Privacy Policy

Last Updated August 24, 2022

This Privacy Policy covers any personal information we obtain when you visit us, use our services, or access the features on the websites that Tarte owns or controls (today or in the future), including www.tarte.com and www.tartecosmetics.com (the "Sites"). You can access the Sites in many ways, including from a computer or mobile phone, and this Privacy Policy will apply regardless of the means of access. This Privacy Policy also governs the use of personal information we obtain from you from any third party site or application where we post content or invite your feedback or participation, including, but not limited to, Twitter, Facebook, Instagram, YouTube, Pinterest, and Google+ ("Third-Party Sites"). Tarte cannot control the privacy policies or practices of Third Party Sites or of companies Tarte does not own or control, and cannot control the actions of people Tarte does not employ or manage. You should always check the privacy policies of Third Party Sites and your privacy settings.

Please read this Privacy Policy carefully.

Your Consent To This Policy

By continuing to use the Sites, you are consenting to the practices described in this Privacy Policy.

personal information we collect

We may collect or may have collected the following categories of information about you. In some cases, the information we collect may fall within more than one category.

• Contact information and personal identifiers, such as your name, address, email address, telephone number, and username or social media handle.
• Device identifiers, such as information about your device like your IP address, or other online identifiers.
• Demographic information, such as your age, sex, and gender (some of which may be protected by applicable law).
• Physical characteristics, such as your hair type and color, skin type, and eye color.
• Commercial information, such as the products or services you have purchased, returned or considered, and your product preferences.
• Payment information, such as your method of payment and payment card information (including payment card number, expiration date, delivery address and billing address).
• Biometric information, such as facial images (for example, if you use one of our make-up try on applications).
• Identity verification information, in order to verify you when you call customer support or make other requests.
• Online or network activity information, such as information regarding your interaction with our Sites, digital properties, and advertisements, information about your browsing and search history on our Sites, and log file information, which includes, but may not be limited to, your browser type, webpages you visit, and other electronic network activity.
• Audio information, such as recordings of your voice when you call our customer support.
• User Content, such as your communications with us and any other content you provide (including photographs, videos, reviews, articles, survey responses, and comments).
• Inferences drawn from or created based on any of the information identified above.

how we collect your personal information

We may collect or may have collected personal information about you from various sources. The categories of sources from which we may collect personal information are:

• Directly from you, such as when you make a purchase on our Sites, contact us with a question or complaint, create an account on our Sites, register for our loyalty program, respond to a survey, participate in a contest or other promotion, or sign-up to receive marketing communications.
• From your friends or family members, such as when your friend or family member sends you a gift or makes a referral.
• Cookies and automatic collection methods. When you visit our Sites or use one of our mobile applications, and when you open or click on emails we send you, we (and third parties we work with) may automatically collect information from your browser or device using technologies such as cookies, web beacons, pixel tags, and similar technologies. Cookies are small text files that websites send to your computer or other Internet-connected device to uniquely identify your browser or to store information or settings in your browser. Web beacons or pixel tags are small images which are embedded into our Sites or emails that provide us with information about your browser or device, or whether you open or click on the emails we send you. These technologies enable us, or the third parties who place such technologies, to collect information such as device identifiers and online or other network activity information.
• Through other technologies, such as call recording technology when you speak to customer support.
• From our business partners and service providers, such as demographic companies, analytics providers, advertising companies and networks, third-party retailers, and other third parties that we choose to collaborate or work with.
• From social media platforms and networks, such as Facebook, Twitter, Pinterest, and Instagram. For example, we may obtain your information from a social media platform or network if you interact with us on social media or choose to log-in to our Sites using your social media credentials.
• From our affiliates, that you have interacted with.

how we use your personal information

We may use or may have used the information we have about you, which we set out below. To the extent that our use of your personal information is subject to UK or EU GDPR, we also set out our lawful bases under that legislation:

• To provide products and services to you, such as fulfilling orders and processing payments, creating, servicing and/or maintaining your account or any loyalty program membership you may have with us, assisting with product selection and replenishment, and managing current or past purchases.
• To communicate with you, including to respond to your inquiries or complaints, and to help you place an order.
• To administer your participation in special events, contests, sweepstakes, surveys, promotions and our loyalty programs.
• For marketing and advertising, such as to send you marketing and advertising materials via postal mail, text message or email, and to show you advertisements for products and/or services tailored to your interests on social media and other websites.
• For analytics purposes, such as to understand how you use our Sites, understand your preferred method of purchasing with us; determine what browser and devices you use to visit our Sites; and to evaluate and improve our products, services, advertisements, and website and mobile applications.
• To operate and improve our business, including to provide quality assurance, conduct research and development to develop new products and services, and perform accounting, auditing and other internal business functions.
• For legal and security purposes, such as to detect, prevent, and prosecute harmful, fraudulent, or illegal activity, loss prevention, identify and repair bugs on our Sites or mobile applications, and to comply with applicable legal requirements, relevant industry standards and our policies.

We also may use or may have used the information in other ways for which we provide specific notice at the time of collection.

how we share your personal information

In general, we do not share personal information about you with third parties for such third-parties’ own marketing or advertising purposes. We do share personal information with third parties for other purposes. For example, we share personal information with:

• The Tarte family of brands and companies, such as our affiliates, parents, and subsidiaries;
• Service providers that provide products or services to us, that help us market or advertise to you (including co-branded marketing and advertising), that provide products or services to you (such as delivering packages to you), or that manage our loyalty program (including sending you loyalty rewards). Even with this access to personal information necessary to perform these functions, those third parties are not authorized by Tarte to disclose your information for any other purposes. If, however, you become a direct customer with such third party (e.g., by subscribing to a mailing list of such third party or opening an account directly with such third party), then the third party’s privacy policy would apply to the collection of your personal information for that purpose and not this Privacy Policy;
• Social media platforms and networks such as Facebook, Twitter, Pinterest, and Instagram that offer functionalities, plugins, widgets, or tools in connection with our Sites or mobile application (e.g., to log into an account, or to share inspiration, finds, purchases, and other content with your friends and followers on social media). If you choose to use these functionalities, plugins, widgets, or tools, certain information may be shared with or collected by those social media companies—for more information about what information is shared or collected, and how it is used, see the applicable social media company's privacy policy
• Parties to business transactionssuch as those we deal with in mergers, acquisitions, joint ventures, sales of assets, reorganizations, divestitures, dissolutions, bankruptcies, liquidations, or other types of business transactions. In these types of transactions, personal information may be shared, sold, or transferred, and it may be used subsequently by a third party; and
• Online third-party companies for advertising purposes, including to: serve advertisements across the Internet; track and categorize your activity and interests over time on our Sites and mobile application, and on third-party websites and mobile applications; and to identify the different device(s) you use to access websites and mobile applications. We share information with these companies, and these companies may collect information—including automatically collected information when you use our Sites or mobile application. These third-party companies also may possess or obtain information about you from your interactions: directly with the third-party companies; with other websites, mobile applications, or companies that the third-party companies work with; or from your interactions with advertisements the third-party companies help to display to you. The information that these companies collect or that we share may be used to customize or personalize the advertisements that are displayed to you. We may share personal information with the third-party companies we work with for our purposes, though in general we do not share personal information about you with third parties for third-party marketing or advertising purposes. We may also share other information at our discretion, including automatically collected information, which may be used by third parties for third-party marketing, advertising, and other purposes.
• >Additional third parties such as law enforcements, government entities, courts, or other third parties as required or allowed by applicable law, or otherwise to help prevent harm or fraud to us, you, our customers, or other third parties. We also may share personal information with third parties upon your request or with your approval, though we may not be able to accommodate all requests.

cookies, pixel tags and tracking

Tarte has a number of ways that it can offer better service and improve the shopping experience on our Sites.

Cookies. We collect information about how you use our Sites by setting and accessing cookies on your computer. A cookie is a small piece of information sent by our Sites that is saved on your hard drive by your computer's browser. The cookie holds information our Sites may need to personalize or enhance your experience and to gather statistical data, such as which pages are visited, the internet provider's domain name and the addresses of the sites visited immediately before coming to and immediately after leaving the Sites. The information in the cookie lets Tarte trace "clickstream" activity (i.e., the paths taken by visitors to our Sites as they move from page to page) to enable us to better serve our customers by revealing which portions of our Sites are the most popular. Cookies also help us improve your shopping experience by, among other things, keeping track of your preferences, recognizing you if you have a shopping account, and tracking your shopping basket as you shop. We may link the anonymous visitor ID from your cookie to a user ID in our database to help us analyze web traffic and statistics. From time to time, other companies may help us with data research and analysis, but they will be prohibited from using that data for any other purpose. You may disable cookies on your browser. Please review your browser's instructions for doing so. Note that certain features of the Sites may not be available if you delete or reject cookies.

Pixel tags. We may use pixel tags (also called web beacons or clear gifs) on our Sites. They can help us analyze what our customers like to do on our Sites and the effectiveness of our features and advertising. They can also help us customize your browsing and shopping experience. We may use information collected through pixel tags or tracked links in combination with your personal information. We may also combine personal information you provide to Tarte with other personal information (such as purchase history and demographic information). If we work with other companies to help us track, collect and analyze this information, they will be prohibited from using this information for any other purpose.

Google Analytics. The Sites use Google Analytics (and in the future may use other similar sites or services), a web analytics service provided by Google, Inc. (Google), to better assist us in understanding how the Sites are used. Google Analytics will place cookies on your computer that will generate information that we select about your use of the Sites, including your computer's IP address. That information will be transmitted to and stored by Google. The information will be used for the purpose of evaluating consumer use of the Sites, compiling reports on Site activity for our use, and providing other services relating to Site activity and usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. You may refuse the use of cookies by selecting the appropriate settings on your browser. Please note that by doing so, you may not be able to use the full functionality of the Sites. The use of cookies by Google Analytics is covered by Google's privacy policy. From time to time, we may enter into agreements with other third party providers for web analytic and other similar services. If we enter into such an agreement, we may share your information, including personal information, with the provider or such provider may have access to and collect your information on our behalf. Your information, including personal information, may be stored with the provider.

Other advertising partners. Tarte may also work with advertising partners that use cookies, pixel tags and other tracking technologies to serve advertisements on behalf of their retail clients (like Tarte), across the Internet, including to you after you have visited our Sites. These advertising partners engage in remarketing, online behavioral advertising and ad delivery and reporting. With respect to Tarte, these advertising partners may collect anonymous information about your browser as it makes visits to websites across the Internet (including our Sites) and your interaction with our advertising and email communications. This anonymous information may also be used to tailor advertising for you and others elsewhere on the Internet. Tarte will have access to the information collected by these advertising partners and can then use it in combination with personal information provided by you to enhance your experience on our Sites. Because our advertising partners serve ads on many different websites, they are able to compile information over time about where you, or others who are using your computer, saw and/or clicked on the advertisements they display. Our advertising partners may share that information with us and we and/or our advertising partners may use this information to make predictions about your characteristics, interests or preferences and to display targeted advertisements that our advertising partners believe may be of interest to you. Our advertising partners may also associate this information with your subsequent visit, purchase or other activity on participating advertisers' websites in order to determine the effectiveness of the advertisements. For more information about how targeted ads work, visit Managing Your Privacy at the Network Advertising Initiative website.

Opt out. You also have a right to opt-out of personalized targeted ads. Our advertising partners are members of the Network Advertising Initiative (NAI), to opt out of targeted ads served by our advertising partners, or any or all Network Advertising Initiative members, submit an email to [email protected].

Do Not Track (DNT). Your browser and other mechanisms may permit you to send do-not-track signals or other similar signals to express your preferences regarding online tracking. To the extent you employ such browser do-not-track signals or other similar mechanisms, we will use commercially reasonable efforts to honor such requests received by us to the extent we have the capacity and resources to identify and process your request. Due to the potential for rapid and diverse developments of technology in this area, we cannot guarantee that we can process every type of request that exists or may be developed in the future. As noted above, third parties, such as our advertising partners, may collect data that relates to you. We cannot control third parties' responses to do-not-track signals or other such mechanisms. Third parties' use of data relating to you and responsiveness to do-not-track signals is governed by their respective privacy policies.

social commerce and third party sites

We work with third parties, including social network sites like Twitter, Facebook, YouTube, Instagram, Pinterest, and Google+, and with application developers who specialize in social commerce so we can connect to your social networks. All of these companies operate Third Party Sites. We provide access to our Sites by third parties and business partners so we can generate interest in our products among members of your social networks and to allow you to share product interests with friends in your network.

The use of any features made available to you on our Sites by a third party may result in information being collected or shared about you by us or by the third party. Information collected or shared through any such third party features is considered public information by us because the Third Party Sites made it publicly available. If you do not want us to be able to access information about you from Third Party Sites, you must instruct Third Party Sites not to share the information. Tarte is not responsible for how these third parties may use information collected from or about you so be sure to review the privacy policies and privacy settings on your social networking sites to make sure you understand the information they are sharing. If you do not want a Third Party Site to share information about you, you must contact that site and determine whether it gives you the opportunity to opt out of sharing such information. However, we do identify any areas on our Sites where third parties share information about you.

We use features on Third Party Sites that allow you to express positive opinions about our products or purchase our products. Those Third Party Sites may collect or register your views about our products (including whether you purchased a product) and make those views available to Tarte and on public portions of the Third Party Sites. If you do not wish any of this to happen, you should not express your views about our products on Third Party Sites, you should not buy our products through Third Party Sites, and you should review your privacy settings on such Third Party Sites. We are not obligated to display your name or other identifying information, account name, profile photo or other information or content on our Sites even if you express an opinion about one of our products or have consented to our use of such information or content.

We reserve the right to remove the information of any person for any reason. We may also remove from our Sites, in our sole discretion, any product offering or any photo or product description relating thereto. If you would like us to delete the data we have collected about you that we have received through any social media provider or Third Party Site, please contact us. However, if your information is deleted you may not have access to certain promotions, product information or opportunities as a result. In addition, we may not delete your personal information if an exception under applicable data protection privacy laws and regulations applies.

tarte cosmetics, inc. biometric information privacy policy

Biometric Data Defined

As used in this Policy, “biometric data” means any biological characteristics of a person, or information based upon such a characteristic, including characteristics such as those defined as “biometric identifiers” and “biometric information” under the Illinois Biometric Information Privacy Act (“BIPA”), 740 ILCS §§ 14/1, et seq. “Biometric identifier” means a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry. “Biometric information” means any information, regardless of how it is captured, converted, stored, or shared, based on an individual’s biometric identifier used to identify an individual.

Purpose for the Collection and/or Use of Biometric Data

In order to provide you and other visitors of our website with the ability to “virtually” try-on products, Tarte uses a virtual try-on feature. Tarte, through its vendors and/or the licensors of its virtual try-on technology, may utilize biometric data for the purpose of facilitating your use of the Tarte virtual try-on feature. Any data that is collected, stored, or used will be solely for the purpose of facilitating your use of the virtual try-on feature. Tarte may use third-party vendors and licensors to supply it with the technology needed to offer this virtual try-on feature.

Tarte may expand its use of biometric data in the future. In the event Tarte begins collecting biometric data for any additional purpose, Tarte will update this Policy.

Disclosure

Tarte will not disclose, redisclose, or disseminate any biometric data to anyone other than its vendors and/or the licensors of Tarte’s virtual try-on feature without/unless:

1. first obtaining informed electronic/written consent from the customer/visitor to do so;
2. the data completes a financial transaction requested/authorized by the customer/visitor;
3. disclosure is required by law or ordinance; or
4. disclosure is required pursuant to a valid warrant/subpoena issued by a court.

Retention Schedule

In the event Tarte collects biometric data from any customer or visitor, Tarte shall retain any customer or visitor biometric data only while you keep the try-on feature open, and shall request that its vendors and/or licensors of Tarte’s virtual try-on technology permanently destroy such data when the initial purpose for collecting such biometric data has been satisfied, i.e., when the customer/visitor concludes his or use of the virtual try-on feature.

Data Storage and Security

Tarte uses a reasonable standard of care to store, transmit, and protect from disclosure any biometric data collected. Such storage, transmission, and protection from disclosure shall be performed in a manner that is the same or more protective than the manner in which Tarte stores, transmits, and protects from disclosure other confidential and sensitive information, including personal information that can be used to uniquely identify an individual, such as account information, credit card numbers, and PINs.

Retention Schedule

LINKED WEBSITES

For your convenience, hyperlinks may be posted on the Sites that link to other websites (the “Linked Sites”). We are not responsible for, and this Privacy Policy does not apply to, the privacy practices of any Linked Sites or of any companies that we do not own or control. Linked Sites may collect information in addition to that which we collect on the Sites. We do not endorse any of these Linked Sites, the services or products described or offered on such Linked Sites, or any of the content contained on the Linked Sites. We encourage you to seek out and read the privacy policies of each Linked Site that you visit to understand how the information that is collected about you is used and protected.

children

Our Sites are not intended for or directed to children under the age of thirteen and we do not knowingly collect personal information from children under the age of thirteen on our Sites. If we become aware that a child under the age of thirteen has provided us with personal information, we will delete the information from our records.

INTERNATIONAL TRANSFER OF YOUR PERSONAL DATA

We are a global business and some of our group companies and service providers are located in countries outside of your local jurisdiction. As a result, it may be necessary for the personal information that we collect from you to be transferred to or accessed from outside your local jurisdiction in order for us to provide our services. If we do this, we have procedures in place to ensure your data receives the necessary protections. Any transfer of your personal data will follow applicable laws and we will treat the information according to the principles set out in this Privacy Policy.

EU OR UK USER’S RIGHTS WITH RESPECT TO PERSONAL INFORMATION

Depending on your local law, you may have certain rights with respect to your personal information, including the right to object to, restrict and/or withdraw your consent to the processing of your personal information, the right to access your personal information, and the ability to receive a machine-readable copy of your personal information. You may also have the right to ensure that we correct or delete any inaccurate or out of date personal information which we have about you.

We will transfer personal information within Tarte (including with our affiliated entities), and with service providers acting on our behalf in accordance with appropriate or suitable safeguards recognized under the EU General Data Protection Regulation 2016/679 (GDPR) including adequacy decisions and standard contractual clauses.

EU OR UK USER’S RIGHTS WITH RESPECT TO PERSONAL INFORMATION

Depending on your local law, you may have certain rights with respect to your personal information, including the right to object to, restrict and/or withdraw your consent to the processing of your personal information, the right to access your personal information, and the ability to receive a machine-readable copy of your personal information. You may also have the right to ensure that we correct or delete any inaccurate or out of date personal information which we have about you.

We may use profiling, which is a type of automated decision making, to analyze our customers’ purchase history. This may be, for example, to create a list of customers that are eligible for a loyalty program, based on their purchases and amounts they have spent. You have the right to request that we do not use your personal information in this way.

If you believe that any personal information which we have about you is inaccurate or out of date and you would like us to correct or delete it, or you wish to exercise any other of your rights or have any questions or concerns about your personal information, please contact us at [email protected]..

If you have a complaint about how we handle your personal information or respond to your request, you may be able to complain to your data protection authority. We asks that you kindly contact us first, so that we have an opportunity to resolve your complaint.

california privacy rights

Under the California Consumer Privacy Act (“CCPA”), California residents have certain rights regarding the personal information that businesses have about them. This includes the rights to request access or deletion of your personal information, as well as the right to direct a business to stop selling your personal information.

• Right to Notice. You have the right to be properly notified of the following:
  • Personal Information We Collect: Please review the section of this Privacy Policy titled PERSONAL INFORMATION WE COLLECT for more information about the personal information we collected about you in the past 12 months.
  • Why We Collect Personal Information: Please review the section of this Privacy Policy titled HOW WE USE YOUR PERSONAL INFORMATION for more information on why we collect personal information about you in the past 12 months.
  • How We Collect Personal Information: Please review the section of this Privacy Policy titled HOW WE COLLECT YOUR PERSONAL INFORMATION for more information on how we collect personal information about you in the past 12 months.
  • With Whom We Share Your Personal Information: Please review the section of this Privacy Policy titled HOW WE SHARE YOUR PERSONAL INFORMATION for more information on how we share personal information about you in the past 12 months.
• Right to Access Your Information: You have the right to request the following covering the 12 months preceding your request:
  • The specific pieces of personal information we have collected about you
  • The categories of personal information that we have collected about you
  • The categories of sources from which we collected the personal information
  • The purpose for collecting or selling the personal information
  • The categories of personal information that we have disclosed about you, the purpose for disclosing such personal information and the categories of third parties with whom we disclosed such personal information
  • The categories of personal information that we have sold about you, as well as the categories of third parties to whom we sold such personal information

If you would like to exercise your right to request access, please submit your request by calling us at 855-968-2783 or by emailing us at [email protected].

• Right to Opt-Out of Sale: While we do not sell personal information in exchange for any monetary consideration, we do share personal information for other benefits that could be deemed a “sale,” as defined by the CCPA (Cal. Civ. Code 1798.140(t)(1)). We support the CCPA and wish to provide you with control over how your personal information is collected and shared. You have the right to direct us to not sell your personal information. If you would like to exercise your right to request opt-out of sale, please submit an email to [email protected].

 

Please note that we may still use aggregated and de-identified personal information that does not identify you or any individual; we may also retain information as needed in order to comply with legal obligations, enforce agreements, and resolve disputes.

• Right to Deletion: You have the right to request that we delete any personal information about you that we have collected from you. Please note that there are exceptions where we do not have to fulfill a request to delete information, such as when the deletion of information would create problems with the completion of a transaction or compliance with a legal obligation. If you would like to exercise your right to request deletion, please submit your request by calling us at 855-968-2783 or by emailing us at [email protected].
• Right to Non-Discrimination: We will not discriminate against you (e.g., through denying goods or services, or providing a different level or quality of goods or services) for exercising any of the rights afforded to you.

 

How to Exercise Your Rights: To exercise your rights described above, please submit a verifiable consumer request to us by calling us at 855-968-2783 or by emailing us at [email protected].

Verifiable Consumer Requests: Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may only make a verifiable consumer request for access to your personal information twice within a 12-month period. The verifiable consumer request must: 1) Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative of that person; and 2) Describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it. We cannot respond to your request to exercise your access and/or deletion rights if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. However, we do consider requests made through your password-protected account sufficiently verified when the request relates to personal information associated with that specific account. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Response Timing and Format: We attempt to respond to a verifiable consumer request within 45 days after we receive it. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing within 45 days after we receive your initial request. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period prior to the date we receive the verifiable consumer request. The response we provide will also provide the reasons we cannot comply with a request, if applicable. For access requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Financial Incentive. We may offer you various financial incentives such as discounts and special offers when you provide us with contact information and identifiers such as your name and email address. When you sign-up for our loyalty program, email list or other discounts and special offers, you opt-in to a financial incentive. You may withdraw from a financial incentive at any time by opting out from our email or closing your loyalty member account. Generally, we do not assign monetary or other value to personal information, however, California law requires that we assign such value in the context of financial incentives. In such context, the value of the personal information is related to the estimated cost of providing the relevant financial incentive(s) for which the information was collected.

Complaints: In compliance with the CCPA, we commit to resolve complaints about your privacy and our collection or use of your personal information. California residents with inquiries or complaints regarding this Privacy Policy should first contact us at please submit your request by calling us at 855-968-2783 or by emailing us at [email protected].

California’s Shine the Light law. California residents with an established business relationship with us can request information once a year about sharing their personal information with third parties for the third parties’ direct marketing purposes. If you you are a California resident and would like to request more information under the California Shine the Light law, you can email us at [email protected].

OPT-OUT FROM MAILINGS

From time to time, you may receive periodic mailings, telephone calls, e-mails or other communications from us with news or other information on events, products, discounts, special promotions, or other offers from or on behalf of Tarte. If at any time you wish to stop receiving communications from us please send us an email to [email protected] with the phrase "Privacy Opt-out: Tarte Mailings" in the subject line, or write to us at the address provided below, and we will remove you from our mailing list. Alternatively, for e-mail communications, you may opt out of receiving such communications by following the unsubscribe instructions set forth at the bottom of most promotional e-mail messages from Tarte.

text, SMS, and calls

If you have provided us with your prior express consent to receive communications via an automatic telephone dialing system (auto-dialer), artificial or prerecorded voice messages, or text messages, Tarte may use your information to send text messages to any mobile device connected to your cell phone number, until you opt out from future text messages by texting STOP. Once you cancel, we will send one additional confirmation message stating that you've opted out.

correction of data

It is your responsibility to provide us with accurate personal information about yourself and to inform us of any changes. (e.g. new home address or change of name). If, however, you discover any information previously provided to us is inaccurate or incomplete, you may request that the data be corrected or amended by sending us an email at [email protected].

SECURITY

While no service is completely secure, we have a security team dedicated to keeping personal information safe. We maintain administrative, technical and physical safeguards that are intended to appropriately protect against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse and any other unlawful form of processing, of the personal information in our possession. We employ security measures such as using firewalls to protect against intruders, building redundancies throughout our network (so that if one server goes down, another can cover for it) and testing for and protecting against network vulnerabilities.

data retention

We will only retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

UPDATES TO THIS PRIVACY POLICY

This Privacy Policy may be updated periodically and without prior notice to you to reflect changes in our personal information practices. You should review this Privacy Policy periodically so that you keep up to date on our most current policies and practices. We will post a prominent notice on our Sites to notify you of any significant changes to our privacy practices and indicate at the top of the Privacy Policy when it was most recently updated.

how to contact us

If you have any questions about your privacy or security on our Sites, please email us at [email protected] and include your name and address in the message or write to us at: Tarte, Inc., 1375 Broadway, Suite 800, New York, NY 10018.