Kenvue Privacy Centre

Kenvue and its affiliated companies, act as the Controller of the Personal Information when you interact with the websites and applications operated by Kenvue, its subsidiaries and brands. We are strongly committed to protecting your privacy and to being transparent about how we collect, use, and disclose your Personal Information.

Personal Information, also referred to as personal data, is any information that can be used to distinguish or trace an individual’s identity. Sensitive personal information is personal information that if used or shared improperly, could cause serious harm to an individual. Such information requires extra protection, examples of this type of information can include: National Registration Identity Card (NRIC), information related to racial or ethnic origin, political opinions, religion or philosophical beliefs, health, sex life or sexual orientation, criminal background, or trade union membership, or biometric or genetic data for the purpose of uniquely identifying an individual (“Sensitive Personal Information”). Unless we specifically request it for a clear purpose, we ask that you not send us, and you do not disclose to us, any sensitive personal information on or through the Service or otherwise.

Uses of Personal Information

Below, we explain why we use your personal information, the types of information we use and the reasons for processing.

Please note, if deemed consent or a legitimate interest is not an adequate basis for collection and use in your country, we will use the relevant legal basis required under local data protection laws, such as explicit consent, vital interest or legal obligation.

Some information we ask for is mandatory because we need it for legal or contractual reasons. If you do not provide this information, we may not be able to process your request, for example, we might not be able to complete your order or enter into a contract with you.

Why we Collect Your Personal Information

We also disclose information collected through the Service, including information collected through passive technologies as described in the “Information We Collect Automatically” section of this Privacy Notice:

In addition, we may use and disclose your information as we believe to be necessary or appropriate: (a) to comply with legal process or Applicable Data Protection Laws which may include laws outside your country of residence; (b) as permitted by Applicable Data Protection Laws to respond to requests from public and government authorities, which may include authorities outside your country of residence; (c) to enforce our terms and conditions; and (d) to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others.

We may also use and disclose your information in other ways, after obtaining your consent to do so.

We may use and disclose information we collect automatically as described above, under “Automatic Information Collection and Use.” In addition, where allowed by Applicable Data Protection Laws, we may use and disclose information that is not in personally identifiable form for any purpose. If we combine information that is not in personally identifiable form with information that is identifiable (such as combining your name with your geographical location), we will treat the combined information as Personal Information as long as it is combined.

Use of Artificial Intelligence (AI) and Machine Learning (ML)

To improve our services and enhance user experience, we may use artificial intelligence (AI) and machine learning (ML) models to process your data. This processing helps us deliver smarter features, personalised experiences, and operational efficiencies.

We are committed to responsible AI practices. All AI/ML activities are subject to human review designed to ensure accuracy, fairness, and alignment with our ethical standards. We do not use AI/ML to make any decisions that produce legal or similarly significant effects (e.g., decisions that result in the provision or denial of financial or lending services, housing, insurance, education enrollment or opportunities, criminal justice, employment or independent contracting opportunities or compensation, healthcare services or access to essential goods or services). Importantly, we do not use Personal Information to train our AI/ML models. We apply privacy-by-design principles and implement safeguards such as data minimization, purpose limitation, and pseudonymization where appropriate.

Our processing of Personal Information for AI/ML purposes complies with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Where required, we obtain valid consent or rely on other lawful bases for processing, and we respect your rights to access, correct, or restrict the use of your Personal Information.

• You provide Personal Information to us through your use of our digital services, such as when you sign up for a newsletter, subscriptions, order processing, sweepstakes or other promotions, post on our Social Media Pages or product review pages, or contact customer service or any of our contact centres, and in the case of our health care professionals or partners, attend a meeting, conference, training or other event. You will be informed what Personal Information is required and what Personal Information is optional.

• When you take part in research studies, and market research studies, interviews or surveys, we will receive aggregate personal information.

• If we are engaged with you in a contractual relationship for the provision of services, you provide us with information during day-to-day interactions with our sales representatives.

If you share details with us—like signing up for a newsletter or making a purchase—we may combine that with other information we already have about you from across Kenvue brands, both online and offline. This can include things like your purchase history, data collected through cookies or other tracking technologies (see Information we collect automatically for details about use of tracking technologies on the Services). We may also combine it with information from other sources, such as publicly available data (including your public social media profiles) or trusted third-party providers.

We understand that in certain situations, you may share personal details about someone else. We trust that you’ve got their permission to do so. We’ll treat this information with care and process such information in line with this Privacy Notice.

Information we collect automatically

As you use our websites or apps, we and our technology and advertising partners may collect data automatically using cookies and similar technologies (like web beacons, gifs, pixels, and tags). For a list of third-party advertising partners that we may share this data with or that may collect information automatically when you are using our websites and apps, please see our section on Third Party Data Sharing. To understand how this data may be used for the purposes of Personalised Advertising, please refer to our section on Personalised Advertising.

These technologies allow us and our technology and advertising partners to collect information like time spent on the Service, pages visited, and language preferences and may process data such as session and device data (device type and identifier, device operating system, browser type, IP address) to establish approximate location for security purposes, display information more effectively, and provide the services outlined throughout this section. Cookies and similar tracking technologies may also be used to measure performance of the Service, facilitate navigation, personalise your experience while using the Service, and to provide personalised advertising to you on other websites.

This type of data may not always reveal your specific identity or may not directly relate to you and is therefore not always considered to be Personal Information. If we combine such information with Personal Information, we will treat the combined information as Personal Information for as long as it is combined.

Except where allowed by applicable law, we place cookies and similar tracking technologies after having received your consent through the cookie banner or preference centre on our Services for the purposes described throughout this section.

What are these technologies?

Cookies

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you. Cookies set by us are called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting. We may use both first and third-party cookies on our websites.

Pixel, Tags, Web Beacons, Clear Gifs, or Other Similar Technologies

Pixel, tags, web beacons and clear gifs are other types of small, invisible technologies often implemented on websites and in emails designed to collect information about your behaviours and interactions with the websites or emails. We may utilize pixels, tags, web beacons and clear gifs both on certain aspects of the Services and in HTML-formatted email messages to you for the purposes of, among other things, measuring the success of our marketing campaigns, compiling statistics about Service usage, tracking the activities of users of the Service and email recipients, and enabling us to provide personalised advertising to you on other websites.

For the remainder of this section, “cookies and similar tracking technologies” will be collectively referred to as “Cookies”.

Categories of Cookies and Their Use

Below outlines the types of cookies we may use, how we classify them, and their descriptions. You’ll also find these categories and descriptions within the cookie preference centre on our Services, which includes a list of the first- and third-party cookies used on the specific Kenvue brand Service you’re visiting.

For information on how to manage your cookie preferences, please see the Choice section under Personalised Advertising.

Links To Other Websites or Online Services

Our brand websites may contain links or references to other websites or online services. Please note that we don’t control how those other sites use cookies for other websites and online services, and this Privacy Notice doesn’t apply to them. If you visit those sites, we recommend reviewing their privacy policies. We are not responsible for the information practices of such other websites and online services.

Personalised Advertising

We may use Targeting cookies to personalise advertisements that may be of interest to you based on the data automatically collected by your access to and use of the Service. This means that advertisements can be tailored to your preferences based on your browsing history and interactions on our Services. You may also receive personalised ads based on your email address or phone number, if you have provided those to us for marketing purposes.

Data collected through targeting cookies (like IP address or device ID) or information you provide (such as email or phone number) may be shared with third-party advertising partners like Google, Meta, and The Trade Desk. Please see our section on Third Party Data Sharing for a list of third-party advertising partners we may share your data with and links to their data practices.

We and our third-party advertising partners may use the data outlined above in conjunction with data collected automatically through Targeting cookies about your online behaviours and activities across other websites over time, and data you may have provided to these partners by using their services (e.g., email address, phone number, etc.) to:

• Recognise you across the devices you use (such as a mobile phone and a laptop)

• Build a profile based on the online actions you take across other websites over time

• Provide you with more relevant advertising on different websites

• Create audiences that resemble your online behaviours or activities (e.g., modeled audiences, lookalike audiences)

• Manage and measure the effectiveness of our advertising

By accepting Targeting cookies and providing your email address and phone number to us for marketing purposes, you agree to your data being used by us or shared with our third-party advertising partners (e.g., Google, Meta, The Trade Desk) for ad personalization as described above.

Managing Your Preferences

There are different ways for you to manage your cookie preferences, as well as how we use your data for personalised advertising – through this notice, through our Services, through your browser or a universal opt-out mechanism, and through advertising industry tools. You can find more information about these options below. Keep in mind that if you refuse or reject certain categories of cookies, you may experience some inconvenience in your use of the Service.

Through This Notice

If you want to opt out of personalised ads that use information you’ve shared with us (like your email address or phone number), please visit the Contacting Us section in this Privacy Notice for instructions.

Through Our Websites

You can manage or change your cookie settings for our Services at any time by clicking on the Cookie Settings button within the footer of the Kenvue brand Service you’re visiting. Please note that Strictly Necessary cookies are required for the proper functioning of our Services and therefore cannot be toggled off in the cookie preference centre on our Services.

Through Your Browser

You can manage your cookie preferences through your browser by following your browser’s instructions on how to reject cookies or by using a universal opt-out mechanism.

Some browsers and browser extensions allow users to send a signal indicating their privacy preferences when they visit a company’s website, such as whether or not they want their Personal Information to be shared with third parties. This is sometimes referred to as Global Privacy Control (GPC). For details, including how to enable GPC in your browser, visit https://globalprivacycontrol.org/.

Please note:

• Not all websites or services currently recognise these signals, as there is no universally accepted standard for how they should be interpreted.

• To help ensure your opt out preferences are effective:

  • You may need to opt out separately on each browser and device you use.

  • Your browser may need to be set to accept cookies, as some opt-out tools rely on opt out cookies to remember your settings.

Advertising Industry Opt Outs

Many third-party advertising companies (like The Trade Desk) are members of the industry-wide Unified ID 2.0 (UID2) programme. As part of its services, Unified ID 2.0 provides consumers the ability to opt out of personalised ads if your email or phone number has been provided to companies that participate in the UID2 programme, which they may refer to as “targeted advertising” or “interest-based advertising”.

Please note that the solutions provided by this programme may vary based on country, by device, or based on how you access content with personalised advertisements (e.g., browser, mobile app, etc.).

To opt-out of Unified ID 2.0 for your region click here.

Even if you choose to opt out of personalised ads from members of the Unified ID 2.0, you may still see other types of ads online. Opting out through programmes like the Unified ID 2.0 only affects ads from companies that participate in those programmes. You might still receive personalised ads from companies that aren’t part of this programme.

Also, keep in mind:

• If you delete your cookies, use a different browser or device, or block cookies altogether, your opt-out settings may no longer work as some opt-out tools rely on opt out cookies to remember your settings.

• Opting out on a mobile device doesn’t apply to ads you see in your browser—even on the same device. You’ll need to opt out separately for each device and browser you use.

• We are not responsible for the effectiveness and compliance of third-party opt-out tools, or whether those companies follow their own rules.

Reducing Personalised Ads on Mobile Devices

You can also take further action to limit personalised ads on your mobile device by:

• Declining data access requests when installing apps.

• Adjusting your ad tracking settings in your device’s privacy settings.

You’ll Still See Ads – Just Different Ones

Even if you opt out of personalised ads, you’ll still see contextual ads. These ads are based on the content of the website or app you’re using, not your browsing history. For example, if you’re reading an article about skincare, you might see an ad for one of our skin health brands because it’s relevant to the topic.

We may share your Personal Information with affiliates and third parties, which may involve cross-border data transfers, including to the United States. For more details, see the section "International Data Transfer".

Types of Third Party to Whom We Disclose Personal Information:

Kenvue Affiliates: We may share your Personal Information with our affiliates for the purposes described in this Privacy Notice. A list of our affiliates is available at Kenvue Inc. - Financials & reports - SEC filings https://investors.kenvue.com/financials-reports/sec-filings/default.aspx

Third-Party Co-Branding and Co-Marketing Partners: Sometimes we work with partners on co-branded or co-marketed promotions. In these cases, we may share your information with them.

Third-Party Service Providers: We may share your Personal Information with service providers for website hosting, mobile application hosting, data analysis, payment processing, order fulfillment, infrastructure provision, IT services, customer service, email and direct mail delivery, auditing, and other services.

Third-Party Advertising Partners: We may share your Personal Information with the third-party advertising partners outlined below (e.g., social media platforms, advertising platforms, publishers) to show you relevant ads, measure how effective our ads are, and improve our marketing. Please note that the list of partners is subject to change.

Vendors: We may share your Personal Information with vendors involved in organising local and international training and events, such as venues and transportation companies.

Other Situations:

Business Transactions: In the event of a reorganisation, merger, divestiture, acquisition, joint venture, assignment, transfer, or other disposition of our business, assets, or stock, we may share your data with the involved third parties.

Legal Compliance: We may share your information to enforce our terms and conditions, comply with legal processes or Applicable Data Protection Laws s (including those outside your country of residence), and respond to requests from public or government authorities (including those outside your country of residence).

Data Analyses

• Research and Collaboration Partners: We may share your Personal Information with partners for clinical and medical research, collaboration, or healthcare technology innovation and development.

• Healthcare Providers and Health Care Professionals: We may share your Personal Information with healthcare providers and professionals.

• Posting and Social Sharing: By using our services, you may disclose Personal Information on profile pages, blogs, product reviews, and other services, including our Social Media Pages. Any information you post may become public and available to other users and the general public.

You have certain rights regarding your Personal Information, which vary based on our reasons for processing it and the laws in your country. Some rights may have exceptions. Depending on these factors, you may have the following rights:

• Review, correct, update, restrict, delete, or object to the processing of your Personal Information

• Withdraw your consent to us processing your personal information for direct marketing purposes

• Opt-out of automated individual decision-making or profiling

• Obtain more information about the Personal Information we have collected, used or shared.

• Receive an electronic copy of your Personal Information in a machine-readable format for transmission to another company.

• Lodge a complaint with your local data protection authority (only applicable in certain jurisdictions).

You may contact the authority responsible for data protection in your country or region.

How you can opt out from receiving direct marketing communications from us

We give you choices regarding our use and disclosure of your personal information for direct marketing communications through email, text, or mail. If you no longer want to receive marketing communications from us on a going-forward basis, you may opt out of receiving them by contacting us as described in the Contacting Us section. In your request to us, please provide your name, identify the form(s) of marketing communications that you no longer wish to receive, and include the address(es) to which they are sent. For example, if you no longer wish to receive marketing emails or direct mail from us, tell us that, and provide your name and email or postal address. If available, you may also opt out of receiving marketing communications from us by visiting the Service to update your online profile. In addition, you may opt out of receiving marketing emails from us by following the unsubscribe instructions provided in any such message.

We will seek to comply with your request(s) as soon as reasonably practicable. Please note that if you opt out as described above, we will not be able to remove your personal information from the databases of our affiliates with which we have already shared your information (i.e., as of the date that we implement your optout request). Please also note that if you opt out of receiving marketing-related messages from us, we may still send you important transactional and administrative messages, from which you cannot opt out.

We will retain your Personal Information for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with Applicable Data Protection Laws.

The criteria used to determine our retention periods include:

1. the length of time we have an ongoing relationship with you and provide a service to you;

2. whether there is a legal/regulatory obligation to which we are subject; and

3. whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).

We use a reasonable mix of technical, organisational, and administrative safeguards to keep your personal information safe from unauthorized access, changes, disclosure, or destruction, as well as accidental loss or misuse. These protections can include things like encryption, secure networks, access controls, staff training, and physical security where needed.

We consider how sensitive your information is and the potential risks to decide the right level of protection. However, no system or method of storing or sending data can be 100% foolproof. You can help keep your information safe by protecting your devices and login details. If you think your account or interaction with us is no longer secure (for example, if you suspect your account has been compromised), please contact us immediately using the details in the Contacting Us section.

This Service may contain links to sites of third parties. This Privacy Notice does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any site or online service (including, without limitation, any application) that is available through this Service or to which this Service contains a link. The availability of, or inclusion of a link to, any such site or property on the Service does not imply endorsement of it by us or by our affiliates. When you choose to visit or use third-party websites or services, please note that this Privacy Notice no longer applies. We recommend reviewing the privacy notice of the third party to understand how your information may be collected and used.

Your Personal Information may be stored and processed in any country where we have facilities or service providers. By the use of our services or by providing consent to us (where required by law), your information may be transferred to countries outside of your country of residence. Nonetheless, appropriate contractual and other measures are in place, in accordance with local requirements or Applicable Data Protection Laws to protect Personal Information. Some non-European Economic Area (EEA) countries are recognised by the European Commission as providing an according to EEA standards. The full list of these countries is available here. For Russia, please refer to the list published by the authorized data protection authority. according to EEA standards. The full list of these countries is available here. For Russia, please refer to the list published by the authorized data protection authority.

For transfers to countries not deemed adequate, we have ensured that adequate measures are in place, including by ensuring that the recipient is bound by Standard Contractual Clauses to protect your Personal Information. You may obtain a copy of these measures by contacting us or, where applicable, our Data Protection Officer in accordance with the Contacting us section.

Information about children and teens:

Our platforms are designed primarily for adult users. We do not intentionally collect or sell personal information from children, as defined by applicable laws. We encourage adults using our platforms to refrain from sharing any information about children unless necessary.

In instances where our platform is accessed by younger users, we may seek parental or guardian consent when required by law. Additionally, we may utilize your data to verify age and ensure compliance with legal age restrictions.

We also recommend that parents or guardians jointly discuss with children under their guardianship about internet use as well as the information they disclose to the site.

We may change this Privacy Notice from time to time. Any changes will become effective when we post the revised Privacy Notice on the digital services (apps) and websites. We will attempt to notify you by email or by posting a pop-up banner on the Service when we make any material changes to this Privacy Notice. Your use of the Service following these changes means that you accept the revised Privacy Notice. We recommend that you regularly review this Privacy Notice.

JOHNSON & JOHNSON PTE LTD, located at 2 SCIENCE PARK DRIVE #06-01 ASCENT SINGAPORE SCIENCE PARK 1. SINGAPORE 118222 and is the company responsible for the collection, use, and disclosure of Personal Information under this Privacy Notice.

If you are located in Singapore and would like to exercise your data privacy rights (as described in the “Your Privacy Rights” section above), please submit a privacy request here.

For any other questions about this Privacy Policy, please email us at: asiapacificprivacy@kenvue.com or you can send a mail to us for any question or privacy rights request at: 2 SCIENCE PARK DRIVE #06-01 ASCENT SINGAPORE SCIENCE PARK 1. SINGAPORE 118222