Last Modified: 20 December 2022

Introduction

Your privacy is important to Coty Inc. and its affiliates and subsidiaries ("Coty", "us", "our") and we are committed to protecting your personal information. For the purposes of this Privacy Notice ("Notice"), personal information means any information that could be used to directly or indirectly identify a particular individual, as defined under applicable data privacy law. This Notice relates to our use of your personal information when you:

This Notice explains who we are; what information we collect about you; how we use it (including who we share that information with); our use of cookies; and your rights and choices regarding your personal information. Unless otherwise defined in this Notice, capitalized terms used in this Notice have the same meaning as in our Terms of Use.

The relevant Coty entity that is responsible for your personal information will be the Coty entity that collected your personal information. We may share your personal information within our group, and other Coty entities may also use your personal information in accordance with this Notice.

Coty is home to iconic global and regional brands. More information about our associated brands can be found here (the “Coty Brands").In some instances, this Notice will not apply to a Coty Brand and the relevant Coty Site will display a brand specific privacy notice. For those Coty Brands, you should refer to that privacy notice for more information about how it uses your personal information.

If you have any questions or concerns about our use of your personal information, then please contact us using the contact details provided in section "How do I contact Coty?" of this Notice.

Quick links

We encourage you to take the time to review this Notice in full to make sure you are fully informed. However, if you only want to access a particular section of this Notice, then you can click on the relevant link below to jump to that section:

1. Who is Coty?

Coty is a world leading beauty company, making cosmetic, skincare, fragrances, hair color and styling brands. Our three divisions – Luxury, Professional Beauty and Consumer Beauty – are home to iconic global brands and much loved regional brands. Luxury is focused on prestige fragrances and skincare; Professional Beauty is focused on servicing salon owners and professionals in both hair and nail; and Consumer Beauty is focused on mass color cosmetics, mass retail hair coloring and styling products, body care and mass fragrances.

2. What information does Coty collect about me?

The personal information that we may collect about you broadly falls into the following categories:

3. How does Coty use my information?

We will use your personal information for the purposes set out in this Notice, which will include:

4. On what basis can Coty use my information in this way?

We are required to satisfy one or more of the reasons set out by applicable data privacy law before we can collect and use your personal information.

Generally, our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. However, we will normally rely on the following reasons to collect and use your personal information:

What are the legal grounds?

What are they?

Performance of a contract

Using your information may be necessary for us to perform our obligations under a contract with you or with a view to entering into such a contract. For example, where you have: (i) requested services and/or products from us, we will need to use your information to provide those services and/or products that you have requested; or (ii) approached us in relation to employment opportunities, the collection and use of your personal information is necessary to enable us to offer you the job role, process your acceptance of the offer, on-board you as an employee and fulfil our obligations as an employer.

Compliance with our legal obligations

The collection and use of your personal information may be necessary to enable us to meet our legal obligations. For example, if you are a business customer we need to process your information to verify your identity and undertake necessary due diligence checks.

Pursuing our legitimate interests

Where such processing is not overridden by your rights, we are permitted to use your personal information to pursue our legitimate interests, for example to operate the Coty Sites and our other digital offerings, to improve our products and services, the Coty Sites, Coty Content and our other digital offerings or to undertake marketing. We may have other legitimate interests and if appropriate we will make this clear to you at the relevant time.
Consent

In some limited circumstances, we may rely on your consent to collect and use your personal information. For example, we may rely on consent: (i) where you have approached us in relation to employment opportunities and have provided us with sensitive personal information, such as information in relation to your racial and ethnic origin, sexual orientation, religion, physical and mental health, disabilities or trade union membership; or (ii) in relation to the sending of e-marketing or communication from different brands within the Coty group.

If we rely on consent, this will be made clear to you at the time we request your information. You can withdraw your consent at any point by using the mechanism provided at the time, or by contacting us using the contact details provided in the section “How do I contact Coty?” of this Notice.

Vital interests

In some instances, we may need to use your personal information to protect your vital interests or those of another person.

You may not always be required to provide the personal information that we have requested. However, if you choose not to provide certain information, you may not be able to take advantage of some of our services. Any information that is so required is clearly marked as mandatory. If you would prefer that we not collect certain personal information from you, please do not provide us with any such information, or opt out of providing this information where applicable.

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).

If we collect and use your personal information in reliance on our legitimate interests (or those of any third party), these interests will normally be as set out in this Notice; however if this changes we will make clear to you at the relevant time what those legitimate interests are.

If you have any questions or need further information concerning the legal basis on which we collect and use your personal information, please contact our Data Protection Team. Details for how to contact our Data Protection Team can be found in the section “How do I contact Coty?"

5. Does Coty use cookies and other similar technologies?

When you access the Coty Sites, view or interact with Coty Content or otherwise communicate with us digitally, Coty and our partners may place small data files on your Device, known as "cookies", to collect and use personal information about you, including to serve interest-based advertising. In order to opt out of interest-based advertising, please visit optout.networkadvertising.org and the DAA WebChoices Tool (for mobile apps). To learn more about cookies and other similar technologies, including how to amend your cookie settings, please refer to our Cookie Notice. Please also note that we do not respond to or honor “do not track" (a/k/a/ dnt) signals or similar mechanisms transmitted by web browsers.

When you: (i) sign-in to our Coty Sites using a Social Site or other websites; (ii) access Social Sites using the Coty Sites or other websites; and/or (iii) submit content to Social Sites or other websites using a Coty Site, that Social Site or other website may use cookies and similar technologies to collect data about user behavior for their own purposes. This use of cookies is in line with that third party’s own cookie policy, over which we have no control.

Please see section “What if I access or use a social network or public forum through a Coty Site?" for further information.

6.

During the past 12 months, we may have disclosed the categories of personal information listed in the section marked “What information does Coty collect about me?” to the following categories of recipients listed below:

7. What are my data protection rights?

Depending on where you live and subject to applicable data protection law, you may also have the following rights:

Under the California Civil Code Section 1798.83, if you are a resident of California, you may request and obtain from us once a year, free of charge, information regarding our disclosure (if any) of your personal information to third parties for marketing purposes in the preceding calendar year.

If you exercise any of your data protection rights detailed in this section, we will not discriminate against you and we will not deny you goods or services, charge you a different price, or provide you with a lesser quality of goods or services.

We have a strict policy where we do not rent or sell your personal information. We can confirm that we have not sold any California residents’ personal information to third parties in the preceding 12 months.

You can exercise these rights by contacting us using any of the methods provided in the section “How do I contact Coty?" of this Notice. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. In order to verify your identity and so that we can locate your personal information in our systems, we may require you to provide us with a copy of either your passport or driver’s licence when you make a request. In some circumstances, we may require additional documentation to verify your identity such as a utility bill to confirm proof of address and/or a customer reference number relating to your purchase and/or product you used.

You can exercise these rights yourself or designate an agent (such as a solicitor) to make a request on your behalf by executing a notarized power of attorney to enable that person to act on your behalf.

If you have any questions or concerns about how we use your personal information, please do not hesitate to let us know. You also have the right to lodge any complaints with a relevant supervisory authority.

8. How do I stop receiving marketing communications?

We will only send you marketing communications if you have agreed to this, or if we are otherwise permitted by law. If at any time you decide that you no longer wish to receive marketing communications from us, you may opt out by clicking on the relevant ‘unsubscribe’ link in the email you receive, by sending us an email, or by contacting us using the contact details in section "How do I contact Coty?" of this Notice. Please Note, whilst we will honor your request to stop receiving marketing communications, we will continue to send you service-related communications such as emails confirming purchases through the Coty Sites and keep your information for record keeping purposes.

9. For how long does Coty keep my information?

We will retain your information where we have an ongoing legitimate business need to do so (for example, to provide you with access to the Coty Sites or other digital offerings, to provide you with a product you have purchased, or to comply with applicable legal, tax, or accounting requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

10. Does Coty transfer my information to other countries?

As an international entity, in order to provide our services we may need to transfer and process your personal information internationally (including to destinations outside the European Economic Area (the “EEA") and the UK), notably throughout the Coty Group and to the jurisdictions in which those entities are based listed on our website. This means that when we process your personal information we may process it in any of these countries.

As a result, your information may be transferred to and/or processed in countries which may not guarantee the same level of protection for personal information as the country in which you reside. However, we have taken appropriate safeguards to ensure that your personal information will remain protected in accordance with this Notice. This includes implementing the European Commission's Standard Contractual Clauses for transfers of your personal information between our group companies, which require all group companies to protect personal information that they process from the EEA in accordance with European Union data protection law.

Further information can be provided on request: please contact us using the details found in the section “How do I contact Coty?" We have also implemented similar appropriate safeguards with our third party service providers and partners and further details can be provided upon request.

11. Is my information secure?

We understand that you care how your personal information is used and/or shared with others, and we value your trust and seek to safeguard your personal information.

We implement appropriate technical and organizational security measures, including physical, administrative and technical safeguards to protect your personal information from unauthorized access, use and disclosure. To ensure the security of your personal information, we communicate our privacy and security guidelines to all Coty employees and enforce privacy safeguards within our company.

The measures we use to protect your personal information are designed to provide a level of security appropriate to the risk of processing your personal information. However, please be aware that no electronic transmission of information can be entirely secure. We cannot guarantee that the security measures that we have in place to safeguard personal information will never be defeated or fail, or that those measures will always be sufficient or effective.

12. What if I access a website through a Coty Site?

As described above, the Coty Sites may contain links to and from other third-party websites and services (collectively, “Third Party Sites") that are not controlled and operated by us.

Please be aware, we have no control over the content, policies or actions of these Third Party Sites. Your use of these Third Party Sites is at your own risk and we do not accept any responsibility or liability for the privacy practices of these Third Party Sites. We encourage you to read the privacy policies and terms of use of each Third Party Site to which you link from the Coty Sites.

13.

The Coty Sites may facilitate easy access to certain social networking Third Party Sites and other websites or services with user-generated content features, such as Facebook, Instagram and Twitter (“Social Sites"). You understand that we do not control such services and are not liable for the manner in which they operate. Please review the Social Sites’ privacy policies if you would like more information about how they collect, use and share your data, your privacy rights and how to change your privacy settings.

The Coty Sites may enable you to:

We may also use any personal information you provide us with on our Sites, apps and/or devices (e.g. your name, email address, gender and phone number) to identify you on Social Sites in order to show you ads that are more relevant for you. While doing this, the Social Sites will not share your personal information with other parties and will delete the information promptly after the matching process is complete.

Our use of your personal information in relation to the Social Sites will be as set out in this Notice or as otherwise notified to you. Again, please note that Third Party Sites (including the Social Sites) may be under the control of a third party and we encourage you to familiarize yourself with the privacy policies and terms of use of each Third Party Site.

14. I have entered a contest, promotion or survey – how do I find out more about that?

Coty and its preferred third party service providers or business partners may offer sweepstakes, contests, promotions and surveys (each, a “Promotion") through a Coty Site.

Where we do this, we will use your personal information as set out in this Notice, or as otherwise notified to you. However, in certain cases, a third party’s privacy policy may apply to any personal information that you provide in connection with such Promotion. Before entering any Promotion, we encourage you to check who is operating the Promotion in question, and the terms, conditions, policies and rules that apply to it.

To learn more about the terms and conditions that apply to Promotions being run by Coty, please refer to our Promotion Terms and Conditions.

15. How old do I have to be to use the Coty Sites or other Coty digital offerings?

You must be aged 13 or over to use the Coty Sites and our other digital offerings.

We take your privacy very seriously and we understand the importance of taking extra precautions to protect the privacy and safety of children who use Coty’s products and services. We do not solicit or knowingly collect personal information from children aged 13 and under. If we are made aware that we have received such information, or any information in violation of our policy, we will use reasonable efforts to locate and remove that information from our records.

16. I am a Salon Owner – is there anything else I need to know?

Specific provisions apply to Salon Owners that use our Coty Sites and our other digital offerings– these are described below.

Each time you submit information relating to a ‘new client’, ‘member of staff’ or other personal information, please make sure that the relevant individual: (i) is over the age of 13; (ii) is aware that you will be sharing their details with us and our processing in accordance with this Notice; and (iii) has, if applicable, consented to receiving marketing communications from us and our affiliates.

You may only share these details with us when using a Coty Site and/or our other digital offerings where you have made those individuals aware of our Notice and how we will use their personal information. If we become aware that you have submitted personal information to a Coty Site and;/or any of our other digital offerings without permission, we will delete the information from our records.

17. What data does Coty collect if I visit a Coty Location?

We have Coty offices, warehouses, factories, salons and stores (“Coty Locations”) in many countries. If you visit a Coty Location we will collect your personal information for the following purposes:

CCTV outside some of the Coty Locations and in some public areas, for example reception areas, may not be operated by us and will be under the control of the relevant building landlord. Please consult their privacy notices for more information.

18. Does this Notice ever change?

We may update or modify this Notice from time to time in response to changing legal, technical or business developments. We will obtain your consent to any material Notice changes if and where this is required by applicable data protection laws. The date of the most recent version of this Notice will appear at the top of the page.

When we update our Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. For example, we will notify you of any changes to this Notice by posting a new Notice and updating the “last modified" date at the top of this page or by sending the new Notice to you via email, where appropriate.

19. How do I contact Coty?

If you have any questions regarding our privacy practices, how we handle your personal information and/or would like to submit a privacy request, please contact our Data Protection Team by either:

Thank you for taking the time to read this Notice.