Version Date: 14 September 2021
This privacy policy sets out the principles that L’Oréal Australia Pty Ltd (ABN 40 004 191 673) including each of its businesses, brands and divisions (“L’Oréal” “we” “us”), will follow in the management of your personal information.
Your “personal information” is any information or opinion about you, or from which you are reasonably identifiable.
We may amend this privacy policy at any time and for any reason. The updated version will be available at www.loreal.com.au. We may highlight changes to this policy on our websites, but you should check this policy regularly for changes.
L’Oréal is committed to protecting the privacy of individuals and is bound by the Privacy Principles set out in the Privacy Act 1988 (Cth) (the “Act”). L’Oréal will only collect, use or disclose personal information in accordance with the Act and this privacy policy. A copy of the Act, the Privacy Principles and guidance from the Office of the Australian Information Commissioner are available from the website of the Office of the Australian Information Commissioner (at www.oaic.gov.au).
L’Oréal will, from time to time, collect personal information in the course of its business.
We may use your personal information for the following purposes:
Generally, we will only use the personal information that we collect about you for purposes connected with our business operations. These purposes may include:
The types of personal information L’Oréal collects and the purposes for which that personal information is used will depend on the circumstances. Some examples of the types of information that L’Oreal ordinarily collects in certain situations and how it is ordinarily used are set out below.
Employees
L’Oréal may collect personal information from its employees in connection with their employment. Personal information includes an employee’s name, address, date of birth, photographs, bank account details and employee records.
Any personal information obtained and held by L’Oréal directly related to an employee’s employment with L’Oréal will be exempt from compliance with the Act. L’Oréal may be required to disclose the personal information of its employees, from time to time, for the purposes of conducting its business or otherwise in accordance with this policy.
L’Oréal may, from time to time, obtain sensitive information about its employees, either directly or indirectly. Where L’Oréal comes into possession of sensitive information relating to an employee, this information will only be used for the purposes for which it was obtained.
In the ordinary course of its business, L’Oréal may be required, from time to time, to transfer the personal information of employees overseas in accordance with clause 4 of this privacy policy.
Consumers
In general, L’Oréal collects the following types of personal information about consumers: name, contact information (including postal and e-mail address and telephone numbers), gender, age and date of birth, product preferences, purchasing histories, credit card details and other information relating to a consumers’ dealings with us. We generally use this personal information to assist in the supply of products and services, for promotional purposes and for our internal administrative purposes.
L’Oréal collects personal information from consumers in a number of different ways including directly from a consumer when they provide it to us (or our agents or contractors) including when a consumer:
We may also generate personal information about consumers from information that we have. For example, by analysing our records of a consumer’s use of our products or services or the consumer’s previous dealings with us.
We may also collect personal information about consumers from publically available resources or (in circumstances where it is unreasonable or impractical to obtain it from the consumer directly) from third parties.
Applicants for employment
L’Oréal collects a range of personal information about applicants for employment such as name, contact information (including postal and e-mail address and telephone numbers), employment and training history and any other information included as part of an application, resume or curriculum vitae. We may also obtain personal information from psychological or aptitude tests and from referees. We use all of that information only to assess a person’s suitability for available employment positions. This information is collected when you submit an application for employment.
Applicants for employment agree to L’Oréal collecting, using and disclosing the information for the purposes for which it was disclosed and to the extent permitted by the Act.
Where L’Oréal holds personal information from a previous employment application, the applicant can request to access the personal information in accordance with clause 7 of this policy. The request must be provided to L’Oréal within a reasonable timeframe and must particularise the information sought and the purpose for which the information is sought. L’Oréal will provide access unless an exception to access applies under the Act.
L’Oréal will take reasonable steps to destroy all personal information it holds if the information is no longer required for the purpose for which it was obtained.
Suppliers, Purchasers and Contractors
The personal information L’Oréal collects about suppliers, purchasers or contractors who are individuals generally includes name, contact information (including postal and e-mail addresses and telephone numbers), payment and banking details. We use that information for our transactions with such persons, our internal administrative purposes related to our relationship with that person as a supplier, purchaser or contractor and in building and managing our commercial relationships. This information is collected when a supplier, purchaser or contractor contacts us, responds to a request for services, or otherwise offers to supply us with goods or services.
When you use our websites, L’Oréal may also collect “clickstream” information (such as which areas of our websites you have accessed, the time and date of access, the type of browser software used, your IP address and the previous website that the you linked to our website from). We may also collect “cookie” information (such as user preferences relating to your use of the web site). This information is used for a number of purposes including to customise and improve L’Oréal websites. You can adjust your internet setting to disable “cookies”, however certain aspects of our websites may require this information to function and may not be available or perform optimally if this information is not collected.
The Act defines some types of personal information as “sensitive information”. Personal information about a person’s racial or ethnic origin, political opinions or memberships, religious or philosophical beliefs or affiliations, professional or trade association or union memberships, sexual orientation or practices, criminal record or health (including genetic and biometric information) is considered sensitive information. L’Oréal does not generally collect sensitive information about individuals. If you provide sensitive information to us for any reason (for example if you provide us with health information such as information about allergies or skin conditions) you consent to us collecting, using and disclosing that information for the purpose for which you disclosed it and as permitted by the Act. We will handle any sensitive information that we receive in accordance with this
We may disclose or provide access to your personal information to third parties in connection with the purposes described in section 2 of this policy. We may disclose your personal information:
L’Oréal requires our contractors to keep personal information confidential and not to use or disclose it for any purpose other than performing services for us or on our behalf.
You should be aware that some information that you upload to parts of our websites or to our social media pages may be available to be viewed by the public. You should use discretion in deciding what information to upload to such sites.
As L’Oréal is an international business, some information (including personal information) may be transferred to countries outside of Australia in the ordinary course of our business including to parties located in:
When L’Oréal discloses personal information outside of Australia we will comply with this privacy policy and the requirements of the Act.
Direct marketing involves communicating directly with you for the purpose of promoting the sale of goods and services to you. Direct marketing can be delivered by a range of methods including mail, telephone, email or SMS. We may use and disclose your personal information for the purpose of sending you direct marketing materials where:
You can unsubscribe from receiving direct marketing materials from us at any time by contacting us (see section 9 of this policy).
L’Oréal will take reasonable steps to keep any personal information we hold about you secure. However, except to the extent liability cannot be excluded due to the operation of statute, we exclude all liability (including in negligence) for the consequences of any unauthorised access to your personal information. Please notify us immediately if you become aware of any breach of security.
You have the right to seek access to personal information which L’Oréal holds about you or to update or correct that information.
There are a limited number of circumstances in which L’Oréal may decline to grant such access. These are set out in the Act. L’Oréal will grant access to information in accordance with the Act.
To request to access, verify, correct, or update any personal information we hold about you, please contact us (see section 9 of this policy).
L’Oréal will endeavour to acknowledge such requests as soon as practicable. If L’Oréal is required to or otherwise agrees to grant access to the personal information, we will give access within a reasonable period of time. L’Oréal will notify you of the method by which it will give you access to the information. Where permitted by law, L’Oréal may charge an administrative fee for granting access to information.
If L’Oréal refuses to grant access to personal information, it will inform you of the grounds on which access is denied and advice you of your options to seek to have that decision reviewed.
If you are concerned that L’Oréal may have breached its privacy obligations, the Act or this privacy policy please contact us (see section 9 of this policy). When contacting us, please provide as much detail as possible in relation to your issue or complaint.
All complaints will be taken seriously and will be assessed by an appropriate person with the aim of resolving any issue in a timely and efficient manner. We request that you cooperate with us during this process and provide us with any relevant information we may require.
If you are not satisfied with our handling of your complaint, you may refer the issue to the Office of the Australian Information Commissioner (at [email protected]).
In some cases, you have the right to have you personal information erased or deleted. Please note this is not an absolute right, as we may have legal and legitimate grounds for retaining your personal information.
To request deletion of your personal information, you may send us a request at [email protected] or telephone us on 1300 659 359.
If you have any questions or concerns about L’Oréal’s collection, use or disclosure of your personal information or if you would like to access, update or correct the information we hold about you please contact L’Oréal’s Privacy Officer via the L’Oreal Consumer Affairs Department at 564 St Kilda Road, Melbourne, Victoria 3004 or by telephone on 1300 659 359 or by email [email protected].
