PRIVACY NOTICE

European Union
e.l.f. Cosmetics
Effective as of June 15, 2020

At e.l.f. Cosmetics, Inc. (“we” or “us”), we believe in being clear and open about how we collect and use personal data related to you. In the spirit of transparency, this Privacy Notice provides you with information about the types of personal data we collect, how we use such personal data and to whom and under what circumstances we may disclose it.

This Privacy Notice applies to personal data we collect from you, or that you provide to us, and communications from us, in connection with your use of www.elfcosmetics.com/eu (the “website”), promotions in which we are involved, and social media. Please read this Privacy Notice carefully so that you understand your rights in relation to your personal data, and how we will collect, use, and process your personal data.

Who We Are

For purposes of data protection laws, regardless of where you reside, e.l.f. Cosmetics, Inc., a corporation registered in the state of Delaware, USA, is the controller of the personal data you provide to us, or that is collected or processed by or for us. Please see the “International Operations and Transfers Out of European Countries” section for more information about the transfer of your personal data to the United States and other countries. Contact information for e.l.f. Cosmetics, Inc. can be found in the “Contact Us” section.

The address for e.l.f. Cosmetics, Inc. is:

e.l.f. Cosmetics, Inc.
570 10th Street
Oakland, CA 94607 USA

Our representative for purposes of Article 27 of the General Data Protection Regulation (the “GDPR”) is Thilo Noack at SBS Data Protect GmbH. The address and contact information for SBS Data Protect GmbH is:

SBS Data Protect GmbH
Attention: Thilo Noack
Hans-Henny-Jahnn-Weg 49
22085 Hamburg, Germany
info@sbs-data.de
+49 40 7344086-0
+49 177 6422164

How Do We Collect Your Personal Data and How Do We Use It?

In the table below, we explain:

  • what activity or scenario you are involved in when we use or collect your personal data;
  • what types of personal data we may collect when you take part in a particular activity;
  • what we do with your personal data, and the purposes for collecting and using it; and
  • our legal basis for using your personal data. Whenever we use your personal data, we will have a legal basis to do this.
What We Collect How We Use It Our Legal Basis for Processing, Using, and Storing It
Purchases and Order Management

Personal data that we collect, or you give us, when you place an order, including:

  • your contact details including: your first and last name, billing address, mailing address, email address (“Contact Information”);
  • payment data such as credit card information, bank details or other information required for the payment method you have chosen (“Payment Information”); and
  • the product(s) you purchased.

We use this personal data to:

  • fulfill your requests and orders for products;
  • take payment from or give you a refund;
  • help us ensure that our consumers are genuine and to prevent fraud;
  • manage and keep your order history (including by adding to your loyalty program account if you have one);
  • send you personalized offers, shopping ideas or other marketing materials (if you have consented to receive such materials);
  • enhance your shopping experience while on our website by showing you personalized content (where we have your consent); and
  • run analytics, statistics, and research.

We base this processing on:

  • performance of a contract—so we can perform our contract for the sale of our products to you and manage the associated logistics;
  • our legitimate interests—we have a legitimate business interest in (i) improving our products and services; (ii) preventing fraud; and (iii) securing our tools;
  • to comply with our specific statutory retention obligations arising from, in particular, applicable commercial, tax, accounting, auditing or anti money laundering laws); and
  • your consent to receiving marketing communications from us.

Loyalty Program Account Creation and Management

Personal data that we collect, or you give us, when you join our loyalty program (for example, by creating an account), including:

  • your Contact Information;
  • your account password;
  • your birthdate;
  • your Payment Information (1);
  • your order history; and
  • your wish list.

We use this personal data to:

  • manage and keep your order history;
  • allow you to manage your preferences with regards to the loyalty program and your account;
  • operate and manage our loyalty program;
  • enhance your shopping experience while on our website by showing you personalized content (when we have your consent);
  • send you personalized offers, shopping ideas or other marketing materials (when we have your consent); and
  • run analytics, statistics, and research.

We base this processing on:

  • performance of a contract—so you can create and manage your account and so that we can operate and manage our loyalty program;
  • your consent to receiving marketing communications from us; and
  • our legitimate interests—we have a legitimate business interest in improving our products and services.

Marketing Materials

Personal data that we collect, or you give us, when you sign up for our marketing materials: your email address.

We use this personal data to:

  • send you offers, shopping ideas or other marketing materials, which may be personalized based on the personal data we know or learn about you (when we have your consent);
  • deliver targeted advertising, such as advertisements and content on social media platforms or other websites (when we have your consent);
  • keep an up to date suppression list if you have asked not to be contacted; and
  • run analytics, statistics, and research.

We base this processing on:

  • your consent to receiving marketing communications from us; and
  • Our legitimate interests—we have a legitimate business interest in improving our products and services.
Questions and Customer Service

Personal data that we collect, or you give us, when you communicate with us whether in person, through our website or via email, over the phone, through social media or via any other medium, including:

  • your Contact Information, or whatever method you use to contact us;
  • the details of your communications with us; and
  • the details of our communications to you.

We use this personal data to:

  • answer and manage your questions; and
  • run analytics, statistics, and research.

We base this processing on:

  • performance of a contract—so that we can answer and manage your questions; and
  • our legitimate interests—we have a legitimate business interest in (i) improving our products and services; and (ii) securing our tools.
Online Browsing

Personal data that we collect through your use of our website (which may be through cookies), including:

  • Internet Protocol (IP) address;
  • MAC address;
  • browser type;
  • operating system;
  • device identifying personal data;
  • the specific web pages visited during your connection;
  • the domain name from which you accessed our website; and
  • your browsing behavior, such as the date and time you visit our website, the areas or pages of the website that you visit, the amount of time you spend viewing our website, the number of times you return to our website, the products you selected to create your basket and other clickstream data.

For more information on cookies, see “Cookies and Traffic Data” section.

We use this personal data to:

  • allow our website to function properly (for example, to ensure the proper display of content, to create and remember your shopping cart and to create and remember your account login details);
  • improve our website (for example, by testing new ideas or layouts)
  • ensure our website is secure and safe, and to protect you against fraud or misuse of our website or services (for example through performing troubleshooting);
  • enhance your shopping experience while on our website by showing you personalized content (when we have your consent);
  • send you personalized offers, shopping ideas or other marketing materials (when we have your consent);
  • deliver targeted advertising, such as advertisements and content on social media platforms or other websites; and
  • run analytics, statistics, and research.

We base this processing on:

  • your consent to storing cookies on your device. For more information on cookies, see “Cookies and Traffic Data” section; and
  • our legitimate interests—we have a legitimate business interest in (i) operating and improving our website, products and services; (ii) preventing fraud; and (iii) securing our tools.

Third-Parties

Personal data that we collect from third-parties, including:

  • payment processing companies; and
  • address update services.

We use this personal data to:

  • lake payment from or give you a refund;
  • help us ensure that our consumers are genuine and to prevent fraud.

We base this processing on:

  • performance of a contract—so we can perform our contract for the sale of our products to you;
  • our legitimate interests—we have a legitimate business interest in preventing fraud; and
  • to comply with specific statutory retention obligations arising from, in particular, applicable commercial, tax, accounting, auditing or anti money laundering laws).

Use of Social Media (2)

  • Personal data that we collect, or you give us, when you share or engage with our content through social media, including:
  • information about you that you have made publicly available through your social media profile (for example, your name, your photos or posts, and the photos, posts or the “likes” you make).

We use this personal data to:

  • use the content you have created and/or shared in accordance with the specific terms and conditions accepted by you; or
  • run analytics, statistics, and research.

We base this processing on:

  • your consent to the use of content you have created and/or shared in accordance with the specific terms and conditions accepted by you; and
  • our legitimate interests—we have a legitimate business interest in (i) improving our products and services; and (ii) securing our tools.
Promotions

Personal data that we collect, or you give us, when you participate in a sweepstakes, contest, or other promotion, including:

  • your name;
  • your contact details;
  • birthdate or age range;
  • address or country of residence;
  • personal data about you that you have made publicly available through your social media profile (if the promotion is run on a social media platform); and
  • user generated content.

We use this personal data to:

  • manage and operate the promotion;
  • use the content you have created and/or shared in accordance with the specific terms and conditions accepted by you; or
  • run analytics, statistics, and research.

We base this processing on:

  • performance of a contract—so you may enter into the promotion or we can deliver the prize;
  • your consent to the use of content you have created and/or shared in accordance with the specific terms and conditions accepted by you; and
  • our legitimate interests—we have a legitimate business interest in (i) improving our products and services; and (ii) securing our tools.

User Generated Content

Personal data that we collect, or you give us, when you submit content (for example images or ratings and reviews) on our website or social media platforms.

We use this personal data to:

  • use the content you have created and/or shared in accordance with the specific terms and conditions accepted by you; and
  • run analytics, statistics, and research.

We base this processing on:

  • your consent to the use of content you have created and/or shared in accordance with the specific terms and conditions accepted by you; and
  • our legitimate interests—we have a legitimate business interest in (i) improving our products and services; (ii) securing our tools.

(1) For more information on credit card storage and usage on our website, please see the “How We Share Your Information—For External Processing” section.

(2) Please note that you may be able to control what information you share through the privacy settings for your social media accounts—please refer to the applicable social media’s privacy policies and terms of use for more details and information.

Cookies and Traffic Data

Cookies

Certain cookies and web beacons that we employ are necessary for the operation of our website. Other cookies that we employ are not necessary for the operation of our website but are employed to enhance your use of our website and shopping experience.

Our cookies may be session cookies (temporary cookies that identify and track users within our website which are deleted when you close your browser or leave your session) or persistent cookies (cookies which enable our website to “remember” who you are and to remember your preferences within our website and which will stay on your computer or device after you close your browser or leave your session).

We use the following different types of cookies:

Category Description
Strictly Necessary These are cookies which are needed for our website to function properly, for example, these cookies allow you to access secure areas of our website or to remember what you have put into your shopping basket. We use these cookies, independently from your consent.
Performance These cookies allow us to keep a record of traffic data, count visits, traffic sources, access rates, page hits and page views so we can measure and improve the performance of our website. They help us know which pages are the most and least popular and see how visitors move to and from and around our website. The use of these cookies is subject to your consent.
Functional These cookies allow our website to remember choices you make (such as your username, language, or the region you are in) and provide enhanced, more personal features. These cookies allow the provision of enhance functionality and personalization, such as chats. They may be set by us or by third party providers whose services we have added to our pages. The use of these cookies is subject to your consent.
Targeting These cookies are set through our website by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant ads on other websites. They record a user’s visit to a website, the pages a user has visited and the links a user has followed. Companies will use this information to make the website more relevant to users. Companies may also share this information with third parties for this purpose. The use of these cookies is subject to your consent.

You can find more general information about cookies and generally how to manage them at www.allaboutcookies.org.

With your consent, we may use third-party advertising companies that use tracking technologies to serve our advertisements across the Internet. These companies may collect personal data about your visits to our website and other website/applications and your interaction with our advertising and other communications. These advertising companies serve ads on behalf of us and others on non-affiliated website, and some of those ads may be personalized, meaning that they are intended to be relevant to you based on personal data collected about your visits to our website and elsewhere over time. Other companies may also use such technology to advertise on our website.

You can withdraw your consent for Functional, Performance and Targeting cookies and web beacon tracking at any time. For more information on how to withdraw your consent for these cookies, please see the “ Withdrawing your Consent for Cookie Tracking ” section.

Google Analytics

We use Google Analytics which is a web analytics tool that helps us understand how users engage with our website. Like many services, Google Analytics uses first-party cookies to track user interactions, as in our case, where they are used to collect details about how users use our website. This information is used to compile reports and to help us improve our website. The reports disclose trends without identifying individual visitors.

Google Analytics services are provided in Europe by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and elsewhere by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated Google entities. Google Analytics uses cookies to collect information about visitors to our website (data related to the user’s device/browser, IP address and on-site activity). They measure and report on user interactions on our websites. This includes details of the volume and nature of traffic to our website (for example, which pages users visit first, which pages are most popular, how long users stay on the site, and geographical region of users). Google may also use data collected from these reports to improve their own services, for benchmarking purposes and to provide technical support. By using the extension “anonymizeIp()”, we ensure that Google Analytics only transfers an abbreviated version of your IP address to Google.

You can find out more about how Google uses personal data here: https://policies.google.com/privacy.

We base the use of Google Analytics on your consent.

You can opt out of Google Analytics without affecting how you visit our website – for more information on opting out of being tracked by Google Analytics across all websites you use, visit this Google page: https://tools.google.com/dlpage/gaoptout.

How We Share Your Personal Data

We may share your personal data as indicated in this Privacy Notice.

With Your Consent

We may disclose information collected from, and about, you (including your personal data) with companies, organizations, or individuals with your express consent.

For External Processing

We rely on trusted third parties to perform a range of business operations on our behalf. We may provide to these service providers personal data collected from, and about, you (including your personal data), based on our instructions and in compliance with this Privacy Notice and any other appropriate confidentiality and security measures and we only provide them with the personal data they need to perform the service.

Our third-party services providers:

  • host or operate our website and otherwise assist and help us in providing IT services, such as platform providers, hosting services, maintenance, and support on our databases as well as on our software and applications;
  • process and deliver your orders (including warehouse logistics providers, transportation providers, payment processing providers, etc.);
  • process credit card transactions. Our third-party payment processor utilizes a process known as “tokenization” in order to securely process credit card transactions when you provide your credit card data to us. Tokenization is the replacement of credit card data with a unique identifier that cannot be reversed. When you submit your credit card data to us, that data is immediately encrypted and transmitted directly to our third-party payment processors for storing, processing, and token generation. Your credit card data is not stored or retained by us;
  • assist and help us in managing our loyalty program;
  • assist and help us in providing digital and e-commerce services such as social listening, social media, customer service, ratings and reviews, CRM, web analytics and search engine, user generated content curation tools;
  • help us enhance your e-commerce shopping experience, including by showing you personalized content; and
  • help us to deliver advertising, marketing, and campaigns and to analyze their effectiveness.

For Legal Reasons

We may share personal data collected from, and about you with third-parties if we are legally required to do so, or if we have a good-faith belief that access, use, preservation or disclosure of the personal data is reasonably necessary to:

  • meet any applicable law, regulation, legal process, or enforceable governmental request;
  • respond to legal process (such as a search warrant, subpoena, or court order);
  • enforce our Terms of Use, including investigation of potential violations;
  • detect, prevent, or otherwise address fraud, security, or technical issues; or
  • protect against harm to our rights, property or safety or the rights, property or safety of third-parties, our consumers, or the public as required or permitted by law.

In Connection with a Sale or Merger

If we directly or indirectly undergo a business transition (including proposed transactions), like a merger, acquisition by another company, or sale of all or part its assets, we may disclose or transfer personal data collected from, and about, you (including your personal data), to the successor organization in the transition. We will make reasonable efforts to let you and others know (in the way described in the “ Changes to This Privacy Notice ” section) if your personal data has been disclosed or transferred in connection with a business transition.

Aggregated, Non-Personally Identifiable Information

We share aggregate, non-personally identifiable information with our service providers in order for those service providers to enhance and optimize their services and for statistical analysis, research, and other purposes.

How Long We Keep Your Personal Data

How long we retain your personal data depends on why and how we collected it and how we use it. We will keep your personal data for as long as reasonably necessary for the purposes stated in this Privacy Notice. In certain circumstances we may be obliged to keep your personal data for longer periods (e.g. for tax, accounting or auditing purposes).

To determine the retention period of your personal data, we consider several criteria to make sure that we do not keep your personal data for longer than is necessary or appropriate. These criteria include:

  • the purpose for which we hold your personal data;
  • our legal and regulatory obligations in relation to that personal data, for example any financial reporting obligations or statutory retention obligations, e.g. under commercial or tax law which usually last from seven years;
  • whether our relationship with you is ongoing;
  • any specific requests from you in relation to the deletion of your personal data; and
  • our legitimate business interests in relation to managing our own rights, for example the assertion or defense of any claims within the statutes of limitation, which is usually three years to the end of a calendar year but can be up to thirty years.

When we no longer need to retain your personal data, it will be deleted or be anonymized so that you can no longer be identified from it.

Security of Your Personal Data

We maintain reasonable and appropriate measures designed to maintain personal data we collect in a secure manner. We have taken certain physical, electronic, and administrative steps to safeguard and secure the personal data we collect. Even though we follow reasonable procedures to try to protect the personal data in our possession, no security system is perfect, and we cannot promise, and you should not expect, that your personal data will be secure in all circumstances. Please note that any transmission of personal data to us is at your own risk.

International Operations and Data Transfers Out of European Countries

IMPORTANT: Your personal data will be sent to the United States and possibly other countries.

Our website is hosted in the United States. If you are visiting our website from outside the United States, your personal data will be transferred to, stored in, or processed in, the United States and may be transferred to, stored in, or processed in additional countries where our third-party service providers maintain facilities or operations. These countries include the United Kingdom, Ireland, the Netherlands, and Germany.

Where we transfer, store, or process your personal data outside of the European Union or the European Economic Area:

  • we do so to the extent such transfer, storage, or processing is needed to fulfil a contract between us (for example, to manage your participation in our loyalty program or to fulfill your order); or
  • we rely on other methods to ensure an adequate level of data protection:
    • Adequacy Decisions: Some of our third-party service providers may be based in countries that the European Commission has found to have adequate levels of protection for personal data;
    • Privacy Shield: Some of our third-party service providers based in the United States, where we transfer your personal data to, comply with the US Department of Commerce's EU-US Privacy Shield for transfers of personal data from the EU and the UK to the US and have certified that they adhere to the EU-US Privacy Shield; or
    • Model Clauses: We rely on the European Commission’s model contracts for the transfer of personal data to third countries (i.e. the standard contractual clauses) when transferring personal data to our third-party service providers who do not adhere to the US Department of Commerce's EU-US Privacy Shield or who are located in countries that the European Commission has not found to have adequate levels of protection for personal data.

You can request a copy of the instruments we use by contacting us using the contact details provided in the “Contact Us” section.

Please note that the data protection and other applicable laws of the United States or other countries may not be as comprehensive as those laws or regulations in your country or may otherwise differ from the data protection or consumer protection laws in your country. Your personal data may be available to government authorities under lawful orders and law applicable in such jurisdictions.

Your Privacy Rights

We respect your right to privacy and believe it is important that you are able to control your personal data. You have the following rights under the General Data Protection Regulation (the “GDPR”):

Accessing, Correcting, and Updating Your Personal Data

You have the right to access, correct, and update your personal data. You may access the following personal data by signing into your account:

  • your contact information (such as your first and last name, email address, account password, and mailing and billing address);
  • your birthday;
  • your stored credit cards;
  • your order history; and
  • your wish list.

From there, you can correct, modify, or update that personal data (other than your order history). Please note that deleting any personal data in your account will not completely delete that data from our systems—to completely have your personal data deleted, you must follow the directions in the “Requesting We Delete Your Personal Data” section.

If you wish to access, correct, or modify any personal data that is not contained in your account profile (or if you wish to know the purposes for which your personal data is processed, the categories of data processed, third party recipients, if any, of your personal data, or third party sources, if any, of your personal data), please contact us using the contact information detailed in the “Exercising Your GDPR Privacy Rights” section.

Requesting Copies of Your Personal Data (Portability Request)

You have the right to request copies of your personal data held by us in a structured, commonly used, and machine-readable format and/or request us to transmit this personal data to another service provider (where technically feasible). If you wish to request copies of your personal data held by us, please contact us using the contact information detailed in the “Exercising Your GDPR Privacy Rights” section.

Requesting We Delete Your Personal Data

You have the right to request that we delete your personal data. If you wish to request that your personal data is deleted, please contact us using the contact information detailed in the “Exercising Your GDPR Privacy Rights” section.

Please note that if you are a member of our Beauty Squad Loyalty Program and you request that your personal data is deleted, you may be removed from our Beauty Squad Loyalty Program.

We may need to retain certain records, for example those relating to open orders, payments, or customer service matters, or for legal and accounting purposes.

Note that if you have multiple email addresses linked to your account (or you used multiple email addresses in connection with purchases) you may need to make a data deletion request with respect to each email address in order for us to fully delete your personal data.

Objecting to Processing of Your Personal Data

You have the right to object, for legitimate purposes, to the processing of personal data as provided under applicable law. If you wish to object to processing of your personal data, please contact us using the contact information detailed in the “Exercising Your GDPR Privacy Rights” section.

Requesting that we Restrict Processing

You have the right to request that we restrict processing of your personal data. If you wish to request that we restrict processing of your personal data, please contact us using the contact information detailed in the “Exercising Your GDPR Privacy Rights” section.

Withdrawing Consent

If you wish to withdraw your consent to promotional emails, third-party tailored advertising, and/or cookie tracking, please follow the applicable procedure in the “How to Opt-Out of Certain Features” section or, if not addressed, please contact us using the contact information detailed in the “Exercising Your GDPR Privacy Rights” section.

Please note that if you withdraw consent, we may not be able to provide or continue to provide certain services or marketing communications to you and that withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.

Filing a Complaint

We are transparent about the ways in which we collect and use personal data and welcome your questions and concerns. If you have any concern or complaint about the way we handle your personal data, please contact us using the contact information detailed in the “Contact Us” section.

To the extent you believe we have not addressed your concerns or otherwise choose to do so, you have the right to complain to a supervisory authority, in particular in the country where you reside (contact details are available here.)

Right to Give Us Postmortem Instructions (If Such Rights Exist in the Country Where You Reside)

If such rights exist in the country where you reside, you wish to give us guidelines regarding the retention, erasure and disclosure of your personal data after your death, please contact us using the contact information detailed in the "Contact Us" section. When you contact us, please be sure to note your country of residence and that you are giving us guidelines regarding the retention, erasure and disclosure of your personal data after your death in compliance with the law so that we may efficiently process request.

If you need assistance or if you have questions about your right to give us post mortem instructions, please contact us using the contact information detailed in the "Contact Us" section.

Exercising Your GDPR Privacy Rights

To make any of the requests or exercise any of your GDPR privacy rights, please contact us using one of following methods. We respond to all data protection requests we receive in accordance with applicable data protection laws.

Via the Internet. If you wish to exercise any of your GDPR privacy rights via our website, please click the “Privacy Rights Request Form” link in the footer of our website. Please follow the instructions on the form to make your request; or

By mail. If you wish to exercise any of your GDPR privacy rights, you may write to us at the following address. Please include your full name, mailing address, and any email address associated with your activity with us (for example, the email you used to receive marketing emails or order confirmations, or the email you have used in connection with the Beauty Squad Loyalty Program (if you are a member)) and let us know which GDPR privacy right you are exercising so that we can process your request or exercising of your rights in an efficient manner.

e.l.f. Cosmetics, Inc.
570 10th Street
Oakland, CA 94607 USA
ATTN: Legal Department
RE: GDPR Privacy Info

Other Methods. You may also contact us using the contact information detailed in the "Contact Us" section. When you contact us, please let us know which GDPR privacy right you are exercising so that we can process your request or exercising of your rights in an efficient manner.

How to Withdraw your Consent or Opt-Out of Certain Features

Withdrawing your Consent for Promotional Emails

If you no longer wish to receive communications from us about special offers and promotions, you can withdraw your consent for receiving these communications by following the instructions contained in the messages you receive.

Withdrawing your Consent for Cookie Tracking

Note that you may not turn off Strictly Necessary cookies as those are necessary for the operation of our website.

You may withdraw your consent for Functional, Performance and Targeting cookies that are not necessary for the operation of our website through the Cookie Settings.

You can also set your browser to reject cookies, warn you about attempts to place cookies on your computer or device, or limit the type of cookies you allow. You can also manually delete individual or all the cookies on your computer or device by following your browser’s or device’s help file directions. Please note that browser- and device-management tools for cookies are outside of our control and we cannot guarantee their effectiveness. Please also note that flash cookies operate differently than browser cookies and cookie management tools available may not remove flash cookies.

Please note that if you turn off cookies that are necessary for the operation of our website, your browser or device is set to reject cookies, or you manually delete cookies, some or all the features and functionality of our website may not function properly (including features we may add to our website in the future).

You can find more information about cookies at www.allaboutcookies.org and www.youronlinechoices.com.

Our Policies Concerning Children

Our website is not directed to children, nor do we knowingly collect any personal data from, children under the age of 16 without verifiable parental or legal guardian consent. If you believe that a child has provided personal data to us, please promptly contact us using the contact information detailed in the "Contact Us" section, and we will endeavor to investigate and delete such personal data from our systems.

Third Party Websites

Our website may contain links to third-party website, such as social media website, such as Instagram, Facebook, YouTube, Pinterest, Twitter, and Snapchat, each of which may have privacy policies that differ from this Privacy Notice. We are not responsible for the activities and practices that take place on these websites. Accordingly, we recommend that you review the privacy policy or privacy notice/statement posted on any external website before disclosing any personal data. Please contact those websites directly if you have any questions about their privacy policies.

Existence of Automated Decision-Making

We use automated decision-making processes to personalize our website to enhance your shopping and consumer experience (for example, by recommending certain products to you based on your order or browsing history) or to send you, if you have consented to receiving marketing materials from us, personalized promotional and marketing emails (for example, by highlighting certain products based on your order or browsing history).

Changes to This Privacy Notice

We may change this Privacy Notice from time to time, including as required to keep current with rules and regulations, new technologies and security standards. When we do, we will post the change(s) on our websites. If we change this Privacy Notice in a material manner, we will provide appropriate notice to you.

Contact Us

If you have questions or concerns about this Privacy Notice or how we collect and use the personal data of our consumers, please contact us. Our contact information can be found here.

You may also write to us at:

e.l.f. Cosmetics, Inc.
570 10th Street
Oakland, CA 94607 USA
ATTN: Legal Department
RE: EU Privacy

If we need, or are required, to contact you concerning any event that involves your personal data, we may do so by email, telephone, or mail.