PRIVACY POLICY INTRODUCTION This Privacy Policy explains how Jurlique Hong Kong Limited and its group companies (“Jurlique”, “we”, “us”, “our”) collects, uses, discloses and handles any personal information we collect from you, and how to contact us if you wish to access or correct your personal information, or complain about a breach of your privacy. This Privacy Policy may be amended from time to time if our practices change. You may find links to other websites not operated by Jurlique but which are accessible through our websites. This Privacy Policy does not apply to such websites and you should consult the privacy policy of any other website you enter. WHAT KINDS OF PERSONAL INFORMATION DO WE COLLECT AND HOW? When you interact with Jurlique in store, over the phone, via email or via social media, we may collect personal information about you. This enables us to provide you with information about Jurlique products and services and allows us to facilitate any purchases or other inquiries. This information may include your name, address, phone number, date of birth, email address, credit card information and health information where, for instance, you tell us you have experienced an allergic reaction in relation to any of our products or have a particular skin condition or concern. We may also collect your personal information from you when you purchase products from us, access our website or social media sites, register an account with us online, join our VIP program or enter into one of our competitions or promotions. We may also collect your personal information from third parties where you have agreed with them that your information may be disclosed. WHAT INFORMATION DO WE COLLECT WHEN YOU USE THE JURLIQUE WEBSITE? Your visits to Jurlique’s websites are associated with cookies. Cookies are unique identifiers that we collect and use to obtain information about Jurlique’s websites including the number of visitors to the websites, the date and time of those visits, the number of pages viewed, the products viewed and added to baskets, navigation patterns and, where relevant, the websites visited before visiting the website. This information provides Jurlique with statistics that we can use to analyse, personalise and improve our websites and our products and services. You may be able to adjust the security settings on your browser so that tracking is disabled, however the Jurlique website may be less functional for you. We may use information gathered from cookies on some of our sites to deliver material that might interest you on third party websites, such as Facebook. We sometimes use a type of technology called a “pixel tag” on our websites or in our emails, alone or in combination with cookies. Pixel tags may be used to provide us and third parties who provide services to us with information about customer activity on our websites and/or when emails that we send are opened or accessed. Additionally, your visits may be associated with location-based information derived from the IP address of your computer or, where you have accessed our website from your mobile device, GPS information where that has been enabled on your device. This information includes when your mobile device is activated as well as when and how you are using it. We may collect such data to verify the information you provide to us manually and to provide you with location based content. We may also associate it with your existing personal information solely for our internal use in order to improve your experience with us. DO HAVE TO IDENTIFY YOURSELF WHEN YOU INTERACT WITH JURLIQUE? We are unable to perform a number of our functions without obtaining your identifying information. For example, we may require details about your identity if you register or log into our website, contact us with an inquiry or complaint, request to receive communications from us, participate in our promotions or competitions, require us to deliver products to you and, in some cases, process a payment. If you wish to remain anonymous when you use the Jurlique website, do not sign in to the website or provide any information which may identify you. WHY DO WE COLLECT THE INFORMATION AND HOW DO WE USE OR DISCLOSE IT? We collect, hold, use and disclose your personal information: to provide you with information about and facilitate your purchase of Jurlique products and services, including processing your purchases and payments, delivering products to you and resolving any questions or complaints; to develop and enhance our products and services; to conduct research and to plan and develop our product strategies; to provide and operate our competitions, surveys, events and promotions; to promote and market our products and services, including through direct marketing; and to comply with our legal obligations. HOW CAN YOU OPT OUT OF DIRECT MARKETING? If you do not wish to receive direct marketing communications from us or would like to withdraw your consent, please follow the ‘opt-out’ or ‘unsubscribe’ instruction in that communication or on our website, or otherwise email us at info@jurlique.hk and provide your name, e-mail address and postal address and information about the direct marketing communication you no longer wish to receive. WHO DO WE DISCLOSE YOIUR PERSONAL INFORMATION TO? We may disclose your personal information: to entities who assist us in providing Jurlique products and services, running our competitions, surveys, events and promotions, and other service providers including suppliers, contractors, data storage and management companies, and delivery companies; to companies that promote and market, or conduct research to help us improve and target, our products and services; and where required by law, or to government and enforcement agencies or individuals appointed by a government responsible for investigating and resolving disputes or complaints concerning Jurlique products. When you enter into a competition we are running or participate in a sponsored event, we may seek, as a condition of entry, consent to pass your information to a promoter or sponsor of the competition or event. We do not disclose any health information to third parties and do not use it for any purpose other than to assist you in choosing Jurlique products and services. DO WE DISCLOSE YOUR PERSONAL INFORMATION OVERSEAS? We may disclose your personal information to Jurlique group companies located overseas in Australia, Japan, China, the United States and the United Kingdom. We may also disclose your personal information to third parties who provide services to us including data warehousing, credit card processing and e-commerce services, mailing and logistics services which are located in Australia, Hong Kong, the United Kingdom and in the United States. HOW DO WE HOLD YOUR PERSONAL INFORMATION AND KEEP IT SECURE? We hold your personal information in a combination of electronic and hard copy files. We may store your personal information with a third party data storage provider. We may combine personal information we receive about you with other information we hold about you. This includes information received from third parties and publically available information. We take all reasonable steps to ensure that the personal information we hold is protected from misuse, interference and loss, and unauthorised access, modification or disclosure by the use of various methods, including secure physical and technological storage. Where we provide your personal information to third party service providers, we require them to keep it secure and only use or disclose it for the purpose for which it was provided. Please contact us immediately if you become aware or have reason to believe there has been any unauthorised use of your personal information that we hold. HOW CAN YOU SEEK ACCESS TO, AND CORRECTION OF, YOUR PERSONAL INFORMATION? If you would like to find out what information we have about you, please contact us via one of the following: Mail: “Attention: Customer Service Officer”, Jurlique Hong Kong Limited, Room 1001-05, 10th Floor, Leighton Centre, 77 Leighton Road, Causeway Bay Email: info@jurlique.hk We will ask that you put your request for access in writing and provide us with proof of your identity. You may be charged an administration fee when we provide you with the requested information to cover our time and postage and handling or retrieval costs. We will generally provide you with access to your personal information that we have about you, but sometimes that will not be possible, in which case we will give you a written notice explaining why. If you think that any personal information we hold about you is inaccurate, incomplete, out-of-date or irrelevant, you may ask us to correct it. We will take reasonable steps to correct it unless we disagree with your reasons. If we refuse to correct your personal information we will generally give you a written explanation why. HOW CAN YOU ACCESS FURTHER INFORMATION OR COMPLAIN ABOUT A BREACH OF YOUR PRIVACY? If you believe that we have breached your privacy or have any questions in relation to this Privacy Policy, you can contact us via either the mailing address, email or phone number listed above. We will investigate any complaint, and notify you of our decision in relation to the complaint, as soon as practicable after it is received. If we are unable to satisfactorily resolve your concerns about our handling of your personal information, you can contact the Office of the Privacy Commissioner for Personal Data.