Privacy Policy

FemmeLux Beauty ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our wholesale platform and use our services. Please read this Privacy Policy carefully. By accessing or using our platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the platform. We reserve the right to make changes to this Privacy Policy at any time. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

We collect information in several ways when you use our platform: **Personal Information You Provide** When you register for an account, place an order, or contact us, you may provide: • Name and contact information (email, phone number, address) • Business information (company name, tax ID, business license) • Payment information (credit card details, billing address) • Account credentials (username, password) • Communication preferences **Information Automatically Collected** When you access our platform, we automatically collect: • Device information (IP address, browser type, operating system) • Usage data (pages visited, time spent, click patterns) • Location data (based on IP address) • Cookies and similar tracking technologies **Information from Third Parties** We may receive information from: • Payment processors (transaction verification) • Business verification services • Marketing partners (with your consent) • Social media platforms (if you connect your accounts)

We use the information we collect for various purposes, including: **To Provide Our Services** • Process and fulfill your orders • Manage your account and preferences • Verify your business credentials • Communicate with you about orders and services • Provide customer support **To Improve Our Platform** • Analyze usage patterns and trends • Develop new features and services • Personalize your experience • Conduct research and analytics **For Marketing & Communications** • Send promotional emails and newsletters (with your consent) • Display relevant advertisements • Notify you about new products and special offers • Conduct surveys and collect feedback **For Legal & Security Purposes** • Comply with legal obligations • Enforce our terms and policies • Prevent fraud and unauthorized access • Protect our rights and property

We may share your information in the following circumstances: **Service Providers** We share information with third-party vendors who perform services on our behalf, including: • Payment processors • Shipping carriers • Email service providers • Analytics providers • Cloud hosting services These providers are contractually obligated to protect your information and use it only for the services they provide to us. **Brand Partners** When you purchase products from specific brands, we may share your order information with those brands to fulfill your order and provide customer service. **Business Transfers** If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. **Legal Requirements** We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas). **With Your Consent** We may share your information for other purposes with your explicit consent.

We use cookies and similar tracking technologies to collect and store information about your use of our platform. **Types of Cookies We Use** • **Essential Cookies**: Required for the platform to function properly. These enable core features like user authentication, shopping cart functionality, and security. • **Analytics Cookies**: Help us understand how visitors interact with our platform. We use this data to improve our services and user experience. • **Functional Cookies**: Remember your preferences and settings to provide a more personalized experience. • **Marketing Cookies**: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns. **Managing Cookies** Most web browsers allow you to control cookies through their settings. You can: • Block all cookies • Delete existing cookies • Allow cookies from specific websites • Be notified when a cookie is set Note that disabling certain cookies may affect the functionality of our platform. **Do Not Track** Some browsers include a "Do Not Track" feature. Our platform does not currently respond to "Do Not Track" signals.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. **Security Measures Include** • Encryption of data in transit (SSL/TLS) • Encryption of sensitive data at rest • Regular security assessments and audits • Access controls and authentication requirements • Employee training on data protection • Incident response procedures **Payment Security** All payment transactions are processed through PCI-DSS compliant payment processors. We do not store complete credit card numbers on our servers. **Your Responsibilities** You are responsible for: • Maintaining the confidentiality of your account credentials • Using strong, unique passwords • Logging out after using shared devices • Reporting any suspected unauthorized access While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including: • **Account Information**: Retained while your account is active and for a reasonable period afterward for legal and business purposes. • **Transaction Records**: Retained for at least 7 years to comply with tax and accounting requirements. • **Marketing Data**: Retained until you opt out or request deletion. • **Analytics Data**: Generally retained in aggregated, anonymized form indefinitely. When information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies and applicable law.

Depending on your location, you may have certain rights regarding your personal information: **Access & Portability** You have the right to request a copy of the personal information we hold about you in a portable format. **Correction** You can request that we correct any inaccurate or incomplete personal information. **Deletion** You may request that we delete your personal information, subject to certain exceptions (e.g., legal obligations). **Opt-Out** You can opt out of: • Marketing communications (via unsubscribe links or account settings) • Sale of personal information (for California residents) • Targeted advertising **Restriction** You may request that we restrict the processing of your personal information in certain circumstances. **Objection** You have the right to object to processing of your personal information for certain purposes. **To Exercise Your Rights** Contact us at privacy@femmelux.com or through your account settings. We will respond to your request within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA): **Right to Know** You can request information about the categories and specific pieces of personal information we have collected, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it. **Right to Delete** You can request deletion of your personal information, with certain exceptions. **Right to Opt-Out** You have the right to opt out of the "sale" of your personal information. While we do not sell personal information in the traditional sense, some data sharing for advertising purposes may constitute a "sale" under CCPA. **Right to Non-Discrimination** We will not discriminate against you for exercising your CCPA rights. **Authorized Agents** You may designate an authorized agent to make requests on your behalf. **Contact for CCPA Requests** Email: privacy@femmelux.com Phone: 1-800-FEMMELUX

Our platform is operated in the United States. If you are accessing our platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. **Data Transfer Mechanisms** When we transfer personal information internationally, we implement appropriate safeguards, including: • Standard contractual clauses approved by relevant authorities • Certification under recognized frameworks • Your explicit consent where required **EU/EEA Residents** If you are located in the European Union or European Economic Area, we process your data in accordance with the General Data Protection Regulation (GDPR). You have additional rights including the right to lodge a complaint with your local supervisory authority.

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information as quickly as possible. If you believe we may have collected information from a child under 18, please contact us immediately at privacy@femmelux.com.

Our platform may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to third-party services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you access through our platform. **Third-Party Services We Use** • Google Analytics (analytics) • Stripe (payment processing) • Various shipping carriers • Email marketing platforms Each of these services has its own privacy policy governing the use of your information.

If you have questions about this Privacy Policy or our privacy practices, please contact us: **FemmeLux Beauty** Privacy Team 123 Beauty Boulevard Wilmington, DE 19801 **Email**: privacy@femmelux.com **Phone**: 1-800-FEMMELUX **Online**: Use our Contact form at femmelux.com/contact **Data Protection Officer** For EU/EEA residents, our Data Protection Officer can be reached at dpo@femmelux.com. We will respond to all privacy-related inquiries within 30 days.