CONSENT TO USE OF PERSONAL INFORMATION FOR MARKETING AND CUSTOMER SERVICE

By placing an order, creating an account, subscribing to communications, or otherwise providing personal information to Seller through this website, the consumer acknowledges and agrees that Seller may collect, store, process, use, and disclose such personal information — including name, postal address, email address, telephone number, purchase history, account credentials, payment information (other than full payment card numbers, which are processed by Seller’s PCI-DSS-

compliant payment processors), device and browsing information, and product preferences — for the following purposes:

(a) Customer service, including order processing, fulfillment, shipping, returns, refunds, warranty administration, responding to inquiries, account management, fraud prevention and detection, and product safety and adverse event follow-up under MoCRA; and

(b) Marketing and promotional activities, including sending promotional emails (in compliance with the CAN-SPAM Act, 15 U.S.C. §§ 7701–7713), catalogs, product recommendations, personalized offers, loyalty program communications, surveys, and targeted advertising on Seller’s website and third-party platforms.

SMS/text message marketing requires separate express written consent. Seller will not send marketing text messages without obtaining the consumer’s prior express written consent in compliance with the Telephone Consumer Protection Act (“TCPA”), 47 U.S.C. § 227, and FCC implementing regulations at 47 C.F.R. § 64.1200(f)(9), including clear and conspicuous disclosure of the program, message frequency, opt-out instructions, and applicable carrier charges, and consent shall not be a condition of any purchase.

The consumer may withdraw consent for marketing communications at any time by (i) using the “unsubscribe” link in marketing emails (which Seller will honor within ten (10) business days as required by CAN-SPAM), (ii) replying “STOP” to marketing text messages, (iii) adjusting account preferences, or (iv) contacting Seller at [insert privacy contact email]. Withdrawal of marketing consent does not affect Seller’s continued use of personal information for customer service, order administration, legal compliance, or fraud prevention purposes.

Consumers residing in California have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (Cal. Civ. Code § 1798.100 et seq.) (“CCPA/CPRA”), including the right to know, access, delete, correct, opt out of the sale or sharing of personal information (including a “Do Not Sell or Share My Personal Information” link and respect for Global Privacy Control signals), limit the use of sensitive personal information, and exercise these rights without retaliation. California residents also retain rights under the California “Shine the Light” Law (Cal. Civ. Code § 1798.83) to request a list of categories of personal information shared with third parties for direct marketing purposes. Consumers residing in New York and other states with applicable privacy laws have similar rights to the extent provided by such laws. The exercise of these rights and the full description of Seller’s data practices are set forth in Seller’s Privacy Policy, which is incorporated by reference. In the event of a conflict between this Article and the Privacy Policy, the Privacy Policy shall govern. If the consumer provides sensitive personal information (as defined by CPRA § 1798.140(ae)), including information about skin or health conditions submitted through product-matching tools, the consumer has the right to limit Seller’s use and disclosure of such information.