Kenvue Privacy Center

Kenvue Brands LLC and its affiliated companies, (hereinafter “Kenvue”, “we”, “us”, or “our”) act as the Controller of the Personal Information when you interact with the websites and applications operated by Kenvue, its subsidiaries and brands. We are strongly committed to protecting your privacy and to being transparent about how we collect, use, and disclose your Personal Information.

Personal information, also referred to as personal data, is any information that can be used to distinguish or trace an individual’s identity. Sensitive personal information is information that requires extra protection, examples of this type of information can include: Social Security numbers, information related to racial or ethnic origin, political opinions, religion or philosophical beliefs, health, sex life or sexual orientation, criminal background, or trade union membership, or biometric or genetic data for the purpose of uniquely identifying an individual. Unless we specifically request it for a clear purpose, we ask that you not send us, and you do not disclose to us, any sensitive personal information on or through the Service or otherwise.

As you use our Service, we may gather health-related insights from the information you provide. We'll handle this data as outlined in our Privacy Notice and CHD Privacy Notice.

We and our service providers collect Personal Information that you provide to us voluntarily, or that we collect automatically or that we receive indirectly from third parties we have a relationship with. In this section, we explain the collection of information you provide to us and have included a chart to understand the types of data we collect from you, how we collect this information, and for what purposes.

Information you provide to us voluntarily

• When you provide Personal Information to us through your use of our digital services, such as when you sign up for a newsletter, subscriptions, order processing, sweepstakes or other promotions, post on our Social Media Pages or product review pages, or contact customer service or any of our contact centers, and in the case of our health care professionals or partners, attend a meeting, conference, training or other event. You will be informed what Personal Information is required and what Personal Information is optional.

• When you take part in research studies, and market research studies, interviews or surveys, in which we will receive aggregate information

• When we are engaged with you in a contractual relationship for the provision of services, and you provide us with information during day-to-day interactions with our sales representatives

• When you access or use our Services

If you share details with us—like signing up for a newsletter or making a purchase—we may combine that with other information we already have about you from across Kenvue brands, both online and offline. This can include things like your purchase history, data collected through cookies or other tracking technologies (see “Information we collect automatically” for details about use of tracking technologies on the Services). We may also combine it with information from other sources, such as publicly available data (including your public social media profiles) or trusted third-party providers.

We understand that in certain situations, you may share personal details about someone else. We trust that you’ve got their permission to do so. We’ll treat this information with care and process such information in line with this Privacy Notice.

Information we collect automatically

As you use our websites or apps, we and our technology and advertising partners may collect data automatically using cookies and similar technologies (like web beacons, gifs, pixels, and tags). For a list of third-party advertising partners that we may share this data with or that may collect information automatically when you're using our websites and apps, please see our section on Third Party Data Sharing. To understand how this data may be used for the purposes of Personalized Advertising, please refer to our section on Personalized Advertising.

These technologies allow us and our technology and advertising partners to collect information like time spent on the Service, pages visited, and language preferences and may process data such as session and device data (device type and identifier, device operating system, browser type, IP address) to establish approximate location for security purposes, display information more effectively, and provide the services outlined throughout this section. Cookies and similar tracking technologies may also be used to measure performance of the Service, facilitate navigation, personalize your experience while using the Service, and to provide personalized advertising to you on other websites.

This type of data may not always reveal your specific identity or may not directly relate to you and is therefore not always considered to be Personal Information. If we combine such information with Personal Information, we will treat the combined information as Personal Information for as long as it is combined.

Except where allowed by applicable law, we place cookies and similar tracking technologies after having received your consent through the cookie banner or preference center on our websites Services for the purposes described throughout this section.

What are these technologies?

Cookies

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you. Cookies set by us are called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting. We may use both first and third-party cookies on our websites.

Pixel, Tags, Web Beacons, Clear Gifs, or Other Similar Technologies

Pixel, tags, web beacons and clear gifs are other types of small, invisible technologies often implemented on websites and in emails designed to collect information about your behaviors and interactions with the websites or emails. We may utilize pixels, tags, web beacons and clear gifs both on certain aspects of the Services and in HTML-formatted email messages to you for the purposes of, among other things, measuring the success of our marketing campaigns, compiling statistics about Service usage, tracking the activities of users of the Service and email recipients, and enabling us to provide personalized advertising to you on other websites.

For the remainder of this section, “cookies and similar tracking technologies” will be collectively referred to as “Cookies”.

Categories of Cookies and Their Use

Below outlines the types of cookies we may use, how we classify them, and their descriptions. You’ll also find these categories and descriptions within the cookie preference center in the links sections of our Services, which includes a list of the first- and third-party cookies used on the specific Kenvue brand Service you’re visiting.

• Strictly Necessary Cookies

These cookies are necessary for the Service to function. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms.

• Performance Cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our Services. They help us to know which pages are the most and least popular and see how visitors move around the Services. If you do not allow these cookies we will not know when you have visited our Services and will not be able to monitor its performance.

• Functional Cookies

These cookies enable the Services to provide enhanced functionality and personalization. They may be set by us or by third party providers whose services we have added to our pages.

• Targeting Cookies

These cookies may be set through our Service by us or our third-party advertising partners. They may be used by those partners to build a profile of your interests by tracking your online activities and browsing behaviors across websites over time and show you relevant advertisements on other sites. For more information about the use of data for personalized advertising, please refer to “Personalized Advertising” section.

• Media Cookies

These cookies are set by a range of media services that we have added to the Services to enable the display of media content, such as embedded videos. Some of these cookies are necessary for the proper display of the media content. Some media services also place cookies that are capable of tracking your usage of the media service (e.g., what videos you have watched) and building up a profile of your interests. This may impact the content and messages you see on other websites you visit.

Please note that Google may automatically deploy YouTube cookies outside of our control. To find out how to manage Google and YouTube preferences and cookies, please visit https://policies.google.com/technologies/cookies#how-google-uses-cookies.

For information on how to manage your cookie preferences, please see the “Choice” section under “Personalized Advertising”.

Links To Other Websites or Online Services

Our brand websites may contain links or references to other websites or online services. Please note that we don’t control how those other sites use cookies of other websites and online services, and this Privacy Notice doesn’t apply to them. If you visit those sites, we recommend reviewing their privacy policies. We are not responsible for the information practices of such other websites and online services.

Personalized Advertising

We may use Targeting cookies to personalize advertisements that may be of interest to you based on the data automatically collected by your access to and use of the Service. This means that advertisements can be tailored to your preferences based on your browsing history and interactions on our Services. You may also receive personalized ads based on your email address or phone number, if you have provided those to us for marketing purposes.

Data collected through targeting cookies (like IP address or device ID) or information you provide (such as email or phone number) may be shared with third-party advertising partners like Google, Meta, Amazon, and The Trade Desk. Please see our section on “Third Party Data Sharing” for a list of third-party advertising partners we may share your data with and links to their data practices.

We and our third-party advertising partners may use the data outlined above in conjunction with data collected automatically through Targeting cookies about your online behaviors and activities across other websites over time, and data you may have provided to these partners by using their services (e.g., email address, phone number, etc.)to:

• Recognize you across the devices you use (such as a mobile phone and a laptop)

• Build a profile based on the online actions you take across other websites over time

• Provide you with more relevant advertising on different websites

• Create audiences that resemble your online behaviors or activities (e.g., modeled audiences, lookalike audiences)

• Manage and measure the effectiveness of our advertising

By accepting Targeting cookies and providing your email address and phone number to us for marketing purposes, you agree to your data being used by us or shared with our third-party advertising partners (e.g., Google, Meta, Amazon, The Trade Desk) for ad personalization as described above.

Choice

There are different ways for you to manage your cookie preferences, as well as how we use your data for personalized advertising – through this notice, through our Services, through your browser or a universal opt-out mechanism, and through advertising industry tools. You can find more information about these options below. Keep in mind that if you refuse or reject certain categories of cookies, you may experience some inconvenience in your use of the Service.

Through This Notice

If you want to opt out of personalized ads that use information you’ve shared with us (like your email address or phone number), please visit the “Contacting Us” section in this Privacy Notice for instructions.

Through Our Websites

You can manage or change your cookie settings for our Services at any time by clicking on the “Cookie Settings” button within the Kenvue brand Service you’re visiting. Please note that Strictly Necessary cookies are required for the proper functioning of our Services and therefore cannot be toggled off in the cookie preference center on our Services.

Through Your Browser

You can manage your cookie preferences through your browser by following your browser’s instructions on how to reject cookies or by using a universal opt-out mechanism.

Some browsers and browser extensions allow users to send a signal indicating their privacy preferences when they visit a company’s website, such as whether or not they want their Personal Information to be shared with third parties. This is sometimes referred to as a universal opt-out mechanism or Global Privacy Control (GPC). For details, including how to enable GPC in your browser, visit https://globalprivacycontrol.org/.

Please note:

• Not all websites or services currently recognize these signals, as there is no universally accepted standard for how they should be interpreted.

• To help ensure your opt out preferences are effective:

  • You may need to opt out separately on each browser and device you use.

  • Your browser may need to be set to accept cookies, as some opt-out tools rely on opt out cookies to remember your settings.

• Kenvue websites do not currently take any action when it receives a Do Not Track request. For details on Do Not Track, visit www.donottrack.us

Advertising Industry Opt Outs

Many third-party advertising companies (like Google, Meta, Amazon, The Trade Desk) are members of the organizations outlined below, which broadly help support consumer choice for personalized ads, which they may refer to as “interest-based advertising” or “online advertising”.

Please note that the solutions provided by these organizations may vary based on country, by device, or based on how you access content with personalized advertisements (e.g., browser, mobile app, etc.).

For the U.S., to exercise choice with respect to personalized advertising, you can utilize the opt-out mechanisms provided by the Digital Advertising Alliance (“DAA”) by clicking here (for browsers) or here (for app-based opt-outs).

The Network Advertising Initiative (“NAI”) also provides consumers with information on how to opt out of personalized ads, including certain personalized ads delivered by NAI members. To learn more, please visit http://www.networkadvertising.org/choices/.

To opt-out of Unified ID 2.0 globally click here.

Even if you choose to opt out of personalized ads via the DAA or NAI, you may still see other types of ads online. Opting out through organizations like the DAA or NAI only affects ads from companies that participate in those programs. You might still receive personalized ads from companies that aren’t part of these groups.

Also, keep in mind:

• If you delete your cookies, use a different browser or device, or block cookies altogether, your opt-out settings may no longer work as some opt-out tools rely on opt out cookies to remember your settings.

• Opting out on a mobile device doesn’t apply to ads you see in your browser—even on the same device. You’ll need to opt out separately for each device and browser you use.

• We are not responsible for the effectiveness and compliance of third-party opt-out tools, or whether those companies follow their own rules.

Reducing Personalized Ads on Mobile Devices

You can also take further action to limit personalized ads on your mobile device by:

• Declining data access requests when installing apps.

• Adjusting your ad tracking settings in your device’s privacy settings.

You’ll Still See Ads – Just Different Ones

Even if you opt out of personalized ads, you’ll still see contextual ads. These ads are based on the content of the website or app you’re using—not your browsing history. For example, if you’re reading an article about skincare, you might see an ad for one of our skin health brands because it’s relevant to the topic.

Some information we ask for is mandatory because we need it for legal or contractual reasons. If you do not provide this information, we may not be able to process your request, for example, we might not be able to complete your order or enter into a contract with you.

Uses of Personal Information

Below, we explain why we use your personal information, the types of information we use and the reasons for processing.

Please note, if legitimate interest is not an adequate basis for collection and use in your country, we will use the relevant legal basis required under local data protection laws, such as consent or legal obligation.

Why we Collect Your Personal Information

We also disclose information collected through the Service, including information collected through passive technologies as described in the “Information We Collect Automatically” section of this Privacy Notice:

In addition, we may use and disclose your information as we believe to be necessary or appropriate: (a) to comply with legal process or Applicable Data Protection Laws which may include laws outside your country of residence; (b) as permitted by Applicable Data Protection Laws to respond to requests from public and government authorities, which may include authorities outside your country of residence; (c) to enforce our terms and conditions; and (d) to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others.

We may also use and disclose your information in other ways, after obtaining your consent to do so.

We may use and disclose information we collect automatically as described above, under “Automatic Information Collection and Use.” In addition, where allowed by Applicable Data Protection Laws, we may use and disclose information that is not in personally identifiable form for any purpose. If we combine information that is not in personally identifiable form with information that is identifiable (such as combining your name with your geographical location), we will treat the combined information as personal information as long as it is combined.

Some information we ask for is mandatory because we need it for legal or contractual reasons. If you do not provide this information, we may not be able to process your request, for example, we might not be able to complete your order or enter into a contract with you.

Use of De-Identified and Pseudonymized Data

We may process data that has been de-identified or pseudonymized in accordance with applicable U.S. State data privacy laws. This means personal data that has been changed so it can’t be linked to a specific person—unless extra information is added, and that extra information is kept separate and protected.

We take reasonable measures to ensure that such data cannot be associated with an individual. We affirmatively commit that such data will not be used, either alone or in combination with other datasets, to attempt to reidentify any individual.

Use of Artificial Intelligence (AI) and Machine Learning (ML)

To improve our services and enhance user experience, we may process data you provide or generate—such as your interactions with our website or services—to support the development and refinement of our artificial intelligence (AI) and machine learning (ML) models. This processing helps us deliver smarter features, personalized experiences, and operational efficiencies.

We are committed to responsible AI practices. All AI/ML activities are subject to human review designed to ensure accuracy, fairness, and alignment with our ethical standards. We do not use AI/ML to make any decisions that produce legal or similarly significant effects (e.g., decisions that result in the provision or denial of financial or lending services, housing, insurance, education enrollment or opportunities, criminal justice, employment or independent contracting opportunities or compensation, healthcare services or access to essential goods or services). Importantly, we do not use Personal Information to train our AI/ML models. We apply privacy-by-design principles and implement safeguards such as data minimization, purpose limitation, and pseudonymization where appropriate.

Our processing of Personal Information for AI/ML purposes complies with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Where required, we obtain valid consent or rely on other lawful bases for processing, and we respect your rights to access, correct, or restrict the use of your Personal Information.

Types of Third Party to Whom We Disclose Personal Information:

Kenvue Affiliates: We may share your Personal Information with our affiliates for the purposes described in this Privacy Notice. A list of our affiliates is available at Kenvue Inc. - Financials & reports - SEC filings https://investors.kenvue.com/financials-reports/sec-filings/default.aspx

Third-Party Co-Branding and Co-Marketing Partners: Sometimes we work with partners on co-branded or co-marketed promotions. In these cases, we may share your information with them.

Third-Party Service Providers: We may share your Personal Information with service providers for website hosting, mobile application hosting, data analysis, payment processing, order fulfillment, infrastructure provision, IT services, customer service, email and direct mail delivery, auditing, and other services.

Third-Party Advertising Partners:

We may share your Personal Information with the third-party advertising partners outlined below (e.g., social media platforms, advertising platforms, publishers) to show you relevant ads, measure how effective our ads are, and improve our marketing. Please note that the list of partners is subject to change.

Vendors: We may share your Personal Information with vendors involved in organizing local and international training and events, such as venues and transportation companies.

Other Situations:

Business Transactions: In the event of a reorganization, merger, divestiture, acquisition, joint venture, assignment, transfer, or other disposition of our business, assets, or stock, we may share your data with the involved third parties.

Legal Compliance: We may share your information to enforce our terms and conditions, comply with legal processes or Applicable Data Protection Laws s (including those outside your country of residence), and respond to requests from public or government authorities (including those outside your country of residence).

Data Analyses

• Research and Collaboration Partners: We may share your Personal Information with partners for clinical and medical research, collaboration, or healthcare technology innovation and development.

• Healthcare Providers and Health Care Professionals: We may share your Personal Information with healthcare providers and professionals.

• Posting and Social Sharing: By using our services, you may disclose Personal Information on profile pages, blogs, product reviews, and other services, including our Social Media Pages. Any information you post may become public and available to other users and the general public.

You may exercise your privacy rights applicable to you under the relevant US State Privacy Law by clicking here or contacting us as described in the “Contacting Us” section below. We’ll do our best to honor your request, but in some cases, we may need to apply certain limits or requirements if allowed or required by law. If available, you can visit the Service to update your online profile. We provide detailed information about these rights in section I in the State Supplemental Privacy Notice Section.

How you can opt out from receiving direct marketing communications from us

We give you choices regarding our use and disclosure of your personal information for direct marketing communications through email, text, or mail. If you no longer want to receive marketing communications from us on a going-forward basis, you may opt out of receiving them by contacting us as described in the “Contacting Us” section. In your request to us, please provide your name, identify the form(s) of marketing communications that you no longer wish to receive, and include the address(es) to which they are sent. For example, if you no longer wish to receive marketing emails or direct mail from us, tell us that, and provide your name and email or postal address. If available, you may also opt out of receiving marketing communications from us by visiting the Service to update your online profile. In addition, you may opt out of receiving marketing emails from us by following the unsubscribe instructions provided in any such message.

We will seek to comply with your request(s) as soon as reasonably practicable. Please note that if you opt out as described above, we will not be able to remove your personal information from the databases of our affiliates with which we have already shared your information (i.e., as of the date that we implement your optout request). Please also note that if you opt out of receiving marketing-related messages from us, we may still send you important transactional and administrative messages, from which you cannot opt out.

How to Make a Request

Please follow the instructions in the Contacting Us section, which vary based on the country where the services are provided. If you are using our online services, you can also log into your account to update your profile or follow instructions on how to unsubscribe in any email you receive from us.

We will retain your Personal Information for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with Applicable Data Protection Laws .  

The criteria used to determine our retention periods include:  

(i) the length of time we have an ongoing relationship with you and provide a service to you;  

(ii) whether there is a legal/regulatory obligation to which we are subject; and  

(iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).

Notice for users of Neutrogena Skin360:

We may process facial images to support certain virtual experiences, but do not use these images to identify any particular customer. Nevertheless, we will not use or save these facial images, nor any potential biometric data, on any server, system or location outside of the device you use to access the virtual services. We will not save, or will otherwise permanently delete, biometric data from our systems after the initial purpose for collecting or obtaining any biometric data has been satisfied or within three years of your last interaction with us.

We use a reasonable mix of technical, organizational, and administrative safeguards to keep your personal information safe from unauthorized access, changes, disclosure, or destruction, as well as accidental loss or misuse. These protections can include things like encryption, secure networks, access controls, staff training, and physical security where needed.

We consider how sensitive your information is and the potential risks to decide the right level of protection. However, no system or method of storing or sending data can be 100% foolproof. You can help keep your information safe by protecting your devices and login details. If you think your account or interaction with us is no longer secure (for example, if you suspect your account has been compromised), please contact us immediately using the details in the Contacting Us section.

This Service may contain links to sites of third parties. This Privacy Notice does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any site or online service (including, without limitation, any application) that is available through this Service or to which this Service contains a link. The availability of, or inclusion of a link to, any such site or property on the Service does not imply endorsement of it by us or by our affiliates. When you choose to visit or use third-party websites or services, please note that this Privacy Notice no longer applies. We recommend reviewing the privacy notice of the third party to understand how your information may be collected and used.

Your Personal Information may be stored and processed in any country where we have facilities or service providers. By the use of our services or by providing consent to us (where required by law), your information may be transferred to countries outside of your country of residence. Nonetheless, appropriate contractual and other measures are in place, in accordance with local requirements or Applicable Data Protection Laws to protect Personal Information. Some non-European Economic Area (EEA) countries are recognized by the European Commission as providing an adequate level of data protection according to EEA standards. The full list of these countries is available here. For Russia, please refer to the list published by the authorized data protection authority.

For transfers to countries not deemed adequate, we have ensured that adequate measures are in place, including by ensuring that the recipient is bound by Standard Contractual Clauses to protect your Personal Information. You may obtain a copy of these measures by contacting us or, where applicable, our Data Protection Officer in accordance with the Contacting Us section.

Our platforms are designed primarily for adult users. We do not intentionally collect or sell personal information from persons under the age of 18. We encourage adults using our platforms to refrain from sharing any information about children unless necessary.

If we learn that we have received information directly from a child, we will take appropriate action in accordance with Applicable Data Protection Laws.

We may change this Privacy Notice from time to time. Any changes will become effective when we post the revised Privacy Notice on the digital services (apps) and websites. We will attempt to notify you by email or by posting a pop-up banner on the Service when we make any material changes to this Privacy Notice. Your use of the Service following these changes means that you accept the revised Privacy Notice. We recommend that you regularly review this Privacy Notice.

We also provide information collected about Nevada consumers under the heading “Privacy Notice for Nevada Residents” at the end of this Supplemental Notice. The other portions of this Supplemental Notice do not apply to Nevada consumers.

This Supplemental Notice describes Kenvue’s practices regarding the collection, use, and disclosure of Personal Information and provides instructions for submitting data subject requests. This Supplemental Notice is parallel in scope to and should be read in conjunction with our Kenvue US Privacy Notice.

Some portions of this Supplemental Notice apply only to consumers of particular states. In those instances, we have indicated that such language applies only to those consumers.

For Kenvue’s supplemental privacy notice with respect to our processing of consumer health data, please click here.

A. Definitions

• “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Information includes “personal data” as that term is defined in the applicable US State Privacy Law. Personal Information also includes “Sensitive Personal Information,” as defined below, except where otherwise noted.

• “Sensitive Personal Information” means Personal Information that reveals a consumer’s social security, driver’s license, state identification card, or passport number; account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin, religious beliefs, union membership, citizenship or immigration status, or status as a victim of crime; contents of email or text messages; and genetic data. Sensitive Personal Information also includes processing of biometric information for the purpose of uniquely identifying a consumer and Personal Information collected and analyzed concerning a consumer’s health, sex life, or sexual orientation, or status as transgender or nonbinary. Sensitive Personal Information also includes “sensitive data” as that term is defined in the applicable US State Privacy Law.

• “Third Party” has the meanings afforded to it in the applicable US State Privacy Law. Third Parties exclude Kenvue affiliates.

• “Vendor” means a service provider, contractor, or processor as those terms are defined in the applicable US State Privacy Law.

To the extent other terms used in this Supplemental Notice are defined terms under the applicable US State Privacy Law, they shall have the meanings afforded to them in those statutes, whether or not capitalized herein. As there are some variations between such definitions in each of the state statutes, the definitions applicable to you are those provided in the statute for the state in which you are a consumer. For example, if you are a Virginia consumer, terms used in this Supplemental Notice that are defined terms in the VCDPA shall have the meanings afforded to them in the VCDPA as this Supplemental Notice applies to you.

B. Categories of Personal Information Collected and Processed

We, and our Vendors, may have collected and processed the following categories of Personal Information about you in the preceding 12 months:

1. Identifiers, such as name, alias, online identifiers, account name, physical characteristics or description;

2. Contact and financial information, including phone number, address, email address, financial information, medical information, health insurance information;

3. Characteristics of protected classifications under state or federal law, such as age, gender, race, physical or mental health conditions, and marital status;

4. Commercial information, such as transaction information, payment information, tax withholding information and purchase history;

5. Biometric information;

6. Internet or other electronic network activity information, such as browsing history, search history and interactions with our Service or advertisements;

7. Geolocation data, such as device location;

8. Audio, electronic, visual and similar information, such as call and video recordings;

9. Professional or employment-related information, such as specialty, education history, professional qualifications, work history and prior employer;

10. Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics; and

    1. Sensitive personal information, including:

       1. Personal Information that reveals:

       2. Social security, driver’s license, state identification card, or passport number;

       3. Account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials for allowing access to an account;

       4. Precise geolocation;

       5. Racial or ethnic origin, religious or philosophical beliefs, or union membership;

       6. Genetic data.

    2. Biometric data processed for the purpose of uniquely identifying a consumer;

    3. Personal Information collected and analyzed concerning a consumer’s health; and

    4. Personal Information collected and analyzed concerning a consumer’s sex life or sexual orientation.

C. Retention of Personal Information. We retain your Personal Information for the period reasonably necessary to provide goods and services to you and for the period reasonably necessary to support our business operational purposes listed in Section E.

Notice for users of Neutrogena.com only: We may process facial images to support certain virtual experiences, but do not use these images to identify any particular customer. Nevertheless, we will not use or save these facial images, nor any potential biometric data, on any server, system or location outside of the device you use to access the virtual services. We will not save, or will otherwise permanently delete, biometric data from our systems after the initial purpose for collecting or obtaining any biometric data has been satisfied or within three years of your last interaction with us.

D. Categories of Personal Information We Disclose to Vendors & Third Parties

We may disclose any of the following categories of Personal Information among our affiliates and to Vendors and Third Parties:

1. Identifiers, such as name, alias, online identifiers, account name, physical characteristics or description;

2. Contact and financial information, including phone number, address, email address, financial information, medical information, health insurance information;

3. Characteristics of protected classifications under state or federal law, such as age, gender, race, physical or mental health conditions, and marital status;

4. Commercial information, such as transaction information, payment information, tax withholding information and purchase history;

5. Biometric information;

6. Internet or other electronic network activity information, such as browsing history, search history and interactions with our Service or advertisements;

7. Geolocation data, such as device location;

8. Audio, electronic, visual and similar information, such as call and video recordings;

9. Professional or employment-related information, such as specialty, education history, professional qualifications, work history and prior employer;

10. Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics; and

    1. Sensitive personal information, including:

       1. Personal Information that reveals:

       2. Social security, driver’s license, state identification card, or passport number;

       3. Account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials for allowing access to an account;

       4. Precise geolocation;

       5. Racial or ethnic origin, religious or philosophical beliefs, or union membership;

       6. Genetic data.

    2. Biometric data processed for the purpose of uniquely identifying a consumer;

    3. Personal Information collected and analyzed concerning a consumer’s health; and

    4. Personal Information collected and analyzed concerning a consumer’s sex life or sexual orientation.

E. Sale and Sharing for Targeted Advertising: We may share your Personal Information with our trusted partners, including Third Parties that provide us with website analytics and digital advertising services, in arrangements that may meet the broad definition of “sale”, “share”, or “targeted advertising” under applicable US Privacy Laws. In these arrangements, use of the information we share is limited by policies, contracts, or similar restrictions. We do not share, sell or process for purposes of targeted advertising the Personal Information of children under 18 years of age.

F. Sources from Which We Collect Personal Information

We collect Personal Information directly from California, Colorado, Virginia, Utah, Connecticut, Montana, Texas, Oregon, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Kentucky, and Rhode Island consumers, as well as from our affiliates, business partners, joint marketing partners, public databases, providers of demographic data, publications, professional organizations, social media platforms, caregivers, third party information providers, affiliates with whom you have a business relationship, Vendors with which we have a contractual relationship and to which you have provided your personal information, cookies and other tracking technologies, and Third Parties when they share the information with us.

G. Purposes for Processing Personal Information

We, and our Vendors, collect and process the Personal Information (excluding Sensitive Personal Information) described in this Supplemental Notice to:

• Operate, manage, and maintain our business;

• Respond to your inquiries and to fulfill your requests;

• Send you important information regarding our relationship with you or regarding our Service, changes to our terms, conditions, and policies and/or other administrative information;

• Conduct audits, to verify that our internal processes function as intended and are compliant with legal, regulatory, or contractual requirements;

• Prevent fraud or crime, and for risk and technical security monitoring purposes;

• Facilitate the development of new products and services;

• Enhance, improve or modify our Service or products and services;

• Perform research, analytics and, data analysis;

• Determine the effectiveness of our promotional campaigns, so that we can adapt our campaigns to the needs and interests of our users;

• Personalize, advertise, and market our products and services;

• Comply with law, legal process, and internal policies;

• Maintain records;

• Exercise and defend legal claims; and

• Otherwise accomplish our business purposes and objectives.

We, and our Vendors, collect and process the Sensitive Personal Information described in this Supplemental Notice for:

• Performing the services or providing the goods reasonably expected by an average consumer who requests those goods or services;

• Ensuring security and integrity to the extent the use of the consumer's Personal Information is reasonably necessary and proportionate for these purposes;

• Performing services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on our behalf;

• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us;

• Personalizing, advertising, and marketing our products and services;

• Conducting research, analytics, and data analysis;

• Performing accounting, audit, and other internal functions, such as internal investigations;

• Complying with law, legal process, and internal policies;

• Maintaining records;

• Exercising and defending legal claims; and

• Otherwise accomplishing our business purposes and objectives.

H. Categories of Entities to Whom We Disclose Personal Information

Affiliates. We may disclose your Personal Information, including Sensitive Personal Information, to our affiliates for the purposes described in this Privacy Notice. A list of our affiliates is available at https://investors.kenvue.com/financials-reports/sec-filings/default.aspx – access Kenvue’s subsequent fillings with the Securities Exchange Commission. Kenvue Brands LLC is the party responsible for the management of the jointly used Personal Information;

Vendors. Our Vendors provide us with services for our websites, including this Service, as well as other products and services, such as web hosting and moderating, mobile application hosting, data analysis, payment processing, order fulfillment, customer service, infrastructure provision, IT services, email and direct mail delivery services, auditing, legal services, and other similar services, in order to enable them to provide services.

Third Parties. We may disclose your Personal Information to the following categories of Third Parties:

• At Your Direction. We may disclose your Personal Information to any Third Party with your consent or at your direction.

• Business Transfers or Assignments. We may disclose your Personal Information to other entities as reasonably necessary to facilitate a reorganization, merger, sale, joint venture or collaboration, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).

• Third Party Co-Branding and Co-Marketing Partners. We may share your Personal Information with our third-party partners with whom we offer a co-branded or co-marketed promotion.

• Third-Party Advertising Partners. To improve the effectiveness of our communication with you and our marketing campaigns, we may share our data with our third-party advertising partners, including social media, medical journals and publishers.

• Legal and Regulatory. We may disclose your Personal Information to government authorities, including regulatory agencies and courts, as reasonably necessary for our business operational purposes, to assert and defend legal claims, and otherwise as permitted or required by law.

I. Data Subject Rights

• Exercising Data Subject Rights. California, Colorado, Virginia, Utah, Connecticut, Montana, Texas, Oregon, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Kentucky, and Rhode Island consumers have certain rights with respect to the collection and use of their Personal Information. Those rights vary by state. As required by US State Privacy Laws, we provide detailed information below regarding the data subject rights available to California, Colorado, Virginia, Utah, Connecticut, Montana, Texas and Oregon consumers. You may exercise the data subject rights applicable to you under the applicable US State Privacy Law by clicking here or contacting us at 800-361-8068. While we will make reasonable efforts to accommodate your request, we reserve the right to impose certain restrictions or requirements on your request, if allowed or required by applicable law. Consumers in some states may also authorize an agent to make data subject requests on their behalf.

• Verification of Data Subject Requests. We may ask you to provide information that will enable us to verify your identity in order to comply with your data subject request. In particular, when a California or Connecticut consumer authorizes an agent to make a request on their behalf, we may require the agent to provide proof of signed permission from the consumer to submit the request, or we may require the consumer to verify their own identity to us or confirm with us that they provided the agent with permission to submit the request. In some instances, we may decline to honor your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.

• Authorized Agents If you reside in a jurisdiction that permits the use of an authorized agent to exercise your rights and choose to submit a request through such an agent, we may require documentation confirming that you have granted the agent authority to act on your behalf. If you intend to submit a request on behalf of another person, please reach out to us at consumer-us-kenvue@kenvue.com.

• Non-Discrimination. We will not discriminate against you for exercising your data subject rights. For example, we will not deny goods or services to you, or charge you different prices or rates, or provide a different level of quality for products or services as a result of you exercising your data subject rights.

• Appeals To appeal our decision on your data subject requests, you may click here. Please enclose a copy of or otherwise specifically reference our decision on your data subject request, so that we may adequately address your appeal. We will respond to your appeal in accordance with applicable law.

Data Subject Rights Disclosure

• Right to Deletion: You may request that we delete any Personal Information about you that we collected from you or other sources.

• Right to Correction: You may request that we correct any inaccurate Personal Information we maintain about you.

• Right to Know: You may request that we confirm whether we are processing your Personal Information, including Sensitive Personal Information, and provide you with the following information about how we have handled your Personal Information:

  • The categories of Personal Information we collected about you;

  • The categories of sources from which we collected such Personal Information;

  • The business or commercial purpose for collecting Personal Information about you;

  • The categories of Personal Information about you that we shared or disclosed and the categories of Third Parties with whom we shared or disclosed such Personal Information; and

  • The specific pieces of Personal Information we have collected about you.

• Right to Receive Information About Onward Disclosures: You may request that we disclose to you:

  • The categories of Personal Information that we have collected about you;

  • The categories of Personal Information that we have sold or shared about you and the categories of Third Parties to whom the Personal Information was sold or shared; and

  • The categories of Personal Information we have disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.

• Right to Non-Discrimination: You have the right not to be discriminated against for exercising your data subject rights. We will not discriminate against you for exercising your data subject rights.

• Right to Restrict or Limit the Use of Sensitive Personal Information: For California and Utah consumers, you have the right to restrict the use and disclosure of sensitive personal information to certain purposes related to the offering of goods or services as listed in the CPRA or UCPA. To exercise this right, you or your authorized representative may submit a request by clicking on the following link: Limit the Use of My Sensitive Personal Information. For Colorado, Connecticut, Virginia, Montana, Texas, and Oregon consumers, we will not process your Sensitive Personal Information without your opt-in consent, and you have the right to revoke such consent at any time.

• Right to Opt Out of Sharing or Selling Personal Information or Processing Personal Information for Purposes of Targeted Advertising: You have the right to direct us to not share or sell your personal information. To exercise this right, you or your authorized representative may submit a request by clicking on the following link: Do Not Sell or Share My Personal Information.

• Right to Opt Out of Profiling in Furtherance of a Decision that Produces a Legal or Similarly Significant Effect. For Colorado, Connecticut, Virginia, Montana, Texas and Oregon consumers, you have the right to opt out of the processing of your Personal Information for purposes of profiling in furtherance of a decision that produces a legal or similarly significant effect concerning you, such as decisions we make that result in our provision or denial of financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunities, health care services, or access to necessities like food and water. We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

• Right to Revoke Consent. For Connecticut, Delaware, Maryland, Minnesota, New Hampshire, New Jersey, Oregon, and Rhode Island consumers, you have the right to revoke your consent to the processing of your personal information at any time. You may exercise your right to revoke consent by clicking here or contacting us as described in the Contacting Us section.

J. Other Disclosures

• California Residents Under Age 18. If you are a resident of California under the age of 18 and a registered user of our Service, you may ask us to remove content or data that you have posted to the Service by clicking here or contacting us at 800-361-8068.Please note that your request does not ensure complete or comprehensive removal of the content or data, as, for example, some of your content or data may have been reposted by another user.

• Disclosure About Direct Marketing for California Residents. California Civil Code § 1798.83 permits California residents to annually request certain information regarding our disclosure of Personal Information to other entities for their direct marketing purposes in the preceding calendar year. We do not distribute your Personal Information to other entities for their own direct marketing purposes.

• “Shine the Light” law. Under California Civil Code Section 1798.83, also known as California’s “Shine the Light” law, if you are a California resident, you have a right to prevent your personal information from being disclosed to third parties for those third parties’ direct marketing purposes. If you would like to exercise this right, please go to the footer of the Services and click on “Do not sell or share my personal information”.

• Changes to our Supplemental Notice. We reserve the right to amend this Supplemental Notice at our discretion and at any time. When we make material changes to this Supplemental Notice, we will notify you by email or posting a pop up banner on the Service and posting an updated Supplemental Notice on our Service and listing the effective date of such updates.

PRIVACY NOTICE FOR NEVADA RESIDENTS

Effective: January 1, 2024.

This Privacy Notice for Nevada Residents adds to the information contained in the Kenvue US Privacy Notice, and applies only to Nevada residents (“you,” “your” or “consumer”).

Personal Information Collection and Purposes of Use

We collect certain personal information of Nevada consumers through our Service. This information includes one or more of the following elements of personally identifiable information:

1. A first and last name.

2. A home or other physical address that includes the name of a street and the name of a city or town.

3. An electronic mail address.

4. A telephone number.

5. A Social Security Number.

6. An identifier that allows you to be contacted either physically or online.

7. Any other information concerning you collected from you through the Service, and maintained by us in combination with an identifier in a form that makes the information personally identifiable.

We collect this personal information for the following purposes:

• to respond to your inquiries and to fulfill your requests;

• to send you important information regarding our relationship with you or regarding this Service, changes to our terms, conditions, and policies and/or other administrative information;

• for audits, to verify that our internal processes function as intended and are compliant with legal, regulatory, or contractual requirements;

• for fraud or crime prevention, and for technical security monitoring purposes;

• to facilitate the development of new products and services;

• to enhance, improve or modify our Service or products and services;

• for data analysis that will allow us to understand website usage trends;

• to determine the effectiveness of our promotional campaigns, so that we can adapt our campaigns to the needs and interests of our users.

• to better understand you, so that we can personalize our interactions with you and provide you with information and/or offers tailored to your interests.

Your Privacy Rights

Right to access and/or correct your personal information, or opt out of sale of personal information:

If you would like to review, correct, or update your personal information, you or your authorized representative may submit your request here .

Under Nevada law, you also have the right to direct us to not sell your personal information to third parties. We do not sell your personal information as defined by Nevada law. However, to exercise this right, if applicable, you or your authorized representative may submit a request here.

We will respond to your verified request(s) as soon as reasonably practicable, but no later than sixty (60) days after receipt. If circumstances cause any delay in our response, you will be promptly notified and provided a date for our response.

For purposes of this CHD Privacy Notice, Consumer Health Data (“CHD”) is defined as under applicable CHD Privacy Laws and includes personal information that is linked or reasonably linkable to a Consumer and that identifies the Consumer’s past, present, or future physical or mental health status.

We do not “sell” Consumer Health Data for monetary consideration. However, we do use cookies for targeted advertising purposes. The collection of data through certain cookies for our targeting advertising purposes may be considered a “sale” under CHD Privacy Laws. If you have consented, we may “sell” Consumer Health Data:

• To operate, manage, and maintain our business;

• To respond to your inquiries and to fulfill your requests;

• To conduct audits, to verify that our internal processes function as intended and are compliant with legal, regulatory, or contractual requirements;

• To prevent fraud or crime, and for risk and technical security monitoring purposes;

• To facilitate the development of new products and services;

• To enhance, improve or modify our Service or products and services;

• To perform research, analytics and, data analysis;

• To determine the effectiveness of our promotional campaigns, so that we can adapt our campaigns to the needs and interests of our users;

• To personalize, advertise, and market our products and services;

• To comply with law, legal process, and internal policies;

• To maintain records;

• To exercise and defend legal claims;

• To ensure security and integrity to the extent the use of the Consumer Health Data is reasonably necessary and proportionate for these purposes;

• To perform accounting, audit, and other internal functions, such as internal investigations; and

• Otherwise accomplishing our business purposes and objectives.

Why the Consumer Health Data is Collected & How it is Used

We, and our Vendors collect, process and use the Consumer Health Data described in this CHD Privacy Notice for the following purposes:

• Performing the services or providing the goods reasonably expected by an average consumer who requests those goods or services;

• Ensuring security and integrity to the extent the use of the consumer’s Personal Information is reasonably necessary and proportionate for these purposes;

• Performing services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on our behalf;

• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us;

• Personalizing, advertising, and marketing our products and services;

• Conducting research, analytics, and data analysis;

• Performing accounting, audit, and other internal functions, such as internal investigations;

• Complying with law, legal process, and internal policies;

• Maintaining records;

• Exercising and defending legal claims; and

• Otherwise accomplishing our business purposes and objectives.

Sources of CHD

We collect Consumer Health Data directly from consumers, as well as from our affiliates, business partners, joint marketing partners, public databases, providers of demographic data, publications, professional organizations, social media platforms, caregivers, third party information providers, affiliates with whom you have a business relationship, Vendors with which we have a contractual relationship and to which you have provided your personal information, cookies and other tracking technologies, and Third Parties when they share the information with us.

Retention Period

We retain your CHD for the period reasonably necessary to provide goods and services to you and for the period reasonably necessary to support our business operational purposes, including but not limited to comply with our legal obligations and for our legal positions (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).

Our Sharing of CHD

Affiliates. We may disclose your CHD to our affiliates for the purposes described in this Privacy Notice. A list of our affiliates is available at https://investors.kenvue.com/financials-reports/sec-filings/default.aspx – access Kenvue’s subsequent fillings with the Securities Exchange Commission. Kenvue Brands LLC. is the party responsible for the management of the jointly used CHD.

Vendors. We may disclose CHD to our Vendors in order to enable them to provide us with products and services, such as web hosting and moderating, mobile application hosting, data analytics, market research, consumer insight, payment processing, order fulfillment, customer service, infrastructure provision, IT services, email and direct mail delivery services, auditing, legal services, and other similar services.

Third Parties. We may disclose your CHD to the following categories of Third Parties:

• At Your Direction. We may disclose your CHD to any Third Party with your consent or at your direction.

• Other Users and Individuals. If you use our services to interact with other users of the service or other recipients of communications, we will share data, including CHD, as directed by you and your interactions.

• Business Transfers or Assignments. We may disclose your CHD to other entities as reasonably necessary to facilitate a reorganization, merger, sale, joint venture or collaboration, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).

• Third Party Co-Branding and Co-Marketing Partners. We may share your CHD with our third-party partners with whom we offer a co-branded or co-marketed promotion.

• Third Party Advertising Partners. To improve the effectiveness of our communication with you and our marketing campaigns, we may share your CHD with our third-party advertising partners, including data analytics providers, market researchers, consumer insight platforms, social media platforms, medical journals, publishers and other similar vendors.

• Legal and Regulatory. We may disclose your CHD to government authorities, including regulatory agencies and courts, as reasonably necessary for our business operational purposes, to assert and defend legal claims, and otherwise as permitted or required by law.

Exercising Consumer Data Rights

Consumers have certain rights under applicable CHD Privacy Laws with respect to the collection and use of their CHD. These rights may include the right to confirm whether we collect, share or sell your CHD, and the right to access such CHD, the right to a list of all third parties and affiliates with whom we have shared or sold the CHD, the right to withdraw consent from our collection and sharing of CHD, and the right to delete your CHD.
You may exercise the consumer data rights applicable to you under the applicable CHD Privacy Laws by clicking here or by referring to the “Contacting Us” section in the Kenvue US Privacy Notice.

Changes to this CHD Privacy Notice

We reserve the right to amend this CHD Privacy Notice at our discretion and at any time. When we make material changes to this CHD Privacy Notice, we will notify you by [email or posting a pop-up banner on the Service] and posting an updated CHD Privacy Notice on our Service and listing the effective date of such updates.

Contact

Kenvue Brands LLC located at 1 Kenvue Way, Summit, NJ 07901, is the company responsible for collection, use, sharing and selling of Consumer Health Data under this CHD Privacy Notice.

For questions about this CHD Privacy Notice, please contact us by referring to the “Contacting Us” section in the Kenvue US Privacy Notice.

Kenvue Brands LLC located at 1 Kenvue Way, Summit, NJ 07901, is the company responsible for collection, use, and disclosure of personal information under this Privacy Notice.

If you are located in the United States and would like to exercise your data privacy rights (as described in the “Privacy Rights” section above), please submit a privacy request here. For any other questions about this Privacy Notice, please contact us via one of these methods:

• On the Service, via the Contact Us page

• By Phone for Consumers and Professionals in the US, call toll-free 888-319-5476

• By Email at consumer-us-kenvue@kenvue.com

• Write to the following address: Consumer Care Center, Kenvue Brands LLC., 1 Kenvue Way, Summit, NJ 07901