Privacy Policy
THE POWER OF PEPTIDES
Discover formulas that hydrate and visibly smooth fine lines.
DISCOVER SOULCARE
“My skin didn't start to change until I changed the energy around me.” - Alicia Keys
Effective as of March 13, 2024
At e.l.f. Beauty (“we” or “us”), we believe in being clear and open about how we collect and use personal information related to you. In the spirit of transparency, this Privacy Notice provides you with information about the types of personal information we collect, how we use such personal information and to whom and under what circumstances we disclose it.
This Privacy Notice applies to personal information we collect from you, or that you provide to us, and communications from us, in connection with your use of, or participating in, the e.l.f. Beauty family of brands’ websites and mobile applications, promotions in which we are involved, and social media. Please read this Privacy Notice carefully so that you understand how we will collect, use, and process your personal information, and the rights you may have in relation to your personal information. Please note that certain of our websites, mobile applications, and social media may not be available in your country and that certain of our brands may not provide products or other services to consumers in your country.
If you do not agree with this Privacy Notice in general or any part of it, you should not use our websites, our mobile applications, request marketing material from us, or take part in our promotions or social media activity, as applicable.
If you are a California resident, please see the California Residents Privacy Addendum for additional information about our privacy practices and your rights as a California resident.
If you are located in the European Economic Area (the “EEA”) or the United Kingdom (and the applicable e.l.f. Beauty brand provides products or other services to consumers in your country), please see the EU/UK Privacy Addendum for additional information about our privacy practices and your rights under the General Data Protection Regulation and the UK GDPR (as applicable, the “EU/UK GDPR”). Please note that, as of the date of this Privacy Notice, Well People does not provide products or other services to consumers in the EEA or the United Kingdom, and as such the EU/UK Privacy Addendum will not apply to Well People’s websites and mobile applications.
Please note that all operations for the e.l.f. Beauty family of brands are operated through our primary operating companies:
Please note that this Privacy Notice does not apply to job applicants—if you apply for employment with e.l.f. Beauty, our Job Applicant Privacy Notice, available at www.elfbeauty.com/us-job-applicant-privacy-notice, will apply to how we collect and use personal information related to you.
We collect information about you in many ways from many places. Some of the information we collect may include information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your device (“personal information”). To the extent required by law, when we collect information from you, we indicate any information that you are required to provide to us, and the consequences of the failure to do so.
Whenever we use your personal information, we will have a reason to do this.
We use your personal information for one or more of the following legitimate business purposes:
In particular, in the table below, we explain:
What We Collect
How We Use It
Our Legal Basis for Processing, Using, and Storing It for Purposes of the EU/UK GDPR
Purchases and Order Management
Identifiers and commercial information that we collect, or you give us, when you place an order, including:
We use this information to:
We base this processing on:
Account Creation and Management
Identifiers and characteristics of protected classifications that we collect, or you give us, when you create an account or manage your account, including:
We use this personal information to:
Marketing and Promotional Materials
Identifiers that we collect, or you give us, when you sign up for our marketing materials:
Questions and Customer Service
Identifiers that we collect, or you give us, when you communicate with us whether in person, through our websites, mobile applications, through via email, over the phone, through social media or via any other medium, including:
Please note that if you communicate with us over the phone or via chat through our websites or mobile applications, your communications with us may be recorded by us or an agent acting on our behalf. By communicating with us over the phone or via chat through our websites or mobile applications, you expressly consent to the recording of such communications.
Online Browsing
Identifiers and internet or other electronic network activity that we collect through your use of our websites, mobile applications and communications with you (which may be through Tracking Technologies), including:
For more information on Tracking Technologies, see "Cookies and Traffic Data" section.
Location Information
Identifiers and internet or other electronic network activity that we collect through your use of our websites, mobile applications (which may be through Tracking Technologies), including:
Information from Third Parties
Identifier and commercial information, including:
Use of Social Media (2)
Identifiers and internet or other information that we collect when you publicly share or engage with content through social media, including:
Identifiers and other information that we collect when you publicly mention us on social media platforms, including:
Where possible, we do this in way that we are unable to directly identify you.
Promotions
Identifiers that we collect, or you give us, when you participate in a sweepstakes, contest, or other promotion, including:
User Generated Content
Identifiers and other information that we collect, or you give us, when you submit content (for example images or ratings and reviews) on our websites, mobile applications, or social media platforms, when you interact with/participate in our quizzes or other questionnaires, when you access and use our NFTs (if available), when you publicly tag us on a social media post, or accept our reuse of any content you posted on social media platforms.
We obtain all of the above personal information directly from you, except for personal information that we (i) receive from payment processing companies and address update services, (ii) obtain from publicly available social media profiles and social media engagement with our content, and (iii) obtain with respect to influencers, public relations/communications companies, as indicated above.
Influencer Data
We obtain contact details and other personal information regarding media contacts and influencers from a variety of sources including Cision. If you wish to know more about how such information is collected and used, please see Cision’s privacy notice at www.cision.com/us/legal/privacy-policy.
International Orders Through eShopWorld
With respect to e.l.f. Cosmetics / e.l.f. Skin and Keys Soulcare products purchased through www.elfcosmetics.com or www.keyssoulcare.com, we work with US Direct E-Commerce Limited (trading as eShopWorld) to sell and deliver our products to consumers in certain countries/regions outside of the United States. If you reside in one of the countries/regions where our international shipping is supported by eShopWorld and you purchase products through www.elfcosmetics.com or www.keyssoulcare.com, you will navigate away from our websites to a co-branded checkout service “powered by eShopWorld.” eShopWorld’s Privacy Policy (which can be viewed at https://esw.com/privacy-policy), and not our Privacy Notice, will apply to personal information that you provide on that checkout site. Before proceeding to make a purchase through eShopWorld, please read eShopWorld’s Privacy Policy for more information on how eShopWorld collects, uses, and shares your personal information.
Cookies and Other Tracking Technologies
Certain cookies, web beacons and other similar technologies (collectively, “Tracking Technologies”) that we employ are necessary for the operation of our website. Other Tracking Technologies that we employ are not necessary for the operation of our websites but are employed to enhance your use of our websites and shopping experience.
Our Tracking Technologies include session Tracking Technologies (temporary Tracking Technologies that identify and track users within our websites which are deleted when you close your browser or leave your session) or persistent Tracking Technologies (Tracking Technologies which enable our websites to “remember” who you are and to remember your preferences within our websites and which will stay on your computer or device after you close your browser or leave your session).
We use the following different types of Tracking Technologies:
Category
Description
Strictly Necessary
These are Tracking Technologies which are needed for our websites to function properly, for example, these Tracking Technologies allow you to access secure areas of our websites or to remember what you have put into your shopping basket.
Performance
These Tracking Technologies allow us to keep a record of traffic data, count visits, traffic sources, access rates, page hits and page views so we can measure and improve the performance of our website. They help us know which pages are the most and least popular and see how visitors move to and from and around our website.
Functional
These Tracking Technologies allow our websites to remember choices you make (such as your username, language, or the region you are in) and provide enhanced, more personal features. These Tracking Technologies allow the provision of enhance functionality and personalization, such as chats. They are set by us or by third party providers whose services we have added to our pages.
Targeting
These Tracking Technologies are set through our websites by our advertising partners. They are used by those companies to build a profile of your interests and show you relevant ads on other websites. They record a user’s visit to a website, the pages a user has visited and the links a user has followed. Companies will use this information to make the website more relevant to users. Companies may also share this information with third parties for this purpose.
Social Media
These Tracking Technologies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit.
You can find more general information about cookies and generally how to manage them at www.allaboutcookies.org and www.youronlinechoices.com.
We use third-party advertising companies (with your consent if you are located in the EEA or the United Kingdom) that use tracking technologies to serve our advertisements across the Internet. These companies collect personal information about your visits to our websites and other website/applications and your interaction with our advertising and other communications. These advertising companies serve ads on behalf of us and others on non-affiliated website, and some of those ads will be personalized, meaning that they are intended to be relevant to you based on personal information collected about your visits to our websites and elsewhere over time. Other companies may also use such technology to advertise on our website.
Google Analytics
We use Google Analytics, which is a web analytics tool that helps us understand how users engage with our website. Like many services, Google Analytics uses first-party cookies to track user interactions, as in our case, where they are used to collect details about how users use our website. This information is used to compile reports and to help us improve our website.
The reports disclose trends without identifying individual visitors.
Google Analytics services are provided in Europe by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and elsewhere by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated Google entities.
Google Analytics uses cookies to collect information about visitors to our websites (data related to the user’s device/browser, IP address and on-site activity). They measure and report on user interactions on our websites. This includes details of the volume and nature of traffic to our websites (for example, which pages users visit first, which pages are most popular, how long users stay on the site, and geographical region of users). Google may also use data collected from these reports to improve their own services, for benchmarking purposes and to provide technical support.
You can find out more about how Google uses personal information here: https://policies.google.com/privacy.
For residents of the EEA or the United Kingdom that are subject to the EU/UK GDPR, we base the use of Google Analytics on your consent.
You can opt out of Google Analytics without affecting how you visit our websites–for more information on opting out of being tracked by Google Analytics across all websites you use, visit this Google page: https://tools.google.com/dlpage/gaoptout.
eShopWorld
As noted in the “International Orders Through eShopWorld” section, we work with eShopWorld to sell and deliver certain of our products to consumers in certain countries/regions outside of the United States. eShopWorld’s Cookie Policy (which can be viewed at https://esw.com/cookie-notice) will apply to any Tracking Technologies that eShopWorld employs on the co-branded checkout service “powered by eShopWorld”. Before proceeding to make a purchase through eShopWorld, please read eShopWorld’s Cookie Policy.
Turning off Tracking Technologies
Please see the “Withdrawing Your Consent for (Opting-Out of) Tracking Technologies” section for information on how you can turn off Tracking Technologies on our websites.
We share personal information collected from, and about, you in certain circumstances, as described in this section.
For Business Purposes
We share personal information with service providers who help us run our business, including order management and shipping processors (including eShopWorld), payment processors, customer service providers, shopping experience service providers, customer relationship management service providers, analytics service providers, advertisers, loyalty program providers, product review program providers, cloud storage providers, and IT service providers. We share only the personal information needed for these service providers to complete the tasks we request. We also share personal information with professional advisors, such as auditors, law firms and accounting firms.
For Advertising
We share personal information with advertisers, advertising publishers, and marketing service providers to serve you targeted advertising.
With Your Consent
In certain circumstances and where required by law, we disclose personal information with companies, organizations or individuals with your express consent or with your direction.
For Legal Reasons
We also share personal information with third-parties if we are legally required to do so, or if we have a good-faith belief that access, use, preservation or disclosure of the personal information is reasonably necessary to:
Affiliated Brands and Companies
We also share personal information with our corporate affiliates, including our parent company, e.l.f. Beauty, Inc., or other brands in the e.l.f. Beauty portfolio. For additional information regarding our corporate affiliates or other brands, please visit elfbeauty.com.
In Connection with a Sale or Merger
If we directly or indirectly undergo a business transition (including proposed transactions), like a merger, acquisition by another company, or sale of all or part of our assets, we may disclose or transfer personal information to the successor organization in the transition.
Aggregated, Non-Personally Identifiable Information
We share aggregated, non-personally identifiable information with our service providers in order for those service providers to enhance and optimize their services and for statistical analysis, research, and other purposes.
Privacy Rights
Subject to applicable law, you may have certain rights with respect to your personal information.
e.l.f. Cosmetics / e.l.f. SKIN
Keys Soulcare
Well People
Privacy Rights Request Form
Do Not Sell or Share My Personal Info/Opt Out of Targeted Ads
Updating Your Information
If you maintain an account with us, you may view, update, correct or modify certain of your personal information by signing into your account. Please note that you need to update, correct, or modify your personal information in each of your accounts with our brands as changes in one brand account will not automatically update your other brand accounts.
Withdrawing Your Consent for (Opting-Out of) Promotional Emails
If you do not wish to receive email communications from us about special offers and promotions, you can opt-out of receiving these communications by following the instructions contained in the messages you receive. Even if you opt-out of receiving these messages, we reserve the right to send you certain communications relating to the services we provide, service announcements and administrative messages. We do not offer you the opportunity to opt-out of receiving those service or administrative communications.
Withdrawing Your Consent for (Opting-Out of) of SMS Text Messages
If you are a resident of a jurisdiction in which one of our text message program is available and you do not wish to receive text message communications from us about special offers and promotions, you can opt-out of receiving these communications by following the instructions in the applicable terms and conditions for the text message program:
Withdrawing Your Consent for (Opting-Out of) of Mobile Application Push Messages
If you use our mobile application and you do not wish to receive push notifications from us on your device, click "Don't Allow" or a similar button when prompted asking if you would like to allow push notifications. If you have allowed push notifications from us but later decide you no longer want to receive them, you can adjust your settings options, or turn them off through your device notifications settings.
Withdrawing Your Consent for (Opting-Out of) of Mobile Application Location Services
If you use our mobile application and you do not wish to allow us to access specific location information of the device with which you are accessing our mobile application, click "Don't Allow" or a similar button when prompted asking if you would like to allow location services or a similar setting. If you have allowed location information from us but later decide you no longer want to allow us to access location information, you can adjust your device settings options.
Withdrawing Your Consent for (Opting-Out of) Tracking Technologies
You can set your browser to reject Tracking Technologies, warn you about attempts to place Tracking Technologies on your computer or device, or limit the type of Tracking Technologies you allow. You can also manually delete individual or all the Tracking Technologies on your computer or device by following your browser’s or device’s help file directions. You can also set your browser or device to delete Tracking Technologies every time you finish browsing. Please note that browser- and device-management tools for Tracking Technologies are outside of our control and we cannot guarantee their effectiveness. Please also note that flash-based Tracking Technologies operate differently than browser Tracking Technologies and cookie management tools available may not remove flash Tracking Technologies.
For certain of our websites, you may also turn off Tracking Technologies that are not necessary for the operation of our websites by using the “Cookie Settings” or “Manage Consent” link in the footer of our website (depending on which website you are visiting).
Please note that if you turn off Tracking Technologies that are not necessary for the operation of our websites, your browser or device is set to reject Tracking Technologies, or you manually delete Tracking Technologies, some or all the features and functionality of our websites may not function properly (including features we add to our websites in the future).
Opting Out of Third-Party Tailored Advertising
If you are interested in more information about tailored advertising and your choices to prevent third parties from delivering tailored web and mobile web advertising, please visit the following websites:
These opt-out tools are provided by third parties (and not by us). We do not control or operate these tools or the choices that advertisers and others provide through these tools.
We maintain administrative, technical and physical safeguards designed to protect the personal information you provide against accidental, unlawful or unauthorized access, destruction, loss, alteration, disclosure or use. Please be aware that, despite our efforts, no security measures are perfect and we cannot guarantee “perfect security”. Any information you transmit to us, you do at your own risk.
We strive to be transparent about the ways in which we collect and use personal information and welcome your questions and concerns. If you have any concern or complaint about the way we handle your personal information, please contact us using the contact information detailed in the "Contact Us" section.
To the extent you believe we have not addressed your concerns or otherwise choose to do so, you have the right to complain to a supervisory authority in the country where you reside. In the United Kingdom, contact details for the relevant supervisory authority are available here. In the EEA, contact details for the relevant supervisory authority are available here.
We use third-party advertising companies that use tracking technologies to serve our advertisements across the Internet. These companies may collect personal information about your visits to our websites or mobile applications and other websites/applications and your interaction with our advertising and other communications. These advertising companies serve ads on behalf of us and others on non-affiliated websites, and some of those ads may be personalized, meaning that they are intended to be relevant to you based on personal information collected about your visits to our websites and elsewhere over time. Other companies may also use such technology to advertise on our website.
Our websites and mobile applications are not directed to children, nor do we knowingly collect any personal information from children under the age of 13 (or with respect to residents the EEA, children under the age of 16) without verifiable parental or legal guardian consent.
Our websites or mobile applications contain links to third-party websites, such as social media websites (for example, Instagram, Facebook, YouTube, TikTok, Pinterest, X, and Snapchat), each of which have privacy policies that differ from this Privacy Notice. We are not responsible for the activities and practices that take place on these websites. Accordingly, we recommend that you review the privacy policy or privacy notice/statement posted on any external website before disclosing any personal information. Please contact those websites directly if you have any questions about their privacy policies.
We may change this Privacy Notice from time to time, including as required to keep current with rules and regulations, new technologies and security standards. When we do, we will post the change(s) on the applicable privacy notice page of our websites. For significant changes, we will notify you by posting a notice on the applicable website indicating at the top of the Privacy Notice when it was most recently updated or notify you in another appropriate manner consistent with applicable law. If you wish to review a copy of the privacy notice effective prior to the effective date of this Privacy Notice, please contact us using the contact information detailed in the "Contact Us" section.
If you have questions or concerns about this Privacy Notice or how we collect and use the personal information of our consumers, please contact us using the contact information provided below.
Webform
www.elfcosmetics.com/contact-us/contact-us.html
Phone
(212) 239-1530
Weekdays 9:30am-5:30pm ET
Email
elfcare@elfcosmetics.com or elfcare.eu@elfcosmetics.com (for EEA or United Kingdom residents)
Writing
e.l.f. Cosmetics, Inc. 570 10th Street Oakland, CA 94607 ATTN: Legal Department RE: Privacy Info
www.keyssoulcare.com/contact-us.html
customercare@keyssoulcare.com
Keys Soulcare c/o e.l.f. Cosmetics, Inc. 570 10th Street Oakland, CA 94607 ATTN: Legal Department RE: Privacy Info
www.wellpeople.com/contact-us.html
support@wellpeople.com
W3LL People, Inc. 570 10th Street Oakland, CA 94607 ATTN: Legal Department RE: Privacy Info
Last Updated: March 13, 2024
Please note that the California Residents Privacy Addendum only applies to California residents.
Collection of Personal Information
During the 12-month period prior to the last update of this California Residents Privacy Addendum, we have collected the personal information listed in the "What Information Do We Collect, How Do We Collect It, And How Do We Use It?" section of the Privacy Notice.
We do not collect or process sensitive personal information for purposes of inferring characteristics about consumers. We may, however, use certain personal information that we collect from and about you (e.g., your demographic information, billing or shipping location, or information about your interaction with our websites and mobile applications) to draw inferences about you, such as your characteristics, interests, or preferences. As with all other personal information, our processing of such inferences is governed by this Privacy Notice.
To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.
Disclosure of Personal Information
In the table below, we explain the categories of personal information we have disclosed to third parties for a business purpose during the 12-month period prior to the last update of this California Residents Privacy Addendum, and the categories of third-party recipients.
What We Disclosed
Who We Disclosed It To
Identifiers, including your first and last name, billing address, mailing address, phone number, email address, and internet protocol (IP) address
We disclosed this information to:
Personal information listed in the California Customer Records statute, including your first and last name, billing address and mailing address
Commercial information, including purchase and order management information
Internet or other electronic network activity information, including browsing history, search history, IP location, and information regarding your interaction with our website, applications and electronic communications;
Specific location
In addition to the categories of third parties identified above, during the 12-month period prior to the Last Updated date of this California Residents Privacy Addendum, we may have disclosed personal information about you to government entities and third parties in connection with corporate transactions, such as mergers, acquisitions or divestitures.
Financial Incentive
We offer certain loyalty and rewards programs that may be considered financial incentives under California law, such as the e.l.f. Beauty Squad Loyalty Program, the Soulcare Rewards Loyalty Program, and exclusive offers and promotions via email. When you sign up for and participate in these programs, we may ask you to provide us with contact information and identifiers such as your name and email address, and commercial information such as your purchase history. Participation in these programs is voluntary and no purchase is required to become a member of the Beauty Squad Loyalty Program (you can join the Beauty Squad Loyalty Program here and review the terms of the Soulcare Rewards Loyalty Program here) or the Soulcare Rewards Loyalty Program (you can join the Soulcare Rewards Loyalty Program here and review the terms of the Beauty Squad Loyalty Program here). While we cannot calculate the precise value of your information, our programs generally reflect the value of the relationships that we have with the individuals who participate in them. You may withdraw from our loyalty programs at any time by contacting us using the designated method set forth in the applicable rules, such as by closing your account or opting out from our email and SMS communications.
Sale or Sharing of Personal Information
We do not sell your personal information for monetary compensation. However, like most online businesses, we share some information with advertisers, advertising publishers, and marketing service providers to serve you targeted advertising (including cross-device marketing or advertising campaigns (where we can infer that a particular browser, device, or pseudonymous identifier belongs to you)). These third parties may collect personal information via automated technologies on our websites for cross-context behavioral advertising purposes. This kind of sharing may be considered a “sale” of personal information under California law when the personal information is exchanged for non-monetary consideration.
We may sell or share for cross-context behavioral advertising purposes (and, during the 12-month period prior to the last update of this California Residents Privacy Addendum, we may have sold or shared) the following categories of personal information with these third parties:
You have the right to opt out of this disclosure of your personal information. If you wish to request that we do not sell or share your personal information, please contact us using the contact information detailed in the “Exercising Your California Privacy Rights” section of this California Residents Privacy Addendum.
We do not have actual knowledge that we sell or share personal information of individuals that are California residents under the age of 16.
Retention of Personal Information
We will retain your personal information for the time period reasonably necessary to achieve the purposes described in this Privacy Notice and California Residents Privacy Addendum, or any other notice provided at the time of collection, taking into account applicable statutes of limitation and records retention requirements under applicable law.
You have certain choices regarding your personal information, as described below.
If you choose to exercise any of your rights under California law, we will not discriminate against you because you have exercised any of these rights.
Other California Privacy Rights
Shine the Light Requests.
California law permits our consumers who are California residents to request certain information about our disclosure of personal information to third parties for their own direct marketing purposes during the preceding calendar year. This request is free and can be made once a year using the contact information detailed in the “Exercising Your California Privacy Rights” section of this California Residents Privacy Addendum.
Online Eraser Law.
If you are under 18 years of age, reside in California, and have a registered account with us, you have the right to request removal of unwanted information that you publicly post on the applicable website or mobile application. To request removal of such information, please contact us using the contact information detailed in the “Exercising Your California Privacy Rights” section of this California Residents Privacy Addendum, with details on where the information is posted. Upon receiving such a request, we will make reasonable good faith efforts to ensure that the information is not publicly available on the applicable website or mobile application, but the information will not be completely or comprehensively removed from our systems and databases.
Additional Information
Your browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and services (including behavioral advertising services) that you do not wish such operators to track certain of your online activities over time and/or across different websites. Because there is no standard interpretation or practice for Do Not Track signals, like many websites, our website does not support Do Not Track requests at this time.
However, to opt-out of cookie and web beacon tracking, please see the “Withdrawing Your Consent for (Opting-Out of) Tracking Technologies” section of the Privacy Notice, or to opt-out of website-based third-party interest-based or online behavioral advertising, please see the “Opting Out of Third-Party Tailored Advertising” section of the Privacy Notice.
To make any of the requests or exercise any of your California privacy rights described above, please contact us using one of following methods. Please note that you can only make a verifiable request for access twice within a 12-month period.
You may access certain personal information by signing into your account for the relevant brand. From there, you can update, correct, or modify that personal information (other than your order history)—you will need to update, correct, or modify your personal information in each of your accounts with our brands as changes in one brand account will not automatically update your other brand accounts. Please note that deleting any personal information in your account will not completely delete that information from our systems—to request that we delete your personal information from our systems, you must follow the directions below.
If you wish to access any personal information that is not contained in your relevant brand account profile, if you do not have an account and wish to access your personal information, if you wish to otherwise request information from us about the information we collected about you over the past 12 months, or if you wish to submit a deletion request, please contact us as detailed in the "Contact Us" section of this California Residents Privacy Addendum.
Please note that if you are a member of one of our loyalty programs and you request that your personal information is deleted, you will be removed from that particular brand loyalty program.
Via the Internet
Privacy Rights Request Form. If you wish to submit an access or deletion request or if you wish to request that we do not sell your personal information or share your personal information for cross-context behavioral advertising, please click the “Privacy Rights Request Form” link in the footer of the applicable website. Please follow the instructions on the form to make your request.
Do Not Sell or Share My Personal Information/Opt Out of Targeted Advertising. If you wish to request that we do not sell your personal information or share your personal information for cross-context behavioral advertising, please click the “Do Not Sell or Share My Personal Info/Opt Out of Targeted Ads” in the footer of the applicable website. Please follow the instructions.
For your convenience the links for the Privacy Request Form and the “Do Not Sell or Share My Personal Info/Opt Out of Targeted Ads” are below:
You also can opt out of the sale or sharing of your personal information by broadcasting the Global Privacy Control signal from a supported browser.
By mail
To submit an access, correction, deletion, Shine the Light or Online Eraser request, you can also write to us at the address detailed in the "Contact Us" section of this California Residents Privacy Addendum. Please include your full name, mailing address, and any email address associated with your activity with us (for example, the email you used to receive marketing emails or order confirmations, or the email you have used in connection with your account (if you are a member)), and let us know which California privacy right you are exercising and with respect to which e.l.f. Beauty brand that you are exercising your California privacy rights so that we can process your request or exercising of your rights in an efficient manner.
By telephone
To submit an access, correction, deletion, Shine the Light or Online Eraser request via telephone, please call us at the following toll-free number: (888) 315-9814. When you call us, please let us know which California privacy right you are exercising and with respect to which e.l.f. Beauty brand that you are exercising your California privacy rights, so that we can process your request in an efficient manner.
Verifying Requests
To protect your information, we may need to verify your identity before processing any requests to exercise your right to access and right to request deletion. This will include verifying that the email address you provide in connection with your request matches the email address we maintain on file for you. In some cases, we may ask that you provide additional information to verify your identity, such as your full name or date of birth.
To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.
Requests by Authorized Agents
You can exercise these rights yourself or you can designate an authorized agent to make these requests on your behalf. We will request that your authorized agent have written permission from you to make requests on your behalf (or that you otherwise directly confirm the agent has permission to submit the request) and will need to verify your identity.
To submit a request as an authorized agent on behalf of a consumer, please email us at elfcare@elfcosmetics.com with the subject line “Authorized Agent—California Privacy Rights Request” and in the body of the email, please let us know which California privacy right you are exercising and with respect to which e.l.f. Beauty brand that you are exercising your California privacy rights, so that we can process your request in an efficient manner. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.
If you have questions or concerns about this California Residents Privacy Addendum, please contact us using the following contact information.
elfcare@elfcosmetics.com
Please note that Well People does not provide products or other services to consumers in the EEA or the United Kingdom, and as such this EU/UK Privacy Addendum will not apply to Well People’s websites and mobile applications.
WHO WE ARE AND WHEN THIS EU/UK PRIVACY ADDENDUM APPLIES
For purposes of EEA and United Kingdom data protection laws, e.l.f. Cosmetics, Inc., a corporation registered in the state of Delaware, USA is the controller of the personal information you provide to us, or that is collected or processed by or for us with respect to e.l.f. Cosmetics, e.l.f. Skin, or Keys Soulcare. Contact information for e.l.f. Cosmetics, Inc. can be found here.
Our representative for purposes of Article 27 of the General Data Protection Regulation is Thilo Noack at SBS Data Protect GmbH. The address and contact information for SBS Data Protect GmbH is:
SBS Data Protect GmbH Attention: Thilo Noack Hans-Henny-Jahnn-Weg 49 22085 Hamburg, Germany info@sbs-data.de +49 40 7344086-0 +49 177 6422164
IMPORTANT: Your personal information will be sent to the United States and possibly other countries.
Our websites are hosted in the United States. If you are visiting one of our websites from outside the United States, your personal information will be transferred to, stored in, or processed in, the United States and transferred to, stored in, or processed in additional countries where our third-party service providers maintain facilities or operations. These countries include the United Kingdom, Ireland, the Netherlands, and Germany.
Where we transfer, store, or process your personal information outside of the EEA or the United Kingdom:
You can request a copy of the instruments we use by contacting us using the contact details provided in the "Contact Us" section of this EU/UK Privacy Addendum.
Please note that the data protection and other applicable laws of the United States or other countries may not be as comprehensive as those laws or regulations in your country or may otherwise differ from the data protection laws in your country. Your personal information may be available to government authorities under lawful orders and law applicable in such jurisdictions.
How long we retain your personal information depends on why and how we collected it and how we use it. We will keep your personal information for as long as we need it for the purposes described in this Privacy Notice and to meet our legal obligations as explained further below.
To determine the retention period of your personal information, we consider several criteria to make sure that we do not keep your personal information for longer than is necessary or appropriate. These criteria include:
When we no longer need to retain your personal information, it will be deleted or be anonymized so that you can no longer be identified from it.
Accessing, Correcting, and Updating Your Personal Data
You have the right to access, correct, and update your personal information. You can access certain personal information by signing into your account for the relevant brand. From there, you can update, correct, or modify that personal information (other than your order history)—you will need to update, correct, or modify your personal information in each of your accounts with our brands as changes in one brand account will not automatically update your other brand accounts. Please note that deleting any personal information in your account will not completely delete that information from our systems—to completely have your personal information deleted, you must follow the directions in the “Requesting We Delete Your Personal Data” section of this EU/UK Privacy Addendum.
If you wish to access, correct, or modify any personal information that is not contained in your account profile (or if you wish to know the purposes for which your personal information is processed, the categories of data processed, third party recipients, if any, of your personal information, or third party sources, if any, of your personal information), please contact us using the contact information detailed in the “Exercising Your EU/UK GDPR Privacy Rights” section of this EU/UK Privacy Addendum.
Requesting Copies of Your Personal Data
You have the right to request a copy of your personal information held by us. In some circumstances you also have the right to request a copy in a structured, commonly used, and machine-readable format and/or request us to transmit this personal information to another service provider (where technically feasible). If you wish to request copies of your personal information held by us, please contact us using the contact information detailed in the “Exercising Your EU/UK GDPR Privacy Rights” section of this EU/UK Privacy Addendum.
Requesting We Delete Your Personal Data
You have the right to request that we delete your personal information in certain circumstances. If you wish to request that your personal information is deleted, please contact us using the contact information detailed in the “Exercising Your EU/UK GDPR Privacy Rights” section of this EU/UK Privacy Addendum.
We will need to retain certain records, for example those relating to open orders, payments, or customer service matters, or for legal and accounting purposes.
Note that if you have multiple email addresses linked to your account (or you used multiple email addresses in connection with purchases) you will need to make a data deletion request with respect to each email address in order for us to fully delete your personal information.
Objecting to Processing of Your Personal Data
You have the right to object, for legitimate purposes relating to your particular situation, to the processing of personal information as provided under applicable law. If you wish to object to processing of your personal information, please contact us using the contact information detailed in the “Exercising Your EU/UK GDPR Privacy Rights” section of this EU/UK Privacy Addendum.
Requesting that We Restrict Processing
You have the right to request that we restrict processing of your personal information. If you wish to request that we restrict processing of your personal information, please contact us using the contact information detailed in the “Exercising Your EU/UK GDPR Privacy Rights” section of this EU/UK Privacy Addendum.
If you wish to withdraw your consent to our processing of certain types of your personal data based on consent, or to promotional emails or third-party tailored advertising, please follow the applicable procedure in the "Your Rights and Choices" section of the Privacy Notice or, if not addressed, please contact us using the contact information detailed in the “Exercising Your EU/UK GDPR Privacy Rights” section of this EU/UK Privacy Addendum.
If you wish to withdraw your consent to cookie tracking, you can turn off Tracking Technologies that are not necessary for the operation of our website. You can turn off these Tracking Technologies by using the “Cookie Settings” or “Manage Consent” link in the footer of our website (depending on which website you are visiting).
Please note that if you withdraw consent for a particular feature, we cannot provide or continue to provide certain services or marketing communications to you and that withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
Right to Give Us Postmortem Instructions (If Such Rights Exist in the Country Where You Reside)
If such rights exist in the country where you reside, and you wish to give us guidelines regarding the retention, erasure and disclosure of your personal information after your death, please contact us using the contact information detailed in the "Contact Us" section of this EU/UK Privacy Addendum. When you contact us, please be sure to note your country of residence and that you are giving us guidelines regarding the retention, erasure and disclosure of your personal information after your death in compliance with the law as well as with respect to which e.l.f. Beauty brand that you are giving us instructions so that we can efficiently process request.
If you need assistance or if you have questions about your right to give us post mortem instructions, please contact us using the contact information detailed in the "Contact Us" section of this EU/UK Privacy Addendum.
To make any of the requests or exercise any of your EU/UK GDPR privacy rights, including your right to access or deletion, please contact us using one of following methods. We respond to all data protection requests we receive in accordance with applicable data protection laws.
You can exercise these rights yourself or you can designate an authorized agent to make these requests on your behalf. We will request that your authorized agent have written permission from you to make requests on your behalf (or that you otherwise directly confirm the agent has permission to submit the request) and we will need to verify your authorized agent’s identity.
International Orders Through eShopWorld. Please note that if you purchased products from us through eShopWorld (as noted in the “International Orders Through eShopWorld” section of the Privacy Notice), eShopWorld may also be considered a controller of your personal information and as such you may also need to submit a data protection request directly to eShopWorld as detailed in eShopWorld’s Privacy Policy (which can be viewed at https://esw.com/privacy-policy).
If you wish to exercise any of your EU/UK GDPR privacy rights via our websites, please click the “Privacy Rights Request Form” link in the footer of our website. Please follow the instructions on the form to make your request. For your convenience the links for the Privacy Request Form are below:
If you wish to exercise any of your EU/UK GDPR privacy rights, you can write to us at the address detailed in the "Contact Us" section of this EU/UK Privacy Addendum. Please include your full name, mailing address, and any email address associated with your activity with us (for example, the email you used to receive marketing emails or order confirmations, or the email you have used in connection with your account (if you are a member)) and let us know which EU/UK GDPR privacy right you are exercising and with respect to which e.l.f. Beauty brand that you are exercising your EU/UK GDPR privacy rights so that we can process your request or exercising of your rights in an efficient manner.
If you wish to exercise your right to access or your right to deletion via telephone, please call us at the following number: +1 (888) 315-9814. When you call us, please let us know that you are exercising your EU/UK GDPR) privacy rights, which privacy right you are exercising, and with respect to which e.l.f. Beauty brand that you are exercising your EU/UK GDPR privacy rights so that we can process your request or exercising of your rights in an efficient manner.
Other Methods
You may also contact us using the contact information detailed in the "Contact Us" section of this EU/UK Privacy Addendum. When you contact us, please let us know that you are exercising your EU/UK GDPR privacy rights, which privacy right you are exercising, and with respect to which e.l.f. Beauty brand that you are exercising your EU/UK GDPR privacy rights so that we can process your request or exercising of your rights in an efficient manner.
If you have questions or concerns about this EU/UK Privacy Addendum, please contact us using the following contact information:
+1 (212) 239-1530
elfcare.eu@elfcosmetics.com
Keys Soulcare c/o e.l.f. Cosmetics, Inc. 570 10th Street Oakland, CA 94607 ATTN: Legal Department RE: EU/UK Privacy Info