California Information Sharing Disclosure

 

California Civil Code 1798.115(c), 1798.130(a)(5)(c), 1798.130(c), and 1798.140 indicates that companies should disclose whether the following categories of information are collected, transferred for consideration, or transferred for an organization’s “business purpose” as that term is defined under California law. ). We do not “sell” your personal information. Note that while a category may be marked that does not necessarily mean that we have information in that category about you. For example, we may collect educational information about you if you apply for our MAKE UP FOR EVER Academy, but we would not collect this for purchase from our Website.


Categories of Personal Information We Collect

To Whom We Disclose Personal Information for a Business Purpose

Identifiers – this may include real name, alias, postal address, unique personal identifier, online identifier, email address, account name, driver’s license number, passport number or other similar identifiers.

Advertising networks.
• Affiliates or subsidiaries
• Business partners
• Data analytics providers
• Data brokers
• Government entities, as may be needed to comply with law or prevent illegal activity
• Internet service providers
• Joint marketing partners
• Operating systems and platforms
• Other Service Providers
• Payment processors and financial institutions
• Professional services organizations, this may include auditors and law firms
• Social networks

Additional categories of personal information described in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) – this may include signature, credit card number, debit card number, and other financial information.

• Affiliates or subsidiaries
• Business partners
• Government entities, as may be needed to comply with law or prevent illegal activity
• Other Service Providers
• Payment processors and financial institutions
• Professional services organizations, this may include auditors and law firms

Characteristics of protected classifications – this may include gender.

• Affiliates or subsidiaries
• Business partners
• Data analytics providers
• Government entities, as may be needed to comply with law or prevent illegal activity
• Joint marketing partners
• Other Service Providers
• Professional services organizations, this may include auditors and law firms

Commercial information – this may include information about products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

• Advertising networks
• Affiliates or subsidiaries
• Business partners
• Data analytics providers
• Data brokers
• Government entities, as may be needed to comply with law or prevent illegal activity
• Internet service providers
• Joint marketing partners
• Operating systems and platforms
• Other Service Providers
• Payment processors and financial institutions
• Professional services organizations, this may include auditors and law firms
• Social networks

Internet or other electronic network activity information – this may include browsing history, search history, and information regarding an individual’s interaction with an internet website, application, or advertisement.

• Affiliates or subsidiaries
• Business partners
• Data analytics providers
• Government entities, as may be needed to comply with law or prevent illegal activity
• Joint marketing partners
• Other Service Providers
• Professional services organizations, this may include auditors and law firms

Non-public education information (as defined in the Family Educational Rights and Privacy Act)

• Affiliates or subsidiaries
• Business partners
• Data analytics providers
• Government entities, as may be needed to comply with law or prevent illegal activity
• Joint marketing partners
• Other Service Providers
• Professional services organizations, this may include auditors and law firms

Inferences drawn from any of the information listed above

• Advertising networks
• Affiliates or subsidiaries
• Business partners
• Data analytics providers
• Data brokers
• Government entities, as may be needed to comply with law or prevent illegal activity
• Internet service providers
• Joint marketing partners
• Operating systems and platforms
• Other Service Providers
• Payment processors and financial institutions
• Professional services organizations, this may include auditors and law firms
• Social networks

Last Revised: August 10, 2020