or access the features on the websites that Tarte owns or controls (today or in the future),
including www.tarte.com and www.tartecosmetics.com (the "Sites"). You can access the Sites in many
from you from any third party site or application where we post content or invite your feedback or
participation, including, but not limited to, Twitter, Facebook, Instagram, YouTube, Pinterest,
and Google+ ("Third-Party Sites"). Tarte cannot control the privacy policies or practices of Third
Party Sites or of companies Tarte does not own or control, and cannot control the actions of
people Tarte does not employ or manage. You should always check the privacy policies of Third
Party Sites and your privacy settings.
We may collect or may have collected the following categories of information about you. In some cases, the information
we collect may fall within more than one category.
We may collect or may have collected personal information about you from various sources. The categories of sources from
which we may collect personal information are:
We may use or may have used the information we have about you:
We also may use or may have used the information in other ways for which we provide specific notice at the time of
In general, we do not share personal information about you with third parties for such third-parties’ own marketing or
advertising purposes. We do share personal information with third parties for other purposes. For example, we share
personal information with:
Tarte has a number of ways that it can offer better service and improve the shopping experience on our Sites.
Cookies. We collect information about how you use our Sites by setting and accessing cookies on your computer. A cookie is a
small piece of information sent by our Sites that is saved on your hard drive by your computer's browser. The cookie
holds information our Sites may need to personalize or enhance your experience and to gather statistical data, such as
which pages are visited, the internet provider's domain name and the addresses of the sites visited immediately before
coming to and immediately after leaving the Sites. The information in the cookie lets Tarte trace "clickstream" activity
(i.e., the paths taken by visitors to our Sites as they move from page to page) to enable us to better serve our
customers by revealing which portions of our Sites are the most popular. Cookies also help us improve your shopping
experience by, among other things, keeping track of your preferences, recognizing you if you have a shopping account,
and tracking your shopping basket as you shop. We may link the anonymous visitor ID from your cookie to a user ID in our
database to help us analyze web traffic and statistics. From time to time, other companies may help us with data
research and analysis, but they will be prohibited from using that data for any other purpose. You may disable cookies
on your browser. Please review your browser's instructions for doing so. Note that certain features of the Sites may not
be available if you delete or reject cookies.
Pixel tags. We may use pixel tags (also called web beacons or clear gifs) on our Sites. They can help us analyze what our customers
like to do on our Sites and the effectiveness of our features and advertising. They can also help us customize your
browsing and shopping experience. We may use information collected through pixel tags or tracked links in combination
with your personal information. We may also combine personal information you provide to Tarte with other personal
information (such as purchase history and demographic information). If we work with other companies to help us track,
collect and analyze this information, they will be prohibited from using this information for any other purpose.
Google Analytics. The Sites use Google Analytics (and in the future may use other similar sites or services), a web analytics service
provided by Google, Inc. (Google), to better assist us in understanding how the Sites are used. Google Analytics will
place cookies on your computer that will generate information that we select about your use of the Sites, including your
computer's IP address. That information will be transmitted to and stored by Google. The information will be used for
the purpose of evaluating consumer use of the Sites, compiling reports on Site activity for our use, and providing other
services relating to Site activity and usage. Google may also transfer this information to third parties where required
to do so by law, or where such third parties process the information on Google's behalf. You may refuse the use of
cookies by selecting the appropriate settings on your browser. Please note that by doing so, you may not be able to use
time to time, we may enter into agreements with other third party providers for web analytic and other similar services.
If we enter into such an agreement, we may share your information, including personal information, with the provider or
such provider may have access to and collect your information on our behalf. Your information, including personal
information, may be stored with the provider.
advertisements on behalf of their retail clients (like Tarte), across the Internet, including to you after you have
visited our Sites. These advertising partners engage in remarketing, online behavioral advertising and ad delivery and
reporting. With respect to Tarte, these advertising partners may collect anonymous information about your browser as it
makes visits to websites across the Internet (including our Sites) and your interaction with our advertising and email
communications. This anonymous information may also be used to tailor advertising for you and others elsewhere on the
Internet. Tarte will have access to the information collected by these advertising partners and can then use it in
combination with personal information provided by you to enhance your experience on our Sites. Because our advertising
partners serve ads on many different websites, they are able to compile information over time about where you, or others
who are using your computer, saw and/or clicked on the advertisements they display. Our advertising partners may share
that information with us and we and/or our advertising partners may use this information to make predictions about your
characteristics, interests or preferences and to display targeted advertisements that our advertising partners believe
may be of interest to you. Our advertising partners may also associate this information with your subsequent visit,
purchase or other activity on participating advertisers' websites in order to determine the effectiveness of the
advertisements. For more information about how targeted ads work, visit Managing Your Privacy at the Network Advertising
Opt out. You also have a right to opt-out of personalized targeted ads. Our advertising partners are members of the Network
Advertising Initiative (NAI), to opt out of targeted ads served by our advertising partners, or any or all Network
Advertising Initiative members, submit an email to email@example.com.
Do Not Track (DNT). Your browser and other mechanisms may permit you to send do-not-track signals or other similar signals to express your
preferences regarding online tracking. To the extent you employ such browser do-not-track signals or other similar
mechanisms, we will use commercially reasonable efforts to honor such requests received by us to the extent we have the
capacity and resources to identify and process your request. Due to the potential for rapid and diverse developments of
technology in this area, we cannot guarantee that we can process every type of request that exists or may be developed
in the future. As noted above, third parties, such as our advertising partners, may collect data that relates to you. We
cannot control third parties' responses to do-not-track signals or other such mechanisms. Third parties' use of data
relating to you and responsiveness to do-not-track signals is governed by their respective privacy policies.
We work with third parties, including social network sites like Twitter, Facebook, YouTube, Instagram, Pinterest, and
Google+, and with application developers who specialize in social commerce so we can connect to your social networks.
All of these companies operate Third Party Sites. We provide access to our Sites by third parties and business partners
so we can generate interest in our products among members of your social networks and to allow you to share product
interests with friends in your network.
The use of any features made available to you on our Sites by a third party may result in information being collected or
shared about you by us or by the third party. Information collected or shared through any such third party features is
considered public information by us because the Third Party Sites made it publicly available. If you do not want us to
be able to access information about you from Third Party Sites, you must instruct Third Party Sites not to share the
information. Tarte is not responsible for how these third parties may use information collected from or about you so be
sure to review the privacy policies and privacy settings on your social networking sites to make sure you understand the
information they are sharing. If you do not want a Third Party Site to share information about you, you must contact
that site and determine whether it gives you the opportunity to opt out of sharing such information. However, we do
identify any areas on our Sites where third parties share information about you.
We use features on Third Party Sites that allow you to express positive opinions about our products or purchase our
products. Those Third Party Sites may collect or register your views about our products (including whether you purchased
a product) and make those views available to Tarte and on public portions of the Third Party Sites. If you do not wish
any of this to happen, you should not express your views about our products on Third Party Sites, you should not buy our
products through Third Party Sites, and you should review your privacy settings on such Third Party Sites. We are not
obligated to display your name or other identifying information, account name, profile photo or other information or
content on our Sites even if you express an opinion about one of our products or have consented to our use of such
information or content.
We reserve the right to remove the information of any person for any reason. We may also remove from our Sites, in our
sole discretion, any product offering or any photo or product description relating thereto. If you would like us to
delete the data we have collected about you that we have received through any social media provider or Third Party Site,
please contact us. However, if your information is deleted you may not have access to certain promotions, product
information or opportunities as a result. In addition, we may not delete your personal information if an exception under
applicable data protection privacy laws and regulations applies.
Biometric Data Defined
As used in this Policy, “biometric data” means any biological characteristics of a person, or
information based upon such a characteristic, including characteristics such as those defined as
“biometric identifiers” and “biometric information” under the Illinois Biometric Information
Privacy Act (“BIPA”), 740 ILCS §§ 14/1, et seq. “Biometric identifier” means a retina or iris
scan, fingerprint, voiceprint, or scan of hand or face geometry. “Biometric information” means any
information, regardless of how it is captured, converted, stored, or shared, based on an
individual’s biometric identifier used to identify an individual.
Purpose for the Collection and/or Use of Biometric Data
In order to provide you and other visitors of our website with the ability to “virtually” try-on
products, Tarte uses a virtual try-on feature. Tarte, through its vendors and/or the licensors of
its virtual try-on technology, may utilize biometric data for the purpose of facilitating your use
of the Tarte virtual try-on feature. Any data that is collected, stored, or used will be solely
for the purpose of facilitating your use of the virtual try-on feature. Tarte may use third-party
vendors and licensors to supply it with the technology needed to offer this virtual try-on
Tarte may expand its use of biometric data in the future. In the event Tarte begins collecting
biometric data for any additional purpose, Tarte will update this Policy.
Tarte will not disclose, redisclose, or disseminate any biometric data to anyone other than its
vendors and/or the licensors of Tarte’s virtual try-on feature without/unless:
In the event Tarte collects biometric data from any customer or visitor, Tarte shall retain any
customer or visitor biometric data only while you keep the try-on feature open, and shall request
that its vendors and/or licensors of Tarte’s virtual try-on technology permanently destroy such
data when the initial purpose for collecting such biometric data has been satisfied, i.e., when
the customer/visitor concludes his or use of the virtual try-on feature.
Data Storage and Security
Tarte uses a reasonable standard of care to store, transmit, and protect from disclosure any
biometric data collected. Such storage, transmission, and protection from disclosure shall be
performed in a manner that is the same or more protective than the manner in which Tarte stores,
transmits, and protects from disclosure other confidential and sensitive information, including
personal information that can be used to uniquely identify an individual, such as account
information, credit card numbers, and PINs.
For your convenience, hyperlinks may be posted on the Sites that link to other websites (the “Linked Sites”). We are not
companies that we do not own or control. Linked Sites may collect information in addition to that which we collect on
the Sites. We do not endorse any of these Linked Sites, the services or products described or offered on such Linked
Sites, or any of the content contained on the Linked Sites. We encourage you to seek out and read the privacy policies
of each Linked Site that you visit to understand how the information that is collected about you is used and protected.
Our Sites are not intended for or directed to children under the age of thirteen and we do not knowingly collect
personal information from children under the age of thirteen on our Sites. If we become aware that a child under the age
of thirteen has provided us with personal information, we will delete the information from our records.
We are a global business and some of our group companies and service providers are located in countries outside of the
European Union (EU). As a result, it may be necessary for the personal information that we collect from you to be
transferred to or accessed from outside the EU in order for us to provide our services. If we do this, we have
procedures in place to ensure your data receives the necessary protections. Any transfer of your personal data will
Depending on your local law, you may have certain rights with respect to your personal information, including the right
to object to, restrict and/or withdraw your consent to the processing of your personal information, the right to access
your personal information, and the ability to receive a machine-readable copy of your personal information. You may also
have the right to ensure that we correct or delete any inaccurate or out of date personal information which we have
We will transfer personal information within Tarte (including with our affiliated entities), and
with service providers acting on our behalf in accordance with appropriate or suitable safeguards
recognized under the EU General Data Protection Regulation 2016/679 (GDPR) including adequacy
decisions and standard contractual clauses.
Depending on your local law, you may have certain rights with respect to your personal
information, including the right to object to, restrict and/or withdraw your consent to the
processing of your personal information, the right to access your personal information, and the
ability to receive a machine-readable copy of your personal information. You may also have the
right to ensure that we correct or delete any inaccurate or out of date personal information which
we have about you.
We may use profiling, which is a type of automated decision making, to analyze our customers’ purchase history. This may
be, for example, to create a list of customers that are eligible for a loyalty program, based on their purchases and
amounts they have spent. You have the right to request that we do not use your personal information in this way.
If you believe that any personal information which we have about you is inaccurate or out of date and you would like us
to correct or delete it, or you wish to exercise any other of your rights or have any questions or concerns about your
personal information, please contact us at firstname.lastname@example.org..
If you have a complaint about how we handle your personal information or respond to your request, you may be able to
complain to your data protection authority. We asks that you kindly contact us first, so that we have an opportunity to
resolve your complaint.
Under the California Consumer Privacy Act (“CCPA”), California residents have certain rights regarding the personal
information that businesses have about them. This includes the rights to request access or deletion of your personal
information, as well as the right to direct a business to stop selling your personal information.
If you would like to exercise your right to request access, please submit your request by calling
us at 855-968-2783 or by emailing us at
Please note that we may still use aggregated and de-identified personal information that does not
identify you or any individual; we may also retain information as needed in order to comply with
legal obligations, enforce agreements, and resolve disputes.
How to Exercise Your Rights: To exercise your rights described
above, please submit a verifiable consumer request to us by calling us at 855-968-2783 or by
emailing us at email@example.com.
Verifiable Consumer Requests: Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may
make a verifiable consumer request related to your personal information. You may only make a verifiable consumer request
for access to your personal information twice within a 12-month period. The verifiable consumer request must: 1) Provide
sufficient information that allows us to reasonably verify you are the person about whom we collected personal
information or an authorized representative of that person; and 2) Describe your request with sufficient detail that
allows us to properly understand, evaluate and respond to it. We cannot respond to your request to exercise your access
and/or deletion rights if we cannot verify your identity or authority to make the request and confirm the personal
information relates to you. Making a verifiable consumer request does not require you to create an account with us.
However, we do consider requests made through your password-protected account sufficiently verified when the request
relates to personal information associated with that specific account. We will only use personal information provided in
a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Response Timing and Format: We attempt to respond to a verifiable consumer request within 45 days after we receive it. If we require more time (up
to 90 days), we will inform you of the reason and extension period in writing within 45 days after we receive your
initial request. If you have an account with us, we will deliver our written response to that account. If you do not
have an account with us, we will deliver our written response by mail or electronically, at your option. Any disclosures
we provide will only cover the 12-month period prior to the date we receive the verifiable consumer request. The
response we provide will also provide the reasons we cannot comply with a request, if applicable. For access requests,
we will select a format to provide your personal information that is readily useable and should allow you to transmit
the information from one entity to another entity without hindrance. We do not charge a fee to process or respond to
your verifiable consumer request unless it is excessive, repetitive or manifestly unfounded. If we determine that the
request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before
completing your request.
Financial Incentive. We may offer you various financial incentives such as discounts and special offers when you provide us with contact
information and identifiers such as your name and email address. When you sign-up for our loyalty program, email list or
other discounts and special offers, you opt-in to a financial incentive. You may withdraw from a financial incentive at
any time by opting out from our email or closing your loyalty member account. Generally, we do not assign monetary or
other value to personal information, however, California law requires that we assign such value in the context of
financial incentives. In such context, the value of the personal information is related to the estimated cost of
providing the relevant financial incentive(s) for which the information was collected.
Complaints: In compliance with the CCPA, we commit to resolve
complaints about your privacy and our collection or use of your personal information. California
please submit your request by calling us at 855-968-2783 or by emailing us at
California’s Shine the Light law. California residents with an established business relationship with us can request information once a year about sharing
their personal information with third parties for the third parties’ direct marketing purposes. If you you are a
California resident and would like to request more information under the California Shine the Light law, you can email
us at firstname.lastname@example.org.
From time to time, you may receive periodic mailings, telephone calls, e-mails or other communications from us with news
or other information on events, products, discounts, special promotions, or other offers from or on behalf of Tarte. If
at any time you wish to stop receiving communications from us please send us an email to email@example.com with the
phrase "Privacy Opt-out: Tarte Mailings" in the subject line, or write to us at the address provided below, and we will
remove you from our mailing list. Alternatively, for e-mail communications, you may opt out of receiving such
communications by following the unsubscribe instructions set forth at the bottom of most promotional e-mail messages
If you have provided us with your prior express consent to receive communications via an automatic telephone dialing
system (auto-dialer), artificial or prerecorded voice messages, or text messages, Tarte may use your information to send
text messages to any mobile device connected to your cell phone number, until you opt out from future text messages by
texting STOP. Once you cancel, we will send one additional confirmation message stating that you've opted out.
It is your responsibility to provide us with accurate personal information about yourself and to inform us of any
changes. (e.g. new home address or change of name). If, however, you discover any information previously provided to us
is inaccurate or incomplete, you may request that the data be corrected or amended by sending us an email at firstname.lastname@example.org.
While no service is completely secure, we have a security team dedicated to keeping personal information safe. We
maintain administrative, technical and physical safeguards that are intended to appropriately protect against accidental
or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse and any
other unlawful form of processing, of the personal information in our possession. We employ security measures such as
using firewalls to protect against intruders, building redundancies throughout our network (so that if one server goes
down, another can cover for it) and testing for and protecting against network vulnerabilities.
We will only retain your personal information for as long as necessary to fulfill the purposes for which we collected
it, including for the purposes of satisfying any legal, accounting, or reporting requirements.
current policies and practices. We will post a prominent notice on our Sites to notify you of any significant changes to
If you have any questions about your privacy or security on our Sites, please email us at
email@example.com and include your name and address in the
message or write to us at: Tarte, Inc., 1375 Broadway, Suite 800, New York, NY 10018.