Sephora Australia Pty Ltd ABN 3716903073

Sephora Digital SEA Pte Ltd BRN 201111155N

This Privacy Policy applies to the activities of Sephora Australia Pty Ltd and Sephora Digital SEA Pte Ltd. (“SAS”, "we", "our", "us") in relation to SAS's operations and explains how we handle personal information and comply with the requirements of Australian privacy legislation ("Privacy Laws") . SA takes the privacy of the information about customers of SEPHORA and users of the sephora.com.au website (the “Site”) very seriously. If you have any questions relating to this policy please email us at contact@sephora.com.au.

This Privacy Policy is subject to any applicable local Privacy Laws.

1. Collection of Personal Information

By providing your personal information, (which may include: name, address, telephone number, email address, date of birth, gender, credit card details, and any other information collected by us where you are identified or identifiable ) (“Personal Information”) to our representatives through our stores, our Customer Department or the Site, you signify your acceptance of this Privacy Policy. Please read the following policy to understand how we will treat your Personal Information.

We collect Personal Information from you through various means, including when you:-register your Personal Information for the purpose of creating an account in our Site or requesting our direct marketing materials ("Newsletters");

• participate in a promotion or other website feature;
• request a catalog;
• request to receive any marketing, promotional or other types of communications;
• purchase through our store or site;
• make enquiries or comments through our Customer Department through contact@sephora.com.au ("Customer Department)";
• interact with our sales staff, including in store via sign-up pads, or as otherwise notified from time to time, including through any collection statement.

You have no obligation to provide any information requested by us. However, if you do not provide requested information, we may not be able to provide you with any goods and services that depend on the collection of the information.

Where practicable, we will collect personal information directly from you. If we receive information about you from someone else, we will take reasonable steps to ensure you are aware that we have collected personal information about you and the circumstances of the collection.

2. Children Privacy

We do not sell or ship any items ordered through the Site directly to anyone we know to be under the age of 18. If you are under the age of 18, you should use the Site only with the involvement of a parent or guardian and should not submit any Personal Information to us.

3. Use and Disclosure of your Personal Information

SAS does not routinely disclose Personal Information, and except as set out in this Privacy Policy or as notified to you from time to time (including by providing you with a collection notification) will not use or disclose any information about you without your consent unless it is to be used for the following purposes:

• to improve our understanding of your interests, concerns and preferences;
• to provide you with further information about our new products, events, changes to our website, service updates, special offers and promotions, including by way of Newsletter;
• to record statistical data for marketing analysis;
• to communicate with you about your purchase, account information, or customer service needs; and/or
• to respond to your customer service enquiries and complaints or provide you with a service that you have requested.

We may contact you at the email address or any other contact methods which you provide to us for the purposes listed above.

SAS may also disclose or use your Personal Information where we believe it necessary to implement our terms of service or the use or disclosure is reasonably necessary in relation to law enforcement activities, a permitted general or health situation exists or it is otherwise required by law.

4. Disclosure of information outside the jurisdiction of collection

For the purposes mentioned above and for reporting purposes, your Personal Information may be shared with:

• our group companies either in Australia or overseas including the countries listed in Appendix A to this Privacy Policy;
• service providers, suppliers and other third parties or non-SAS group companies in order to operate the website or deliver a service either in Australia or overseas, including the countries listed in Appendix A;
• our legally affiliated entities; and
• related parties, if SAS is merged, or in the event of a transfer of our assets, Site or operations in connection with such transactions.

We will provide our preferred service providers with the information they need to perform their services and work with them to respect and protect your Personal Information. We require our service providers to adhere to strict privacy guidelines and not to keep this information or use it for unauthorised purposes.

Please note also that SAS may use overseas facilities, including in the countries listed in Appendix A, to process or back up its information. As a result, we may transfer your personal information to these overseas facilities for storage. By accepting this Privacy Policy, you acknowledge and consent to the disclosure of your Personal Information to overseas recipients as set out in this Clause 4.

You acknowledge that if an overseas recipient handles the information in breach of the Australian Privacy Principles, to the extent permitted by law, SAS will not be accountable under the Privacy Act 1988 (Cth) ("the Privacy Act") and you may not be able to seek redress under the this Act or in the jurisdiction where the overseas recipient is located

5. Marketing Opt--out

We may contact you from time to time for marketing and promotional purposes by email, mail or phone. Subject to your rights to opt out from receiving such contact, your consent is provided on an ongoing basis. If you would rather not receive any promotional or marketing correspondence from us, you can opt-out at any time by letting us know and we will not contact you further for these purposes. If you wish to opt out of receiving Newsletters or any electronic marketing and promotional messages, simply follow the unsubscribe instructions on the message that you have received. Otherwise, you can opt out by contacting the Privacy Officer by emailing contact@sephora.com.au . Unsubscribe requests originating from electronic messages will be honoured within five (5) working days. We will deal with all other requests as soon as reasonably possible.

Subject to Clause 6, your election not to receive promotional and marketing correspondence from us will not preclude us from:

(a) corresponding with you by email or otherwise, regarding your existing or past relationship with us,

(b) accessing and viewing your Personal Information in the course of maintaining and improving our database and the Site; or

(c) using your Personal Information otherwise in accordance with this Privacy Policy.

Other than as otherwise set out in this Privacy Policy, SAS will disclose specific information without your permission only when required or authorised by law, or in good faith believe that such action is necessary to investigate or protect against suspected criminal activities to our customers, visitors, associates, or property (including this Site), or to others.

6. Accessing, Modifying or Deleting Your Personal Information

If at any time you wish to access or modify your Personal Information in our database, or update Personal Information that is inaccurate or out of date you may so by, sending your request via email to contact@sephora.com.au. We will make reasonable efforts to service your request in a timely manner. If you wish to have your Personal Information deleted, please let us know in the same manner as referred to above and we will take reasonable steps to delete it unless we need to keep it for legal reasons.

We will not give you access to your Personal Information if the information relates to your legal proceedings with us, or we reasonably believe that giving access would pose a serious threat to safety, be prejudicial to your negotiations with us, unreasonably impact on the privacy of others, or where providing access would otherwise be unlawful.

7. Protecting Your Personal Information

We will endeavour to take all reasonable steps to ensure your Personal Information is kept confidential and secure, and to take appropriate technical and organizational measures to prevent unlawful or accidental destruction, accidental loss, unauthorized disclosure or access or other unlawful forms of processing are implemented. For users of the Site, however, please note that due to the open nature of the Internet, we cannot guarantee that any of your Personal Information stored in our servers, or transmitted to or from a user, will be free from unauthorized access, and to the extent permitted by law, we cannot be responsible for any theft or loss of, unauthorized access or damage to, or interception of any data or communications. By using the Site, you acknowledge that you understand and agree to assume these risks. We will not rent, trade, distribute or sell any Personal Information that you give us to any third party unless we receive your prior consent.

8. Cookies

For users of the Site, please note that SAS may deposit “cookies” in your computer in order to identify you. Cookies are small data text files that are sent from a server computer during a browsing session. Cookies are typically stored on the computer’s hard drive and are used by web-sites to simulate a continuous connection to the site. Security measures have been employed to prevent unauthorized access to visitor data. However, visitors acknowledge that SA does not control the transfer of data over telecommunication facilities including the Internet. Therefore, SA will not be responsible for any breach of security or the unauthorized disclosure or use of any such data on the Internet. You may configure your browser to reject cookies. This may mean you may not be able to take full advantage of the services on the website.

9. Registration Information

Our Site contains areas where you can submit information to us (such as our registration service), and we also have features (such as cookies and performance tracking technology) that automatically collect information from the visitors to our Site. During the registration process, you must provide us with a password, your name, address and a valid email address. It is your responsibility to keep your password strictly confidential.

10. Employee Information

Employee records are not generally subject to the Privacy Act and therefore this Privacy Policy does not apply to the handling of information about employees by SAS. For information about our practices relating to employee information please contact us directly.

11. Changes to this Privacy Policy

Our privacy practices will be continuously assessed against new technologies, business practices and our customers’ needs. As we update and diversify our services, our Privacy Policy may evolve. SAS reserves the right to change its Privacy Policy at any time and notify you by posting an updated version of the policy on the website. The amended Privacy Policy will apply between us whether or not we have given you specific notice of any change. Please check this page or send your request by email to contact@sephora.com.au for updates on our Privacy Policy periodically.

12. Problems, queries or complaints

If you have any queries relating to our Privacy Policy, please send your request by email to contact@sephora.com.au.

You may also contact us at the details above if you have a complaint about how we have handled your information. We will investigate your complaint and will use reasonable endeavours to respond to you in writing as soon as possible. If we fail to respond to your complaint within a reasonable time or if you are dissatisfied with the response that you receive from us, you may have the right to make a complaint to the Office of the Information Commissioner.

APPENDIX A

COUNTRIES IN WHICH OVERSEAS RECIPIENTS ARE LIKELY TO BE LOCATED

Aruba ; Australia ; Austria ; Bahrain ; Barbados ; Belgium ; Bermuda ; Brazil ; Canada ; Chile ; China ; Colombia ; Czech Republic ; Denmark ; Dominican Republic ; Finland ; France ; Germany ; Greece ; Guam ; Hong Kong ; Hungary ; India ; Indonesia ; Ireland ; Israel ; Italy ; Japan ; Kazakhstan ; Kuwait ; Lebanon ; Luxembourg ; Macau ; Malaysia ; Mexico ; Mongolia ; Morocco ; Netherlands ; New Zealand ; Norway ; Panama ; Philippines ; Poland ; Portugal ; Qatar, Romania ; Russian Federation ; Saipan ; Saudi Arabia ; Singapore ; South Africa ; South Korea ; Spain ; Sweden ; Switzerland ; Taiwan ; Thailand ; Turkey ; Ukraine ; United Arab Emirates ; United Kingdom ; Uruguay ; United States of America ; Vietnam.