1.1 This Policy statement provides information on the obligations and policies of Clarins in respect of an individual customer’s Personal Data. Clarins undertakes to use reasonable efforts in applying, where practicable, those principles and the processes set out herein to its operations.

1.2 Clarins’ officers, management, and members of staff shall use reasonable endeavours to respect the confidentiality of and keep safe any and all Personal Data collected and/or stored and/or disclosed and/or used for, or on behalf of, Clarins. Clarins shall use reasonable endeavours to ensure that all collection and/or storage and/or disclosure and/or usage of Personal Data by Clarins shall be done in an appropriate manner and in accordance with the Act and this Policy.

1.3 By interacting with us, submitting information to us, or signing up for any products or services offered by us, you agree and consent to Clarins as well as to its respective representatives and/or agents ("Representatives") (collectively referred to herein as "Clarins", "us", "we" or "our") collecting, using, disclosing and sharing amongst themselves your Personal Data, and disclosing such Personal Data to Clarins’ authorised service providers and relevant third parties in the manner set forth in this Privacy Statement.

1.4 This Policy supplements but does not supersede nor replace any other consents you may have previously provided to us in respect of your Personal Data, and your consents herein are additional to any rights which we may have at law to collect, use or disclose your Personal Data.

1.5 For the purposes of this Policy, in line with the provisions under the India Personal Data Protection Bill 2019. The Bill governs the processing of personal data by: (i) government, (ii) companies incorporated in India, and (iii) foreign companies dealing with personal data of individuals in India. Personal data is data which pertains to characteristics, traits or attributes of identity, which can be used to identify an individual. The Bill categorises certain personal data as sensitive personal data. This includes financial data, biometric data, caste, religious or political beliefs, or any other category of data specified by the government, in consultation with the Authority and the concerned sectoral regulator.

2.1 Where you legitimately request access to and/or correction of Personal Data relating to you, such Personal Data which is in the possession and control of Clarins, Clarins shall provide and/or correct that data within 30 days and in a manner in accordance with its standard procedures as stated hereinafter.

2.2 In accordance with the Act, Clarins has established a process for receiving and responding to any query or complaint that may arise with respect to the application of this Act. To ensure that Clarins receives your complaints and enquiries, please send the same via email to Clarins at the following email address: enquiries.in@clarins.com

2.3 Please note that if your personal data has been provided to us by a third party (e.g. a member via a referral process), you should contact that individual to make such queries, complaints, and access and correction requests to Clarins on your behalf.

2.4 Should you not wish Clarins to use your Personal Data for any of the purposes listed in Clauses 3.2 to 3.4, or not to receive promotional materials from Clarins, you may opt out by sending a clearly worded email to the DPO via the email address provided in Clause 2

2.5 Your request shall be processed within 30 days. Please note however that this may affect our ability to attend to your needs in the event where there is already an existing business relationship.

Types of Personal Data Collected:

3.1 As part of its day-to-day activity, Clarins may collect from you, through various means, including via our websites, smart phone applications, retail counters, marketing events such as road shows and any forms used by Clarins from time to time, some or all of the following Personal Data:

- Name (first and surname);

- Postal Address;

- Phone number (including mobile);

- Office number;

- Email address;

- Bank account/credit card details;

- Gender;

- Personal Data of your emergency contacts;

- Username and password;

- IP addresses;

- Date of birth

- Photographs and images; and

- Any other Personal Data furnished by you.

Cookies

We use cookies on our websites to track visitorship and experience. Most web rowsers are designed to accept cookies. If you do not wish to receive any cookies, you may set your browser to refure it.

3.2 The above Personal Data mentioned in Clause 3.1 is collected for the purposes of processing your application and registration of your membership and to ascertain if you are eligible for discounts, privileges or benefits or other related purposes; to conduct market research and analysis; for direct marketing through voice calls; text messages; email; direct mail and facsimile messages; for payment and/or credit control purposes; to notify you of any changes to our policies or services which may affect you; to respond to queries and feedback; maintaining and updating your membership details; to provide you with personalised services; to enable us to develop, deliver and improve our products, services, content and advertising; to administer our websites; to improve your experience with us; and informing you of new developments, services, promotions of Clarins and other third parties which we are associated with.

Disclosure of Personal Data

3.3 In order to carry out the functions described above, Clarins may, from time to time, disclose your Personal Data between Clarins’ companies.

3.4 Without derogating from any of the above, Clarins may also disclose your Personal Data to the following third parties:

- Regulators and law enforcement officials;

- Lawyers;

- Auditors;

- Third party service providers and consultants;

- Credit, debit and charge card companies, banks and other entities processing payment;

- Potential buyers or investors of Clarins or any of Clarins’ companies;

- Any agent or subcontractor acting on Clarins’ behalf for the provision of Clarins’ services.

3.5 Clarins may disclose your Personal Data to the abovementioned parties also in the occurrence of any of the following events:

- To the extent that Clarins is required to do so by the law;

- In connection with any legal proceedings or prospective legal proceedings;

- To establish, exercise or defend Clarins’ legal rights;

- To the purchaser (or prospective purchaser) of any business or asset which Clarins is (or is contemplating) selling;

- To any person and/or entity for the purpose of processing such information on Clarins’ behalf;

- To third parties who provide services to Clarins or on its behalf;

- To any third party that purchases Clarins or Clarins’ business or any part of Clarins or Clarins’ business;

- With your consent; and

- For the purposes of disaster recovery.

Optional Provision of Personal Data

3.6 In some instances, you may also be requested to provide certain Personal Data that may be used to further improve Clarins’ products and services and/or better tailor the type of information presented to you. In most cases, this type of data is optional although, where the requested service is a personalised service, or provision of a product or dependent on your providing all requested data, failure to provide the requested data may prevent Clarins from providing the service to you. This type of data includes, but is not limited to:

- Your age;

- Gender;

- Salary range and employment details;

- Education and Profession;

- Medical history;

- Hobbies and leisure activities;

- Other related products and services subscribed to; and

- Family and household demographics.

3.7 Under certain circumstances, telephone calls made to any of Clarins’ companies to order and/or service hotlines and/or inquiry telephone numbers are recorded for the purposes of quality control, appraisal, as well as staff management and development. In such an event, by agreeing to this Policy, you hereby give your consent for the collection, use and disclosure of such Personal Data for the purposes of our records, following up with your enquiry and/or transaction, and for quality control and training purposes.

Your Personal Data may be processed by Clarins, its affiliates, agents and third parties providing services to Clarins, in jurisdictions outside of India. In this event Clarins will comply with the terms of the Act.

Where possible, Clarins will validate data provided using generally accepted practices and guidelines. This includes the use of check sum verification on some numeric fields such as account numbers or credit card numbers. In some instances, Clarins is able to validate the data provided against pre-existing data held by Clarins. In some cases, Clarins is required to see original documentation before we may use the Personal Data such as with Personal Identifiers and/or proof of address. To assist in ensuring the accuracy of your Personal Data in the possession of Clarins, please inform us of any updates of any parts of your Personal Data by sending a clearly worded email to the DPO at the email address provided at Section 2.2.

Clarins uses commercially reasonable physical, managerial, and technical safeguards to preserve the integrity and security of your Personal Data and will not knowingly allow access to this data to anyone outside Clarins, other than to you or as described in this Policy. However, Clarins cannot ensure or warrant the security of any information you transmit to Clarins and you do so entirely at your own risk. In particular, Clarins does not warrant that such information may not be accessed, altered, collected, copied, destroyed, disposed of, disclosed or modified by breach of any of Clarins’ physical, technical, or managerial safeguards.

7.1 In accordance with Clause 2.1 of this Policy, you have the right to:

a) check whether Clarins holds any Personal Data relating to you and, if so, obtain copies of such data; and

b) require Clarins to correct any Personal Data relating to you which is inaccurate for the purpose for which it is being used.

7.2 Clarins reserves the right to charge a reasonable administrative fee in order to meet your requests under Clause 7.1(a). Upon payment of the requisite fee under Clause 7.1(a) and/or receipt of your request under Clause 7.1(b), your request shall be processed within 30 days.

7.3 If you wish to verify the details you have submitted to Clarins or if you wish to check on the manner in which Clarins uses and processes your personal data, Clarins’ security procedures mean that Clarins may request proof of identity before we reveal information. This proof of identity will take the form of full details of name, membership number and NRIC or Passport or Aadhar number. You must therefore keep this information safe as you will be responsible for any action which Clarins takes in response to a request from someone using your membership details. We would strongly recommend when you login to your online account in our websites that you do not use the browser's password memory function as that would permit other people using your terminal to access your personal information.

Clarins will delete, as reasonably possible, or otherwise anonymise any Personal Data in the event that the Personal Data is not required for any reasonable business or legal purposes of Clarins and where the Personal Data is deleted from Clarins’ electronic, manual, and other filing systems in accordance with Clarins’ internal procedures and/or other agreements.

To the extent that any of the communication means which you have provided Clarins with (which may include, your telephone number and fax number) is/will be listed on the Do Not Disturb (the “DND”), by checking the box on the application form, or by any other means of indication, you hereby grant Clarins your clear and unambiguous consent to contact you using all of your communication means you have provided to Clarins including using via voice calls, SMS, Whatsapp, MMS, fax or other similar communications applications or methods, for the purposes as stated above in Paragraph 3.2. This will ensure your continued enjoyment of Clarins’ promotional rates and services

Clarins reserves the right to alter any of the clauses contained herein in compliance with local legislation, and for any other purpose deemed reasonably necessary by Clarins. You should look at these terms regularly. If you do not agree to the modified terms, you should inform us as soon as possible of the terms to which you do not consent. Pending such notice, if there is any inconsistency between these terms and the additional terms, the additional terms will prevail to the extent of the inconsistency.

This Policy is governed by and shall be construed in accordance with the laws of India. You hereby submit to the non-exclusive jurisdiction of the Indian courts.

12.1 This Policy only applies to the collection and use of Personal Data by Clarins. It does not cover third party sites to which we provide links, even if such sites are co-branded with our logo. Clarins does not share your Personal Data with third party websites. Clarins is not responsible for the privacy and conduct practices of these third party websites, so you should read their own privacy policies before disclosure of any Personal Data to these websites.

12.2 Clarins will not sell your personal information to any third party without your permission, but we cannot be responsible or held liable for the actions of third party sites which you may have linked or been directed to Clarins’ website.

12.3 Clarins’ websites do not target and are not intended to attract children under the age of 18 years old. Clarins does not knowingly solicit personal information from children under the age of 18 years old or send them requests for personal data.