Privacy Notice

1. Introduction

This Privacy Notice explains how CJ Olive Young USA Inc. ("Company," "we," "us," or "our") collects, uses, discloses, and otherwise processes personal information that identifies you as a specific individual ("Personal Information") when you access or use the website(s) located at us.oliveyoung.com, including all subdomains and subparts, as well as our mobile applications, social media accounts, platforms in our retail stores, and other online or offline services offered by the Company (collectively, the "Services").

This Privacy Notice applies to Personal Information we collect from customers and visitors, regardless of how you provide Personal Information to us.

Please review this Privacy Notice to understand how we handle your Personal Information and your choices. Please also review our Terms of Use. We will notify you of any additional processing of your Personal Information that is not mentioned in this document.

BY CREATING AN ACCOUNT, MAKING A PURCHASE, OR OTHERWISE SUBMITTING YOUR PERSONAL INFORMATION TO US, YOU EXPRESSLY CONSENT TO THE COLLECTION, USE, DISCLOSURE, RETENTION, AND DESTRUCTION OF YOUR PERSONAL INFORMATION SUBMITTED TO US IN ACCORDANCE WITH THIS PRIVACY NOTICE.

If you have any questions or would like to exercise any of the rights set out within, please contact us as described in the "Contact Us" section below.

2. Personal Information We Collect

We collect the following Personal Information when you provide it directly:

• Identifiers: such as your name, email address, shipping and/or billing address, telephone number (including numbers from customer calls), and account log-in information.
• Commercial Information: such as payment method details (card type or tokenized payment information), gender, age, and date of birth.
• Beauty Profile Information (Optional): such as your skin type, skin concerns, hair type, hair concerns, or other preferences you choose to provide.
• Sensitive Personal Information (limited): We do not actively solicit and collect sensitive personal information, except for business purposes expressly permitted by law. However, in limited circumstances, we collect certain information that could be considered sensitive(such as health-related information) when you voluntarily provide it to us, for example, in connection with customer service inquiries or product recommendations.

We collect the following Personal Information automatically or from third parties as described in Section 3:

• Commercial Information: such as records of products or services purchased, order history, and transaction information.
• Internet or Other Electronic Network Activity Information: such as your interactions with our websites, mobile applications, social platforms, emails, chatbots, and advertisements, including statistics on your browsing activities on our websites, and data collected through cookies and other tracking technologies.
• Device Information: such as IP address, device type, operating system, browser type and version, and unique device identifiers.
• Geolocation Data: such as your approximate location based on your IP address.
• Audio, Electronic, or Visual Information: such as recordings of communications with you (for example, when we contact you for customer support, where permitted by law) and in-store video surveillance.
• Inferences: such as preferences or characteristics inferred from your interactions with our Services based on network activity, including your browsing history, search history, and interactions with our advertising.

3. How We Collect Personal Information

We collect Personal Information from the following sources:

• Directly from you: such as when you create an account, place an order, contact customer support, or present your membership QR code in-store to link your purchase with your account.
• Automatically: such as when you interact with our websites, mobile applications, emails, chatbots, or advertisements, including through cookies and similar tracking technologies.
• From service providers acting on our behalf: such as payment processors, shipping providers, analytics providers, and marketing partners that support our services.
• From third-party platforms: If you choose to register or log in through third-party services such as Google or Apple, we may receive certain profile information (such as your name and email address) from those services. Depending on your settings with the third-party provider, certain updates to your information may be reflected in your account.
• From in-store interactions: such as when you make purchases, sign up for membership, or are recorded by in-store security systems, where permitted by law.

4. How We Use Personal Information

We use Personal Information for the following purposes:

• Order Processing: to process and fulfill your orders, including payment processing, shipping and delivery, and returns.
• Account Management: to create and manage your account, verify the existence of pre-existing OLIVE YOUNG GLOBAL accounts to prevent duplicate registrations and facilitate account creation, provide membership services, and maintain your preferences.
• Customer Support: to respond to your inquiries, provide assistance, and improve customer service.
• Personalization: to provide tailored product recommendations and content based on your interactions with our Services, such as the products you view or click on.
• Marketing and Communications: to send you promotions, updates, and information that may be of interest to you.
• Analytics and Improvement: to understand through third-party analytics providers how our Services are used, analyze trends, and improve our products, services, and user experience, including by delivering online behavioral advertising on and off our websites.
• Store Operations: to design and arrange our websites' and platforms' content and functionality; create non-personally identifiable information to be used for marketing, process transactions and provide services in our retail stores.
• Security, Fraud Prevention, and Store Safety: to protect our customers, employees, and property, verify your identity, prevent fraud, and ensure safety and security, including using security measures such as CCTV where applicable.
• Legal Compliance: to track, monitor, and comply with legal obligations regarding the safety of our products or Services.

5. How We Disclose Personal Information

We do not sell Personal Information for money. However, we share certain Personal Information with advertising partners to obtain analytics data, direct our marketing efforts, and serve advertising to you on or off our websites. You may opt out of the sharing of your Personal Information as described in the "Your Privacy Choices" section.

We may disclose Personal Information to the following categories of recipients:

• Affiliates: We may, in limited circumstances, disclose certain Personal Information to our affiliated companies, including our parent company, only as necessary to support account management or maintain records related to your prior interactions with our Services.
• Service Providers: such as vendors that provide services to us or on our behalf, including payment processing, customer support, order fulfillment, personalization and product recommendation services, and IT and system maintenance services.
• Logistics Providers: such as shipping and delivery partners.
• Analytics and Advertising Partners: such as marketing agencies, providers that help us analyze usage of our Services and deliver relevant advertising.
• Third Parties: such as Google, Meta, Snapchat, Tiktok, Reddit, Criteo for their direct marketing to you.
• Data Support: such as providers of database, software, email, security, backup and disaster recovery services.
• Professional Support: such as providers of insurance and other professional services, including consultants, attorneys, and accountants.
• Social Media Platforms: such as Facebook, Instagram, YouTube, Google, Pinterest, TikTok, and X, so you can connect to us, share your interests, express opinions about products and services, purchase our products, and generate interest in our products and services among members of your social networks. If you use third-party social media features available on our websites, we or the third party may collect or share your data, including your Personal Information. If you do not want us to be able to access information about you from third parties, you must limit data collection and disclosure in the privacy settings. We reserve the right to remove the Personal Information or other data of any person for any reason we, in our sole discretion, deem appropriate.
• Successors who acquire your Personal Information if we sell, merge, reorganize, dissolve, or similarly change our ownership or corporate structure.
• Government or third-party lawyers if required to do so by law or in our good faith belief that such action is necessary to:
  • comply with a legal obligation, such as to report a serious adverse event to FDA;
  • protect or defend our rights, interests, or property, or that of third parties;
  • prevent or investigate possible wrongdoing in connection with the Services or any of our stores;
  • act in urgent circumstances to protect the personal safety of users of the Services or the public; or
  • protect against legal liability.

5.1 Categories of Personal Information for California Residents

The table below describes the categories of personal information we collect, the sources, purposes, and categories of third parties with whom we share such information.

* We do not actively solicit or collect health information. However, if you voluntarily choose to provide such information in your Beauty Profile or otherwise, we will disclose it as follows.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate our Services, analyze usage, and provide personalized content and advertising.

These technologies may collect information about your interactions with our websites, mobile applications, emails, and advertisements.

You can manage your preferences, including opting out of certain advertising activities, by clicking the "Your Privacy Choices" link in the footer of our website.

Where required by law, we also honor browser-based opt-out signals, such as the Global Privacy Control (GPC).

7. Your Privacy Rights

You may withdraw your consent to our use or disclosure of your Personal Information at any time, subject to exceptions defined by law. If you change your privacy preferences in the future, that will not limit the lawfulness of any processing performed based on your prior consent. To withdraw consent, please email us at [email protected] and specify what you would like us to do. You may have additional rights under the laws of your state, with which we comply.

To stop email communications from us, you can also follow the unsubscribe instructions set forth at the bottom of our promotional e-mail messages. If you choose to limit our use of your Personal Information, you may not have access to certain functionality of the Services, such as promotions, product information, or opportunities.

Depending on your state of residence, you may have certain rights regarding your Personal Information, including:

• Right to Know / Access: the right to request the Personal Information we collect, use, and disclose about you, including categories, sources, and purposes.
• Right to Delete: the right to request deletion of your Personal Information, subject to certain exceptions.
• Right to Correct: the right to request correction of inaccurate Personal Information.
• Right to Opt-out of Sale or Sharing: the right to opt out of the sale of your Personal Information, or the sharing of your Personal Information for targeted or cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: the right to limit our use of sensitive Personal Information, where applicable, including identification numbers (like the Social Security number), financial account and access information, precise geolocation data, personal demographic information (like your race, religion, philosophical beliefs), genetic or biometric information, and information about your health or sexual activity. However, we do not intentionally collect sensitive Personal Information or use it, except for business purposes expressly permitted by law. We do not sell or share for behavioral advertising sensitive Personal Information.
• Right to Non-Discrimination: the right not to receive discriminatory treatment for exercising your privacy rights.
• Kentucky Right to Appeal: the right to appeal the denial of a request to exercise the rights above.

California Shine the Light Act Disclosure

California residents may request, once per calendar year, information about the categories of personal information (if any) we disclosed to third parties for those third parties' direct marketing purposes during the immediately preceding calendar year, as well as the names and addresses of those third parties.

If you are a California resident and wish to make such a request, please contact us by:

• Email: [email protected]

Please include your full name, mailing address, and email address in your request so that we can verify your identity and respond appropriately. We will respond to verified requests within 30 days of receipt. Please note that we are only required to respond to one such request per customer per calendar year, and we are not required to respond to requests made by means other than those designated above.

Alternatively, you may opt out of the sharing of your personal information with third parties for their direct marketing purposes by visiting our Your Privacy Choices page or by emailing us at [email protected].

8. How to Exercise Your Rights

To exercise any of your privacy rights described above, including the right to access, correct, or delete your Personal Information, you or your authorized agent may submit a request through the methods described below.

• Online: by submitting a request through our web form. For opt-out rights, you may manage your preferences in our cookie banner or by using a browser-based opt-out signal.
• Email or Customer Support: by contacting us using the information provided in the "Contact Us" section or emailing us at [email protected].

We are required to verify your identity before processing your request. This may include confirming certain information related to your account or recent interactions with us, including your name, email address, shipping address, or telephone number. When providing us with this information, you represent and affirm that all information provided is true and accurate. If we are unable to verify that the consumer submitting the request is the same individual about whom we have collected Personal Information, we may contact you for more information, or we may not be able to meet your request. Only you, or an agent legally authorized to act on your behalf, may make a verifiable request related to your Personal Information.

If you use an authorized agent, however, we will require that you (1) provide the authorized agent with signed permission to submit the request, (2) verify your identity directly with us, and (3) directly confirm to us that you provided the authorized agent permission to submit the request. These tasks will not apply if you have provided the authorized agent with the power of attorney pursuant to California Probate Code sections 4000 to 4465. For your protection, we may deny a request from an agent that does not submit proof that they have been authorized by you to act on your behalf. If you are an authorized agent, please Download the Authorized Agent Designation Form and upload the completed form through our web form.

We will respond to your request within the time frame required by applicable law (generally within 45 days) and may extend this period where permitted by law. Within 60 days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response, including a written explanation of the reasons for the decision.

Applicable law may allow or require us to refuse to provide you with access to some or all of your Personal Information, or delete some or all of your Personal Information, or we may have destroyed, erased, or made your Personal Information anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to or delete your Personal Information, we will inform you of the reasons why, subject to any legal or regulatory restrictions. If you delete your user content from the Services, copies of your User Content may remain viewable in cached and archived pages or might have been copied or stored by third parties.

9. Data Retention

We retain Personal Information for as long as necessary to fulfill the purposes described in this Privacy Notice, unless a longer retention period is required or permitted by law.

The retention period depends on various factors, including the nature of the information, the purposes for which it is processed, our business needs, and applicable legal or regulatory requirements.

When Personal Information is no longer needed, we delete it in accordance with our data retention practices.

We may anonymize your Personal Information so that it can no longer be associated with you for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

10. Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect your Personal Information.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. Any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Services.

To help protect your Personal Information, we encourage you to take reasonable steps, such as keeping your account credentials confidential and using appropriate security features on your devices. Please notify us promptly if you suspect any unauthorized access to or use of your account.

Saving your preferred payment type and payment information allows for a faster checkout experience. However, if your account is accessed by unauthorized individuals, unintended purchases may occur.

For your security, if you choose to use the "Keep me signed in" feature, we strongly recommend enabling device-level security, such as a password, PIN, or biometric authentication (Touch ID/Face ID) on your PC or mobile device. Please remain vigilant in managing your device and account credentials to ensure the safety of your payment information. You can manage your "Keep me signed in" status and saved payment methods at any time.

• To disable automatic login: Uncheck "Keep me signed in" during the login process.
• To remove saved payment methods: Delete your registered card information within the Checkout page.

Disclaimer: You are solely responsible for preventing unauthorized access to your account. Our limitation of liability, as outlined in our Terms of Use, applies to any damages resulting from such unauthorized access. If you do not agree to these terms, please do not enable the "Keep me signed in" feature or save your payment information.

11. Retail Store Privacy

When you visit our retail stores, we may collect and process Personal Information as described below.

• In-Store Purchases and Membership: When you make a purchase in our stores, we collect Personal Information necessary to process your transaction. If you choose to use membership benefits, such as earning or redeeming points, our staff may scan your membership QR code to access and apply your account information.
• In-Store Appointments and Reservations: If you make a reservation or join a waitlist through in-store systems or third-party platforms, we may collect information such as your name, contact information, and appointment details. Such third-party platforms may also collect and process your information in accordance with their own privacy policies.
• In-Store Devices and Skin Analysis Tools: If you use in-store devices or skin analysis tools, we may collect certain information you provide and limited data generated during the session to deliver the requested service. Where applicable, such tools are operated by third-party service providers acting on our behalf and such providers process information solely on our instructions and for the purposes described in this Privacy Notice. Images captured during the analysis are used solely for analysis purposes and are not used to identify individuals as biometric identifiers. Such images are retained for up to seven (7) days to allow access to results and are then deleted.
• CCTV and Store Security: Our stores may use video surveillance systems for security, safety, and loss prevention purposes, where permitted by law.
• In-Store Wi-Fi: If you use Wi-Fi services provided in our stores, we may collect certain information such as device identifiers (e.g., MAC address) for network management and security purposes.

We use this information to operate our stores, provide services, improve customer experience, and ensure safety and security.

12. Children's Privacy

Our Services are intended for individuals who are at least 16 years of age. We do not knowingly collect Personal Information from individuals under the age of 16, nor do we sell or share Personal Information of children under 16 years of age.

If we become aware that we have collected Personal Information from an individual under 16, we will take steps to delete such information.

If you believe that a minor under 16 has provided us with Personal Information, please contact us as described in the "Contact Us" section below.

NOTICE TO MINORS — RIGHT TO REMOVE POSTED CONTENT (CALIFORNIA)

If you are a California resident under the age of 18 and a registered user, you have the right to request the removal of content or information that you have publicly posted on our website. To request removal of content or information you have posted, please email us:

• Email: [email protected]

Please include the following information in your request:

1. Your name and registered account email address;
2. A description of the content or information you would like removed; and
3. The URL or location on our website where the content or information appears.

We will process your request promptly and, where required by law, remove or anonymize the content so that it is no longer visible to other users. Please note that requesting removal from the website does not ensure or require the complete or comprehensive removal of the content from the internet. Third parties may have copied, reposted, or otherwise retained your content before the removal was processed.

13. Financial Incentive Notice

We may offer programs, such as discounts, rewards, or membership programs (collectively, "Financial Incentives"), that provide benefits to you in connection with the Personal Information you provide to us.

For example, our membership program may offer points or rewards based on your purchases and interactions with us.

Because these programs involve the collection of Personal Information and the provision of benefits, they may be considered a Financial Incentive under California law or a "bona fide loyalty program" under certain other state laws.

If you choose to participate in a Financial Incentive program, we may collect Personal Information such as identifiers (e.g., name and email address), commercial information (e.g., purchase history and membership tier), and inferences (e.g., preferences). The amount of Personal Information that we collect from a member or non-member may vary and is dependent on the level of interactions and engagement that you have with us.

We use this information to operate and improve the program, provide benefits, and personalize your experience.

You may opt in by following the applicable sign-up or participation instructions, and you may withdraw at any time by following the instructions provided in the program or by contacting us.

If you request deletion of Personal Information necessary to provide the Financial Incentive, you may no longer be able to participate in the program.

The value of any financial incentive to program members is reasonably related to the value of the Personal Information you provide and varies significantly as individual members take advantage of benefits to varying degrees.

14. Changes to This Privacy Notice

We may update this Privacy Notice from time to time. When we do, we will revise the "Last Updated" date at the top or bottom of this Notice.

If we make material changes, we may provide additional notice, such as by posting a notice on our Services or contacting you directly where required by law.

15. Contact Us

If you have any questions or concerns about this Privacy Notice or our privacy practices, please contact us at:

CJ Olive Young USA Inc.
Address: 300 S Grand Ave Suite 1100, Los Angeles, CA 90071
Email: [email protected]
Tel: (844) 871-4887