sites or otherwise collected by or provided to us, including personal information:

• To a subsequent owner, co-owner, or operator of one or more of the Sites; or
• In connection with a corporate merger, consolidation, or restructuring; the sale of substantially all of our stock and assets; or other corporate change, including, without limitation, during the course of any due diligence process.

12. Location and Transfer of Personal Information

Revlon is a global company and may collect and process information in countries throughout the world. Therefore, subject to applicable laws, your personal information may be located and processed in a country where Revlon does business, other than your country of residence or the country from which you provided Revlon with your personal information. These other countries may not have the same data protection laws as the country in which you reside.

In addition, we may transfer the personal information we collect about you through the Sites to our affiliates, subsidiaries, and service providers in other countries, such as to the United States, for the purposes described above. When we transfer your personal information to another country, we do so in accordance with applicable law.

When we transfer personal information from the European Economic Area (EEA), the United Kingdom (UK) or Switzerland for processing in countries outside the EEA and the UK or Switzerland which are not recognized by the EU, Switzerland or the UK as providing an adequate level of protection to personal data, for example, to the United States, we rely on approved data transfer mechanisms, such as Standard Contract Clauses. In addition, we take steps to satisfy ourselves that the recipient of any personal data in such countries can be trusted to adequately protect to the data in accordance with the Standard Contractual Clauses and appropriate diligence efforts.

13. Links to Other Websites and Third-Party Plug-ins

Our Sites may contain links to other websites for your convenience and information. These websites may be operated by companies not affiliated with us. We strongly suggest that you review the privacy policies or notices of linked websites that you visit. We are not responsible for the content of any websites that are not affiliated with us, use of those websites, or the privacy practices of those websites.

The providers of third-party plug-ins, such as social networking tools, on our Sites may use automated means to collect information regarding your use of the Sites and your interactions with these features. The providers of third-party plug-ins may also collect information you provide, for example, when you make a purchase, you may be asked to provide information on a separate retailer’s online website either directly, or via a service provider, such as Shoppable. This information is governed by the privacy policies of the providers of the third-party plug-ins. To the extent permitted by law, we are not responsible for these third-party plug-in providers’ privacy practices.

14. Additional State- and Country-Specific Notices

The following additional notices apply to residents of particular jurisdictions:

Notice to Residents of California and Other U.S. States

Your California Privacy Rights

Under the California Consumer Privacy Act (“CCPA”) and other California laws, such as California Civil Code Section 1798.83, California residents may have the following rights in addition to those set forth elsewhere in this Privacy Policy, subject to your submission of an appropriately verified request where required by applicable law (see below for verification requirements):

Right to Know	You may request any of following, for the 12 month period preceding your request: (1) the categories of personal information we have collected about you, or that we have sold, or disclosed for a commercial purpose; (2) the categories of sources from which your personal information was collected; (3) the business or commercial purpose for which we collected or sold your personal information; (4) the categories of third parties to whom we have sold your personal information, or disclosed it for a business purpose; and (5) the specific pieces of personal information we have collected about you.
Right to Delete	You have the right to delete certain personal information that we hold about you, subject to exceptions under applicable law.
Right to Non-Discrimination	You have the right to not to receive discriminatory treatment as a result of your exercise of rights conferred by the CCPA.
Direct Marketing	You may request a list of personal information we have disclosed about you to third parties for direct marketing purposes during the preceding calendar year.
Opt-Out of Sale	Although we do not currently engage in the “sale” (as defined by the CCPA) of personal information, you have the right to direct us to stop selling your personal information to third parties for commercial purposes in the future. Please see below for information on exercising your opt-out rights.
Minors	To the extent we have actual knowledge that we collect or maintain personal information of a minor under age 16, those minors between the age of 13 and 16 must opt in to any sales of personal information (as defined under CCPA), and minors under the age of 13 must have a parent consent to sales of personal information (as defined under CCPA); all minors have the right to opt-out later at any time.
Minors’ User Content	If you are a California resident under the age of 18, and a registered user of any Site where this Privacy Policy is posted, California Business and Professions Code Section 22851 permits you to request and obtain removal of content or information you have publicly posted. You can delete or remove posts using the same deletion or removal procedures disclosed elsewhere in this Privacy Policy, or otherwise made available through the Sites. If you have questions about how to remove your posts or if you would like additional assistance with deletion you can contact us as provided below.

As of January 2023, California residents will have the following additional rights, as further defined by the California Privacy Rights Act. These rights may also be exercised in the manner described below:

Correction	California residents will have a right to correct any inaccurate personal information, subject to certain limitations.
Sensitive Personal Information	California residents will have the ability to limit the use and disclosure of their sensitive personal information.
Sharing	California residents will be able to opt-out of the sharing of personal information for the purpose of cross-contextual behavioral advertising (whether or not for monetary or other valuable consideration) and the right to learn to which third parties we have shared personal information.

Rights in Additional U.S. States

Privacy laws in various U.S. states are being enacted and modified at a rapid pace. Accordingly, depending on the state in which you reside, you may have additional rights not described here. These additional rights may include, among others:

• Right of access/right to know
• Right to correction
• Right of deletion
• Right of data portability
• Right to opt out of sale, sharing, or targeted advertising
• Right to limit processing of sensitive information (including a restriction of any processing without prior consent in certain states)

In order to exercise those rights, please submit your requests as described below, and we will provide you with the rights to which you are entitled under the laws of your state at the time your request is submitted.

Please note that various definitions, such as “sale,” “sensitive” information, and others, vary among the states. Accordingly, your rights with regard to opting-out of data sales, limitations and requirements for processing sensitive information, and other rights may vary according to the laws applicable in your jurisdiction.

Submission and Verification of Requests

You may submit any of the above requests by emailing privacypolicy@revlon.com, or writing to us at:

Revlon Consumer Products LLC
Chief Compliance Officer
One New York Plaza
New York, New York 10004
U.S.A.

If you are minor requesting assistance exercising your right to removal of content or information you have publicly posted, please provide a detailed description of the specific content or information you need assistance removing. We will work to delete your information, but please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even when requested.

All rights requests must be verified to ensure that the individual making the request is authorized to make that request, to reduce fraud, and to ensure the security of your personal information. We may require that you provide the email address we have on file for you (and verify that you can access that email account) as well as an address, phone number, or other data we have on file, in order to verify your identity. If an agent is submitting the request on your behalf, we reserve the right to validate the agent’s authority to act on your behalf.

Data Processing

Categories of Personal Information Disclosed for Business Purposes

For purposes of the CCPA, we may disclose to Service Providers for “business purposes” the following categories of Personal Data: Identity Data, Contact Data, Location Data, Device/Network Data, Commercial Data, Inference Data, Financial Data, Audio/Visual Data, Health Data, and User Content.

Categories of Personal Data sold

For purposes of the CCPA, we do not currently “sell” personal information as defined by the CCPA.

Right to Know

Notice to Residents of the United Kingdom, European Union, and Other Non-U.S. Countries

Revlon processes personal information for the purposes described above. In some situations, the collection of personal information may be required for the operation of our Sites or to provide you with certain products or services. If we use the information in other ways, we will provide you with specific notice at the time of collection.

The Legal Basis for Processing your Information

We process personal information where we have a legal basis to do so. The legal basis we will rely on will, in almost all situations, be one of the following:

• You have consented to our processing your personal information;
• The processing is necessary to perform a contract with you or to fulfill a request you have made;
• The processing is necessary to comply with a legal obligation that applies to Revlon; or
• The processing is necessary for purposes that are in Revlon’s legitimate interests as a multinational beauty and cosmetics company in order to, for example, protect our business and to better understand our customers.

If we intend to further process personal information that we have collected for a purpose other than that for which it was originally collected, we will provide you with information about this secondary purpose and any additional information necessary to ensure fair and transparent processing, before we engage in further processing.

Cookie Policy

This Cookie Policy explains what cookies are and how and why they may be stored on and accessed from your device when you use or visit our Sites. This Cookie Policy should be read together with the rest of this Privacy Policy and our applicable Terms of Use.

By consenting to the use of cookies, you agree that we can store and access cookies as described in this Cookie Policy.

What are cookies?

A cookie is a small text file that can be stored on and accessed from your device when you visit one of our Sites, to the extent that you consent. This allows our Sites to distinguish your device from those of other users of the Sites. You can find more information at www.allaboutcookies.org and www.youronlinechoices.eu.

How do our Sites use cookies?

We may use cookies to identify you and your interests and to track your use of our Sites. We also may use cookies to control access to certain content of our Sites, protect the Sites, and to process any requests you make.

To administer our Sites and for research purposes, we may contract with third-party service providers to track and analyze statistical information about usage of, and volume of traffic on our Sites. These third-party service providers may use persistent cookies to help us improve the user experience, manage content on our Sites, and track user behavior.

We also may contract with third-party service providers to send emails to users who have provided us with their contact information. To help measure and improve the effectiveness of our email communications, the third-party service providers may drop cookies on users’ devices. All data that these third-party service providers collect on behalf of Revlon will be used solely by or on behalf of us and will be shared externally only on an anonymous, aggregated basis.

We may use the following types of cookies for the described purposes:

Cookie Type	Purpose
Strictly Necessary/Technical	These cookies are necessary to allow us to operate our Sites so you can access the Sites as you have requested. These cookies, for example, let us recognize that you have created an account and have logged into that account to access Site content. They also include cookies that enable us to remember your previous actions within the same browsing session and secure our Sites.
Analytical/Performance	These cookies are used by us or our business partners to analyze how our Sites are used and how they are performing. For example, these cookies track what pages are most frequently visited and from what locations our visitors arrive. If you subscribe to a newsletter or otherwise register with our Sites, these cookies may be correlated to you.
Functionality	These cookies let us operate our Sites in accordance with the choices you make. These cookies permit us to “remember” you between visits. For instance, we will recognize your user name and remember how you customized our Sites by, for example, adjusting text size, languages, fonts, and other parts of the Sites that are alterable, and provide you with the same customizations during future visits to the Sites.
Profiling, Targeting, and/or Advertising	We may use cookies to collect data about your online activity and identify your interests so that we can provide advertising that is most relevant to you. You can opt out of receiving interest-based advertising from us as described below in the Your Rights section.
Third-Party Advertising	We may allow our business partners to use cookies on our Sites for the same purposes identified above, including collecting information about your online activities over time and across different websites. The business partners that generate these cookies have their own privacy policies, and may use their cookies to target advertising to you on other websites, based on your visit to our Sites.