Privacy Policy

Last Updated: April 18, 2025

Please read carefully.

Koco Life, LLC (“Kopari”, “we”, “us”, or “our”) is committed to keeping your Personal Information (as defined below) secure. We will only use your Personal Information in accordance with this Privacy Policy and as you otherwise consent or direct us to use your Personal Information.

This Privacy Policy describes how we may collect and use your Personal Information when you: interact with us through our website, digital tools, and platforms (collectively, the “Sites”); engage with us by telephone, email, chat, text message, or other communication features on our Sites; interact with us through our social media, promotions, contests, advertisements or other content we may publish on third-party websites or applications; and/or otherwise engage with us or our affiliates, third parties or service providers (collectively, our “Services”). It also explains how your Personal Information is disclosed by Kopari and your rights as a consumer.

Your use of any of our Sites and Services signifies that you agree to the collection and use of your Personal Information in accordance with this Privacy Policy. IF YOU DO NOT AGREE TO THE TERMS OF THIS PRIVACY POLICY AND OUR TERMS OF USE, YOU MAY NOT ACCESS OR OTHERWISE USE OUR SITES OR SERVICES.

WHAT PERSONAL INFORMATION WE COLLECT

In order for you to access our Services, we may collect information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with you (“Personal Information”). The categories of Personal Information we may collect and have collected about you within the past 12 months include without limitation:

Identifiers - Including without limitation your real name, alias, account name, online identifier, IP address, unique identifiers, email address, postal address, billing address, phone number, birthdate, age and age-range, social media handle or moniker, or other similar identifiers. Our web servers automatically collect unique identifiers that can be used to recognize you or your device, including without limitation your IP address, MAC address, domain name, pixel tags, or other device and mobile online identifiers or similar technology.
Sensitive Personal Information - Including without limitation information concerning your financial account information, debit card, or credit card number in combination with any required security or access code (for fee payment purposes), precise geolocation, contents of your messages, reviews, questions, voicemails, chat messages, emails and text messages that you send to us.
Payment Information – Including without limitation your method of payment, credit card information, billing address, shipping address, or any other financial information you provide in connection to your purchase of our products.
Legally Protected Characteristics – Including without limitation your age, gender identity, gender expression, marital status, and preferred pronouns.
Commercial Information - Including without limitation our products you purchased, obtained, subscribed to, considered, or returned and the promotions, sweepstakes, contests, quizzes and other Services you use and/or participated in.
Internet or Other Electronic Network Activity Information – Including without limitation, your device information, browsing history, search history, click numbers, referring/exit pages, date/time stamps, information regarding your interaction with our Sites, Services, digital properties, advertisements, and your log file information like your browser type and webpages you visit.
Geolocation Information - Including without limitation information that can help identify your physical location like your GPS coordinates or the approximate location of your electronic devices.
Audio and Visual Information – Including without limitation images or recordings of you if you attend one of our promotional and marketing events, any voice recordings that you voluntarily leave on voice mailboxes or that we may collect when you call customer services, and photos or images of you if you choose to send us pictures of yourself.
Inferences Drawn About Your Preferences – Including without limitation inferences relating to your beauty and related preferences and interests, your type of skincare regimen, your favorite type of vacation, preferences in skincare product characteristics, and other information drawn from your characteristics, behaviors (on and offline), purchase patterns, and other types of information we collect from you through your use of our Sites and Services.
Physical and Health Characteristics – Including without limitation your skin type, skin concerns, diagnoses and skin history.
Data About Others – Including without limitation personally identifying information of individuals for whom you refer to us or purchase an item or gift for, such as their real name, email address, phone number, and postal address. Please do not share personally identifying information of other individuals with us unless you have their permission to do so.
User Content - Including without limitation the messages, reviews, questions, ratings and other content you send us (including photographs and images, videos, feedback, reviews, articles, quiz and survey responses, and comments).
Other Categories of Personal Information that Relates to or is Reasonably Capable of Being Associated with You - Including without limitation information we collect from you if you interact with us, our service providers or third-party websites such as Facebook, Instagram, X (fka Twitter), TikTok, Pinterest, Google and other social media or interactive pages.

HOW WE COLLECT YOUR INFORMATION

We may collect your Personal Information from various sources, including without limitation:

· Information you provide us - We collect your Personal Information from your direct engagement with our Sites, Services, advertisements, and other digital properties, including without limitation when you:

o communicate with us by phone, email, chat, text, or otherwise;

o make orders, build your own bundle, or sign up for subscriptions for products on our website;

o create an account, complete our quizzes, or sign up to receive promotional messages;

o enroll in our Kopari Clique or other rewards or loyalty programs;

o participate in our sweepstakes, contests or other promotions;

o RSVP for our online or offline events; and

o create product reviews, rate products, submit questions, or otherwise interact with us.

· Information we collect automatically from you - We may automatically collect your Personal Information when you use our Sites and Services through the use of cookies and other tracking technologies. See the Section below titled “USE OF COOKIES AND OTHER TECHNOLOGY” for more information.

· Information from third parties – We may receive information about you from third parties, including without limitation:

o companies with whom we run contests, sweepstakes, promotions and other events and other organizations and business partners with whom we work with,

o publicly available sources and information which is published in the media,

o service providers who help us operate our Sites and Services,

o our data analytic providers, operating systems and platforms, advertising companies and networks,

o our third-party retailers or distributors,

o your friends or family members, such as when your friend or family member sends you a gift or makes a referral,

o our affiliates that you may have interacted with, and

o our fraud prevention service providers or other vendors that provides services on our behalf.

· Information from social media platforms and networks – Depending on your settings or the privacy policies of social media or messaging services that we partner with, such as Instagram, Facebook, Pinterest, X (fka Twitter), YouTube, TikTok or Google, we may obtain information about you through your interaction with us on social media or through your use of certain features, such as plugins, widgets, or other tools made available by social media platforms or networks in connection with our Sites and Services. For example, we may obtain your information from a social media platform or network if you interact with us on social media or choose to log-in to our websites using your social media credentials. For more information about the privacy practices of those social media platforms and networks, please review the privacy policies and settings of the social media platforms and networks.

· Information from other sources – We may collect your Personal Information through call recording technology when you speak to customer service and through inferences that we may create when analyzing the Personal Information we collect from you from other sources.

USE OF COOKIES AND OTHER TECHNOLOGIES

Like many online retailers, we and our third-party partners and service providers (such as advertising networks, analytics providers and social media platforms and networks) may collect certain Personal Information and aggregated non-personally identifiable information about you when you visit our Sites through the use of cookies, pixels, web beacons, software developer kits (“SDKs”), and other technologies (collectively, “Online Tracking Technologies”).

What Types of Online Tracking Technologies Do We Use

We may use the following types of Online Tracking Technologies:

Cookies. Cookies are very small data files, located on your device’s hard drive and acts as a unique tag to identify your browser. We employ the use of cookies and use them in several ways which help track information about the users of our Sites. Such information helps us better understand how you go through our Sites so that we may tailor your experience at our Sites. Cookies are also used to tell us whether you have visited our Sites previously and to help us determine whether you came to our Sites from a particular Internet link or banner advertisement.

The types of cookies we use are:

· Strictly necessary cookies. These are cookies that are required for the operation of our Sites, such as cookies that enable you to log into your account or make purchases, or cookies that enable us to comply with the law (for example, to keep your information safe). We would not be able to operate our Sites without using “strictly necessary” cookies.

· Performance cookies. These cookies recognize and count the number of users to our Sites and help us see how users move around our Sites. These cookies do not collect information that personally identifies a visitor. We only use such information to improve our Sites. This information helps us to find out how well our Sites are working and highlights where it can be improved.

· Functionality cookies. These cookies are used to recognize when you return to our Sites and assist us to personalize your content and Site experience by remembering your preferences.

· Targeting cookies. These cookies record your visit to our Sites, the pages you have visited and the links you have followed. These type of cookies are used by operators of third-party advertising networks to advertise relevant products to you on the internet, based on the products and categories you looked at or purchased on our website. Our website currently uses tracking pixels with third parties such as Google and Facebook for marketing and remarketing purposes. This technology allows those third parties to collect information when you access our Sites, including without limitation the products on our Sites you have viewed, whether you have made a purchase and, if you make a purchase, the details of the transaction including products bought and amount of the sale. The third-party providers are able to identify specific users of their platforms through the ID number used in their tracking pixels. This information allows those providers to tailor what marketing material you are shown through those platforms and when browsing the internet. We also receive aggregated reports from those third parties in relation to our advertising campaigns, including de-identified information about the number of users who were shown our advertising campaigns and subsequently purchased our products. These reports use aggregated information and do not allow us to identify specific individuals from those transactions.

· Social media cookies: These cookies are set by a range of social media services that we have added to our Sites to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies, you may not be able to use or see these sharing tools.

Pixels and Web Beacons. Pixels and web beacons are a type of code that is embedded in a website, video, email, or advertisement that sends information about your use to a server. There are various types of pixels, including image pixels (which are small graphic images) and JavaScript pixels (which contains JavaScript code). When you access a website, video, email, or advertisement that contains a pixel, the pixel may permit us or a separate entity to drop or read cookies on your browser. Pixels are used in combination with cookies to track activity by a particular browser on a particular device. We may incorporate pixels from separate entities that allow us to track your communications with us, bring you advertising both on and off the Sites, and provide you with additional functionality, such as the ability to connect our Sites with your social media account.

SDKs and Other Technologies. We may use technologies that are not browser-based like cookies and cannot be controlled by browser settings. For example, our Sites may include SDKs which are sets of software-building tools, debuggers, compilers and libraries of code that runs a specific platform on our Site. We may use SDKs on our Sites to send certain Personal Information about your use of our Sites to a server, to track our communications with you better, bring you advertising both on and off the Sites, and provide you with additional functionality, including without limitation the ability to connect our Sites with your social media account.

Third-party Analytic and Functionality Tools. We may partner with third parties to assist us in the overall performance and advertisement of our Sites, products and/or Services, and such third parties may place Online Tracking Technologies on our Sites in connection with our agreement with them. For example, our Sites use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies to help us to analyze how users use the Sites. If we use Google Analytics, the information provided and generated by the cookie about your use of our Sites (including your IP address) will be transmitted to and stored by Google Analytics. Google Analytics will use this information for the purpose of evaluating your use of our Sites, gathering reports on our Sites’ activity for us, and providing other services relating to our Sites’ activity. Google Analytics may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google Analytics’ behalf. Google Analytics will not associate your IP address with any other data kept by Google. You may reject cookies by selecting the appropriate settings on your browser. If you choose to do so, however, you may not be able to use certain areas and features/functions of our Sites. You can learn more about how Google Analytics processes information here: Google Analytics Terms of Use and Google Privacy Policy. We do not have access to or control over cookies or other features that advertisers and third party websites may use, and the information practices of those advertisers and third party websites are not covered by our Privacy Policy.

How We Use Online Tracking Technologies

In addition to the purposes discussed throughout this Privacy Policy and our Sites, we and our third-party partners and service providers may use Online Tracking Technologies to:

process your online orders;
understand the behavior of users to our Sites and Services;
track which parts of our Sites people have visited;
understand the profile of the users of our Sites and Services;
make our Sites as convenient and personal as possible, for example by keeping you signed in;
provide certain services that require the use of cookies such as using an online shopping basket;
provide tailored advertising on third party sites and among your various devices;
measure the effectiveness of our online advertising or how often our content is viewed;
determine which email messages were opened, whether you clicked on any links and interacted with the content and to optimize your email experience;
maintain the security of our Sites and your account, prevent crashes, fix bugs, and assist with basic site functions; and
analyze your information including your location, products and/or Services requested, age, time zone, IP address and URL visited, against our wider customer base for internal business purposes, such as generating statistics and developing marketing plans, to improve our products, Services, Sites and content. We may also aggregate and de-identify your information to create customer segments and share with our licensees and partners.

How to Manage Your Preferences Regarding Online Tracking Technologies

You may manage your cookie preferences at any time and are welcome to block the use of all non-necessary cookies we use on our Sites through the following link: [Manage Cookies[DYR1] ]. Please note, however, that blocking or deleting certain cookies may negatively affect your user experience.

Most browsers automatically accept cookies by default, but you can adjust your device and/or browser settings to delete and/or block some or all cookies, or provide notifications when you receive a new cookie. If you do not know how to do this, the links below set out information about how to change your browser settings for some of the most commonly used web browsers:

Google Chrome: https://support.google.com/chrome/answer/95647?hl=en-GB
Mozilla Firefox: https://support.mozilla.org/en-US/kb/delete-browsing-search-download-history-firefox?redirectlocale=en-US&redirectslug=Clear+Recent+History
Microsoft Edge - https://support.microsoft.com/en-us/help/4468242/microsoft-edge-browsing-data-and-privacy-microsoft-privacy
Microsoft Internet Explorer: https://support.microsoft.com/en-us/help/278835/how-to-delete-cookie-files-in-internet-explorer
Apple Safari: https://support.apple.com/kb/PH5042?locale=en_US
Opera - https://help.opera.com/en/latest/

For more instructions on how to control cookies on your browser, visit www.aboutcookies.org.

By setting your email account to display emails as text only, you may be able to prevent the use of some pixels and web beacons, however please be aware that our emails won’t look as pretty and some functionality may be disabled. Alternatively, you can remove yourself completely from our mailing list by going to the bottom of any email from us and clicking on the relevant 'unsubscribe' link in the emails you receive or by contacting us using the details found in the section “HOW TO CONTACT US”.

To the extent our Online Tracking Technologies are deemed to be a “sale”/”sharing” or “targeted advertising” as defined under applicable U.S. state laws, you can opt-out of these online tracking technologies by submitting a request via Your Privacy Choices, which is available at the bottom of the our website. Please note, some features of our websites may not be available to you as a result. For Google Analytics, at your end, you may exercise an opt out going to tools.google.com/dlpage/gaoptout or downloading the Google Analytics Opt-out Browser Add-on. You may adjust your Google advertising settings by visiting adssettings.google.com.

HOW INFORMATION IS USED

We use Personal Information and non-Personal Information in a variety of ways, including without limitation to:

Operate and improve our Sites, customer service, or product and service offerings;

Send you messages (e.g., information about promotions and products offered by Kopari and our selected partners (only if you request the same), security alerts, and updates to our Privacy Policy);
Personalize and improve your experience on our Sites (e.g., your information helps us to better respond to your individual needs);
Respond to comments and questions and provide customer service (e.g., your information helps us to effectively respond to your customer service requests and support needs);
Operate and maintain our promotions, contests, sweepstakes, and rewards and loyalty programs;

Provide products and tailored content, services, advertisements, and offers to you;
Administer and manage your account or membership to one or more of our rewards and loyalty programs;
Verify your identity and prevent fraud;
Perform our contractual obligations to you, including without limitation fulfilling product orders and Kopari Auto Replenishments;

Conduct research and analytics and create aggregated, pseudonymized, or anonymized information for statistical purposes;

Post your content and consumer reviews on the Sites, our social media pages, platforms, and related third party sites that retail or feature our brand and products;
Enforce our Terms & Conditions, this Privacy Policy, and our other written policies or agreements between you and Kopari and to comply with applicable laws;

Enable you to interact with third-party content service providers, whether by linking to their sites, viewing their content within our online environment, or by viewing our content within their online environment;
Conduct audits related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards;
Detect security incidents, protect you against malicious, deceptive, fraudulent, or illegal activity and prosecute those responsible for that activity;
Debug to identify and repair errors that impair existing intended functionality;
Fulfilling any other business or commercial purposes at your direction or with your consent; and
Such other purposes discussed throughout this Privacy Policy and our Sites.

SHARING OF PERSONAL INFORMATION

In addition to the specific situations discussed elsewhere in this Privacy Policy, we may disclose and share your Personal Information with:

Service Providers - Kopari shares information with entities that help us with maintaining and operating our Sites. Our service providers include without limitation our payment processors, IT vendors, advertising networks, internet service providers, data analytic providers, marketing providers, transportation and logistics providers, external auditors and advisors and other third parties that support our business. These companies may only use such information to perform those functions and may not use it for any other purpose, although we may permit them to use aggregate information which does not identify you or de-identified data for any purpose except as prohibited by applicable law.
Vendors - We may share information with vendors and other entities in connection with tailoring advertisements, measuring, and improving our Sites and advertising effectiveness, processing your specific requests, and enabling other enhancements to our products, Services, and on and offline events. These companies may act as our service providers, or in certain contexts, independently decide how to process your information. If you voluntarily enroll in one of our promotions, contests, sweepstakes, and rewards and loyalty programs (e.g., our newsletters), we share information to third parties to help us provide and operate our Program offerings. This includes without limitation sharing your information with our service providers that maintain our e-newsletters, our business partners (or their service providers) participating in our promotions, or other third parties for administrative purposes.
Business Partners – We may disclose your Personal Information with businesses that we have partnered with to jointly create and offer a product, service, or joint promotion. If you decide to obtain a product or service that is offered by these partners, the information you provide will be disclosed to us and them. Their use of your information is not governed by this Privacy Policy but by their own respective privacy policies. Please note, we will not disclose text messaging opt–in data and consent with any third parties for their marketing purposes.
Social Networks – We may obtain your information from a social media platform if you interact with us on our social media accounts and platforms and networks and may share any posts or content that you have tagged us on or relate to our products and services in our own social media accounts and Sites. Our Sites may have features such as, plugins, widgets, and/or other tools made available by social media platforms and networks that may result in information being collected or disclosed between us and such parties. Their use of your information is not governed by this Privacy Policy.
Public Forums – You may post your reviews, comments, questions or other content regarding out products and Site in a public forum. For example, our Sites allow you to provide Ratings & Reviews and to receive product recommendations. If you decide to submit information in these public forums, that information will be publicly available.
Affiliates - We may share information with our related entities including without limitation our parent, subsidiaries and sister companies, or to their employees, agents, contractors, representatives, legal counsel and/or accountants, for: operational, management and administrative purposes; internal audit, legal, regulatory, security, insurance, financial, processing and other similar purposes; or as otherwise permitted or required by law.
Third Parties in Connection with a Merger, Acquisition or Other Business Transaction - We may share information if Kopari is involved in a merger, acquisition, sale of all or a portion of its assets, financings, joint ventures, reorganization, dissolution, liquidation, or other event where we sell or transfer all or a portion of our business assets or equity. We will not provide you with notice before disclosure in such cases.
Third Parties for Security and Compelled Disclosure Purposes - Kopari must disclose information about you in response to lawful requests by public authorities, including but not limited to meet national security or law enforcement requirements. We may share information about you in connection with legal requirements, such as in response to an authorized subpoena or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud. Such disclosures may be carried out without notice to you.
Third Parties that You Direct Us to Share With - We share information at your request or direction, such as when you purchase a gift card and direct us to send it to a certain recipient. We may also share your information with notice and as required by applicable law, with your consent.

THIRD PARTY LINKS

Our Sites contain links to several third party websites not owned or controlled by Kopari and this Privacy Policy does not apply to such websites or the use of any data by such websites. Should you decide to navigate to any websites or webpages external to our Sites, you do so entirely at your own risk. We are not responsible for the actions, privacy, security, or content of such third party websites. If you are asked to provide information on one of these websites, we encourage you to carefully review their privacy policy before sharing your information. Nevertheless, we value and seek to protect the integrity of our Sites and welcome any feedback about third-party links.

We may use third party companies to serve advertisements, measure the performance and engagement with our ads, provide analytic, preference, and interest information, and administer some of our offerings (e.g. our Recycling Program and Ambassador Program). In some instances, these ad network providers, social platforms, sponsors, and/or service providers may use their own tracking technology to capture information about your device, use and engagement online.

We may recognize your information across different devices that you use or log in from (e.g., computers or mobile devices). We may recognize that one cookie ID (e.g., from a computer) may be connected to another device (e.g., smart phone) by the device ID or log in. This may result in you searching for one of our products on one device but seeing an advertisement later for that product on another device. By knowing what devices are being used by a person or household helps us limit the number of times you may see the same advertisement across different devices.

You can specify your preferences over the use of some of these technologies by changing your preferences regarding cookie collection via changes to your web browser. Additionally, you can manage third party advertising preferences for some of the third parties we work with that serve advertising across the internet by using the choices available at www.networkadvertising.org/managing/opt_out.asp and www.aboutads.info/choices. We do not guarantee that all of the third parties we work with will honor the elections you make using those options, but we strive to work with third parties that do. Some social media platforms (i.e., Facebook) allow you to exercise ad choices, limit data collection and clear your history on that platform as well.

CHILDREN’S GUIDELINES

Our Sites are intended for general audiences and are not directed to children under 16. We do not knowingly collect Personal Information from children under 16. If you become aware that a child has provided us with Personal Information without parental consent, please contact us at privacy@koparibeauty.com. If we become aware that a child under 16 has provided us with Personal Information without parental consent, we will take reasonable steps to remove such information and terminate the child’s account.

HOW WE PROTECT YOUR PERSONAL INFORMATION

Kopari implements reasonable practices to protect your Personal Information from unauthorized access, use, disclosure, or destruction. No data transmission or electronic storage is infallible. Therefore, Kopari cannot guarantee or warrant the security of the Personal Information that you transmit to Kopari.

HOW LONG WE RETAIN INFORMATION

In general, we retain Personal Information as long as reasonably needed to achieve the purposes outlined in this Privacy Policy.  There are many factors that we use to determine how long Personal Information is retained, such as:

the purposes for which the Personal Information was collected, including to provide our products and services;
your marketing preferences and how you engage with our Brands;
any legal or regulatory requirements that apply to the Personal Information; and
whether the Personal Information may be relevant to us in protecting our own rights (e.g. applicable limitation periods).

WHAT CHOICES DO YOU HAVE OVER HOW YOUR INFORMATION IS USED?

In this section, we describe the rights and choices available to all users.

Access, Update or Delete Your Account Information - If you registered for an account with us, you may review, update or delete certain Personal Information in your account profile by logging into your account, editing your account and billing information or deleting your account in its entirety.
Opt Out of Marketing Communications - You may opt out of marketing-related emails by following the opt-out or unsubscribe instructions located at the bottom of the email. You may continue to receive service-related and other non-marketing emails (e.g., emails confirming your online orders). If you receive marketing text messages from us, you may opt out of receiving further marketing text messages from us by replying STOP to our marketing message.
Cookies - Most browsers let you remove and/or stop accepting cookies from the websites you visit. To do this, follow the instructions in your browser’s settings. For more information, see the section entitle “USE OF COOKIES AND OTHER TECHNOLOGIES.”
Do-Not-Track - Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.
Privacy Settings and Location Data - Users of our Sites can disable our access to their device’s precise geolocation in their electronic device settings. If you permitted Kopari to access your precises geolocation data, you may at anytime opt-out from further allowing Kopari to access your precises geolocation data by adjusting the permissions in your browser or device.
Choosing Not to Share Your Personal Information - We do not require you to register or provide Personal Information to view our Sites or access much of its content. However, there are certain instances where we need your information to provide you with certain services or provide you access to certain features of our Sites (e.g., to process your online orders). In addition, if you terminate your account or membership to one or more of our promotions, contests, sweepstakes, and rewards and loyalty programs, or if you choose not to join, you may not be able to benefit from the discounts, free sample, gifts, free shipping or other benefits offered to customers through such promotions, contests, sweepstakes, and rewards and loyalty programs.

CALIFORNIA RESIDENTS: YOUR CALIFORNIA PRIVACY RIGHTS

California residents have specific rights regarding their Personal Information as described below. These rights are subject to certain exceptions. When required, we will respond to most requests within 45 days, unless it is reasonably necessary for us to extend our response time.

· Right to Know About Personal Information That is Collected or Disclosed - You have the right under the California Consumer Privacy Act (“CCPA”) [DYR2] to request that we disclose certain information regarding our practices with respect to your Personal Information. If you submit a valid and verifiable request and we confirm your identity and/or authority to make the request, we will disclose to you any of the following at your direction:

§ The categories of Personal Information we have collected about you in the last 12 months.

§ The categories of sources for the Personal Information we have collected about you in the last 12 months.

§ Our business or commercial purpose for collecting Personal Information.

§ The categories of third parties with whom we share Personal Information.

§ The specific pieces of Personal Information we collected about you.

§ If we disclosed your Personal Information to a third party for a business purpose, a list of the Personal Information types that each category of recipient received.

· Right to Request Deletion of Personal Information - You have the right under the CCPA to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. If you submit a valid and verifiable request and we can confirm your identity and/or authority to make the request, we will delete all information that we are not allowed to maintain under applicable law.

· Right to Correct Inaccurate Personal Information - You have the right to request that we correct any inaccurate information that we have about you.

· How to Exercise the Above Rights - To exercise your rights described above, please submit a verifiable consumer request by clicking on the “Your Privacy Choices” link found on the footer of our website, contacting us by following the directions set forth in the section entitled “HOW TO CONTACT US.” You may make a verifiable consumer request no more than two times within a 12 month period. The verifiable request must:

§ Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative. Such verification process will involve you confirming at least three pieces of Personal Information we have collected about you, and will increase in scope in the event the nature of your request relates to the disclosure of sensitive Personal Information or the deletion of any Personal Information;

§ Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it; and

§ Include a statement that you “declare under penalty of perjury that you are the person about whom the Right to Know/Delete request has been made.”

· Right to Appoint an Authorized Agent – You are also permitted to designate an authorized agent to submit the above requests on your behalf. For an authorized agent to be verified, you must provide the authorized agent with signed, written permission to make such requests or a power of attorney. We may also follow up with you to verify your identity according to the above method before processing the authorized agent’s request.

· Right to Opt-Out of the Sale/Sharing of Personal Information – Our use of certain third-party analytic and functionality tools, including those relating to analytics and advertising, may be considers a “sale” or “sharing” of Personal Information under California law. You may have the right to direct us not to sell or share your Personal Information with third parties for cross-contextual advertising purposes. To exercise this right, please click on “Your Privacy Choices” which can also be found in the footer of our website and indicate your preference. You can also contact us by following the directions set forth in the section entitled “HOW TO CONTACT US” below. You may also opt out of the selling and sharing of your Personal Information by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (“GPC”) (on the browsers and/or browser extensions that support such a signal). To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use. Categories of Personal Information disclosed that may be considered “sale” / “sharing”: Identifiers, Internet or Other Electronic Network Activity, Geolocation Data, Inferences Drawn About Your Preferences and Commercial Information as further described in the section above entitled “WHAT PERSONAL INFORMATION WE COLLECT.” Categories of third parties to whom Personal Information was disclosed to that may be considered a “sale”/ “share” of Personal Information include without limitation service providers, vendors, business partners, social networks and affiliates as such categories are further defined in the section above entitled “SHARING OF PERSONAL INFORMATION.”

· Right to Limit Your Use of Sensitive Personal Information – You may have the right to limit how your Sensitive Personal Information is disclosed or shared with third parties. Company only uses or discloses Sensitive Personal Information for purposes that are reasonably related to the goods and services that you have purchased or asked us to provide you and our business customers. We may also use your Sensitive Personal Information for other lawful reasons as set forth in the CCPA. If we later decide to use your Sensitive Personal Information for other purposes, we will inform you of such decision prior to such use and will provide you with an opportunity to exercise your right to limit the use of your Sensitive Personal Information.

· Rights Related to Automated Decision-making and Profiling[DYR3] - You have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. We do not profile in a manner that would result in legal or similarly significant effects and as such do not offer this right. If we later decide to use your Personal Information for automated decision-making and profile purposes, we will inform you of such decision prior to such use and will provide you with an opportunity to exercise your right to opt out of such use.

· Right to Non-Discrimination for Exercising Privacy Rights - You may exercise your rights under the CCPA without discrimination.

· Notice of Financial Incentive - We may offer price discounts, coupons, services and other perks for members of our mailing and/or texting list, Kopari Clique and Ambassador Program (collectively “Programs”). In order to participate in such Programs, we may ask you to disclose certain Personal Information (e.g., your name, email address, and mailing address) and may share such information to our service providers who help administer our Programs. While membership to these Programs is optional (you must opt-in on our Sites and can terminate at any time by contacting us), the collection of Personal Information to create and maintain accounts and communications and to monitor and administer program-related activities, could be characterized as a “financial incentive” under the CCPA given that we provide member-only benefits. To the extent California law requires that a value be assigned to the Personal Information collected from such Programs, we value the Personal Information collected and used in connection to our Programs as the equivalent to our good-faith estimate of the cost of administering the relevant Program for which the information was collected, the details of which we maintain as a trade secret. This description is without waiver of any proprietary or business confidential information, and it does not constitute any representation with regard to generally accepted accounting principles or financial accounting standards.

· Direct Marketing and Do Not Track Signals - Under California’s “Shine the Light” law, California residents may request and obtain a notice once a year about the Personal Information we shared with other businesses for their own direct marketing purposes. Such a notice will include a list of the categories of Personal Information that were shared (if any) and the names and addresses of all third parties with which the Personal Information was shared (if any). The notice will cover the preceding calendar year. To obtain such a notice, please contact us as described below. In addition, under this law you are entitled to be advised how we handle “Do Not Track” browser signals. Kopari does not personally track its users over time and across third party websites to provide targeted advertising and therefore does not respond to Do Not Track (DNT) signals. However, some third party websites do keep track of your browsing activities when they serve you content, which enables them to tailor what they present to you. If you are visiting such websites, most web browsers (like Safari) allow you to set the DNT signal on your browser so third parties (particularly advertisers) know you do not want to be tracked.

NEVADA RESIDENTS: YOUR NEVADA PRIVACY RIGHTS

Nevada law (SB 220) requires website operators to provide a way for Nevada consumers to opt-out of the sale of certain information that the website operator may collect about them. Kopari does not sell your Personal Information to third parties as defined in Nevada law, and will not do so without providing you with notice and an opportunity to opt-out of such sale as required by law. If you have any questions regarding our data privacy practices or our compliance with Nevada data privacy law, please contact us via the methods listed under “HOW TO CONTACT US” below.

VIRIGINA RESIDENTS: YOUR VIRGINIA PRIVACY RIGHTS

Virginia residents have specific rights regarding their Personal Information as described below. These rights are subject to certain exceptions.

· Right to Access – You have the right to access your Personal Information and obtain a copy of it in a portable and readily using format.

· Right to Correct – You have the right to correct errors in your Personal Information.

· Right to Delete – You have the right to have your Personal Information deleted.

· Right to Opt Out – You have the right to opt out of behavioral advertising, automated profiling, and sales of Personal Information.

· Right to Non-Discrimination for Exercising Privacy Rights - You may exercise your rights under the Virginia Consumer Data Protection Act without discrimination.

· Right to Appeal – You may have a right to appeal our denial of any request above. We will respond to your appeal within the timeframe required by law, and provide a written explanation in support of our response and provide additional information as required by law.

CANADIAN RESIDENTS: YOUR CANADIAN PRIVACY RIGHTS.

Canadian residents have specific rights regarding their Personal Information as described below. These rights are subject to certain exceptions.

· Right to be Informed – While not explicitly referred to in the Personal Information Protection and Electronic Documents Act (“PIPEDA”) as a right to be informed, organizations must provide identified purposes for processing to individuals, either orally or in writing.

· Right to Access – Individuals have the right to request access to information relating to the existence, use, and disclosure of their Personal Information. Organizations must respond to an access request within a reasonable time frame and no later than 30 days from receipt. A response should be provided at minimal or no cost.

· Right to Correction – Individuals have the right to request organizations to correct inaccurate records of Personal Information. Corrections must also be passed downstream to any third parties.

· Right to Withdraw Consent – Individuals have the right to withdraw consent at any time, however, organizations may retain Personal Information for the period in which it is necessary to fulfill the purpose for which it was collected.

· Right to Erasure – The Office of the Privacy Commissioner of Canada (“OPC”) has taken the position that individuals should have the ability to remove information that they have posted online. It is suggested that PIPEDA currently includes this right in relation to the right to withdraw consent.

· Right to Lodge a Complaint – Individuals have the right to file a complaint with the OPC if they believe an organization is in violation of PIPEDA.

EUROPEAN ECONOMIC AREA AND UNITED KINGDOM (“EEA”) RESIDENTS: YOUR EEA PRIVACY RIGHTS.

Data protection laws in Europe and the United Kingdom require a “lawful basis” for processing “personal data” (as defined by GDPR). Our legal basis to process your personal data, includes without limitation:

· Necessity – We will process your personal data as necessary to perform our responsibilities under our contact with you (e.g., processing your order and delivering the products you purchase);

· Legitimate Interest – We will process your personal data when we have a legitimate interest in processing your personal data and these interests are not overridden by your rights and interests (e.g., communicating with you regarding changes to our Programs or Privacy Policy);

· Consent – If you provide us with your consent to perform a specific processing activity, we will process your personal data to perform such activity (e.g., sending you marketing emails);

· Legal Obligation – In some cases, we will process your personal data as necessary for compliance with our legal obligations (e.g., responding to a court order).

For further details on how we may process your personal data, please see the section entitled “HOW WE USE YOUR PERSONAL INFORMATION” above.

If you are in the EEA and certain requirements are fulfilled, you may have the following data protection rights:

· Right to Access - You have the right to request copies of your personal data from Kopari. We may charge you a small fee for this service.

· Right to Rectification - You have the right to request that Kopari correct any information you believe is inaccurate. You also have the right to request Kopari complete information you believe is incomplete.

· Right to Erasure - You have the right to request that Kopari erase your personal data, under certain conditions.

· Right to Restrict Processing - You have the right to request that Kopari restrict the processing of your personal data, under certain conditions.

· Right to Object to Processing - You have the right to object to Kopari’s processing of your personal data, under certain conditions.

· Right to Data Portability - You have the right to request that Kopari transfer the data that we have collected to another organization, or directly to you, under certain conditions.

· Right to Withdraw Consent - You also have the right to withdraw your consent at any time where Kopari relied on your consent to process your personal data.

You my exercise any of the above rights by selecting your preferences by clicking the link “Your Privacy Choices” on the footer of the website or contacting us via the methods listed under the section entitled “HOW TO CONTACT US” below. We will have one month to respond to you. Please note that we may ask you to verify your identity before responding to such requests.

You have the right to file a complaint regarding your Personal Information with a data protection authority, if you believe that the use or handling of your Personal Information does not comply with legal requirements. We would, however, appreciate the opportunity to address your concerns before you approach a data protection authority, and would welcome you directing an inquiry first to us by contacting us via the methods set forth in the section entitled “HOW TO CONTACT US.”

GEOGRAPHIC RESTRICTIONS

We may limit the availability of our Sites to any person or geographic area at any time. If you access our Sites from outside the United States, you do so at your own risk.

IF YOU ARE A USER ACCESSING OUR SITES FROM ANY OTHER COUNTRY WITH LAWS OR REGULATIONS GOVERNING PERSONAL INFORMATION COLLECTION, USE AND DISCLOSURE THAT DIFFER FROM THE LAWS OF THE UNITED STATES, PLEASE BE ADVISED THAT THROUGH YOUR CONTINUED USE OF OUR SITES, YOU ARE TRANSMITTING YOUR PERSONAL INFORMATION TO THE UNITED STATES AND YOU CONSENT TO THAT TRANSMISSION. ADDITIONALLY, YOU UNDERSTAND THAT YOUR PERSONAL INFORMATION MAY BE TRANSMITTED TO AND PROCESSED IN COUNTRIES (INCLUDING THE UNITED STATES) WHERE LAWS REGARDING PROCESSING PERSONAL INFORMATION MAY BE LESS STRINGENT THAN IN YOUR COUNTRY.

SMS/MMS MOBILE MESSAGING MARKETING PROGRAM

If you choose, you can provide your mobile phone number to receive text message alerts from us to receive product and/or event information, tips or promotions (the “SMS Program”). You agree that by providing your mobile phone number you expressly consent to receive automated marketing text messages from us to the mobile phone number provided. We will only use information you provide through the SMS Program to transmit your mobile messages and respond to you, if necessary. This includes, but is not limited to, sharing information with platform providers, phone companies, and other vendors and service providers who assist us in the delivery of mobile messages. Text messages are distributed via third party mobile network providers and, therefore, we cannot control certain factors relating to message delivery. Depending on the recipient’s mobile carrier, it may not be possible to transmit the text message to the recipient successfully; nor is content available on all carriers. We do not claim or guarantee availability or performance of the SMS Program’s services, including liability for transmission delays or message failures. WE DO NOT SELL, RENT, LOAN, TRADE, LEASE, OR OTHERWISE TRANSFER FOR PROFIT ANY PHONE NUMBERS OR CUSTOMER INFORMATION COLLECTED THROUGH THE SMS PROGRAM TO ANY THIRD PARTY. Nonetheless, we reserve the right at all times to disclose any information as necessary to satisfy any law, regulation or governmental request, to avoid liability, or to protect our rights or property. When you complete forms online or otherwise provide us information in connection with the SMS Program, you agree to provide accurate, complete, and true information. You agree not to use a false or misleading name or a name that you are not authorized to use. If, in our sole discretion, we believe that any such information is untrue, inaccurate, or incomplete, or you have opted into the SMS Program for an ulterior purpose, we may refuse you access to the SMS Program and pursue any appropriate legal remedies.

You can opt out from further text marketing communications by texting STOP to the SMS number used by Kopari, or its third-party service provider, to contact you.

CONTEST, PROMOTION OR SURVEY

Kopari and its preferred third-party service providers or business partners may offer sweepstakes, contests, promotions and surveys (each, a “Promotion”). Where we do this, we will use your Personal Information as set out in this Privacy Policy, or as otherwise notified to you. However, in certain cases, a third party’s privacy policy may apply to any Personal Information that you provide in connection with such Promotion. Before entering any Promotion, we encourage you to check who is operating the Promotion in question, and the terms, conditions, policies and rules that apply to it.

BREACH NOTIFICATION

In the event that we determine that a data security incident rising to the level of a breach has occurred, we will notify you as set forth in relevant laws.

CONSUMERS WITH DISABILITIES

To request this Privacy Policy in an alternative format, please contact us via the methods listed under “HOW TO CONTACT US” below.

MODIFICATIONS

Kopari reserves the right to update or modify this Privacy Policy at any time. Please check back from time to time so you are aware of any changes or updates to the Privacy Policy. We will indicate the Privacy Policy’s effective date on the first page of the Privacy Policy.

HOW TO CONTACT US

If you have any questions about this Privacy Policy, you can contact us at:

privacy@koparibeauty.com

7979 Ivanhoe Ave., Suite 240

La Jolla, CA 92037

Attn: Website Administrator

(833) 993-0054