BEAUTY REP PRIVACY POLICY

Last update and effective: September 22, 2025

This Privacy Policy describes how Beauty Rep, Inc., a Delaware corporation with its principal place of business at 2810 N Church St, PMB 280964, Wilmington, Delaware 19802-444742, and its affiliates (“Beauty Rep,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information of users (“Users”), including but not limited to authorized brands (“Brands”) and authorized practices (“Practices”) that access or use our websites, applications, products, services and other offerings (collectively, the “Services”). This Privacy Policy also tells you about your rights and choices with respect to your personal information, and how you can reach us to get answers to your questions. By accessing or using the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy, and you acknowledge that this Privacy Policy is incorporated into and forms part of our Terms of Service for both Brands and Practices (as defined in those respective agreements).

1. Information Collected 

We collect information about you in a variety of ways depending on how you interact with us and our Services, including:

• Information you provide: Directly from you when you provide it to us, such as when you browse and use our Services, create an account, contact our Support team, sign up to receive communications from us, place an order/make a purchase, make products available for purchase on the Services, or contact us by phone, email, chat, or otherwise.
• Information automatically collected: Automatically through the use of the Services via cookies, server logs, third party integrations, and other similar technologies, advertisements, and emails. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.
• Information from third parties: From other sources, including, for example, our affiliates, business partners, referral programs, service providers, social networking sites, and other third parties, or from publicly available sources. 

We do not knowingly collect, solicit data from, or market to children under18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services.

2. Processing Information

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We do not knowingly collect, process, or store sensitive personal information, such as health data, biometric information, racial or ethnic origin, religious beliefs, or other categories of sensitive data as defined under applicable privacy laws. If we become aware that such information has been provided to us unintentionally, we will take reasonable steps to delete it.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including but not limited to:

• To provide you with our Services or any offered third party services (such as possible financing options)
• Process applications, transactions, and payments
• Verify licenses and eligibility
• Allow you to register for events
• Engage in marketing or sales outreach
• Provide customized content, offers, or Services, including marketing content via email, postal mail, social media, SMS, or other channels, subject to applicable laws
• Research and develop Services, including but not limited to training artificial intelligence chat algorithms
• Improve and streamline our Services
• Detect security incidents; protect against malicious, deceptive, fraudulent, or illegal activity
• Ensure quality control
• Debug to identify and repair errors
• Enforce our Terms and policies
• Audit or other compliance activities
• To comply with our legal or regulatory obligations, to establish or exercise our rights, and to defend against a legal claim
• For internal administrative purposes, as well as to manage our relationships
• For such other purposes as you may consent from time to time

Additionally, we use personal information to generate anonymized or aggregated data—such as demographic insights, general location, device usage, and sales trends—to help users better understand and improve performance. We don’t attempt to reverse this anonymization, except when needed to ensure our privacy practices comply with legal requirements.

3. Disclosure of Information

Your personal information may be shared in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Employees and Affiliates. We may share your information with our employees, contractors and affiliates, in which case we will require those affiliates and contractors to honor this Privacy Notice. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
• Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions. This could include credit evaluation, service providers etc.
• Law Enforcement. Law enforcement or regulators when legally required.
• Advertising. 
• We may and may allow Brands to choose the demographic information of users who will see their advertisements and/or promotional offers. We may provide any of the information we have collected from you in non-personally identifiable form to such a Brand, in order for that Brand to select the appropriate audience for those advertisements and/or offers. We might allow Brands to display their ads to users with similar usage patterns to yours, but we will not disclose usage information to Brands except in aggregate form, and not in a manner that would identify you personally. Note that if a Brand asks us to show an ad to a certain audience or audience segment and you respond to that ad, the Brand may conclude that you fit the description of the audience they were trying to reach.
• We want to make sure that our advertising is relevant and interesting to you and our other users. To achieve this, we may use specialized third-party advertising companies, including companies which collect data about you in order to build a profile of your preferences based on your activities when you visit or use the Services. We also may use these companies to automatically collect data from you when you use the Services in order to help us identify the ads that are served to you and what you do after seeing those ads. When you enter your email address or similar details through our Services (either to log in, or to sign up to a service, newsletter, or similar) we may disclose personal or other information that we collect from you, such as your email (in a hashed form) or other unique identifiers, to third-party technology companies that help us personalize our services to you (including our ads). You can manage the data which is disclosed by such third parties with us by amending your preferences, using the privacy settings which these third parties provide on their platforms.
• We do not sell personal information to third parties for their own marketing purposes.

4. Data Retention

We retain personal information only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements unless a longer retention period is required or permitted by law (e.g. tax, accounting, or other legal requirements).

5. User Choices and Rights

Users may:

• Update or correct their account information;
• Request deletion of their account and/or specific information, subject to legal exceptions. If required by law, we will grant a request to delete information, but you should note that in many situations we must keep your personal information to comply with our legal obligations, resolve disputes, enforce our agreements, or for another business purposes. If you revoke your consent for the processing of such information then we may no longer be able to provide you with our Services. 

Beauty Rep will honor user choices and rights with a reasonable time for implementation of any changes. Please note, not all of the rights described above are absolute, and they do not apply in all circumstances. In some cases, we may limit or deny your request because the law permits or requires us to do so, or if we are unable to adequately verify your identity. We will not discriminate against individuals who exercise their privacy rights under applicable law.

6. Security

We implement reasonable administrative, technical, and physical measures to protect personal information. However, no method of transmission over the internet, or method of electronic storage, is fully secure. While we use reasonable efforts to protect your personal information from unauthorized access, use, or disclosure, we cannot guarantee the security of your personal information. In the event that we are required by law to inform you of a breach to your personal information we may notify you electronically, in writing, or by telephone, if permitted to do so by law.

Some of our websites permit you to create an account. When you do you will be prompted to create a password. You are responsible for maintaining the confidentiality of your password, and you are responsible for any access to or use of your account by someone else that has obtained your password, whether or not such access or use has been authorized by you. You should notify us of any unauthorized use of your password or account.

7. International Data Transfers

If you are located outside the United States, your information may be transferred to and processed in the United States or other countries. By using the Services, you consent to such transfers.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational, business, or regulatory reasons. Any changes will be effective when we post the updated Privacy Policy with a new “Last Update” date indicated at the top.

It is your responsibility to review the Privacy Policy periodically. Your continued access to or use of the Services after any changes become effective constitutes your acceptance of the revised Privacy Policy. 

9. Contact Information

If you have any questions or concerns regarding this Privacy Policy or our data practices, please contact us at: contact@beautyrep.com.