JVN PRIVACY POLICY

Transparency. We want you to know what and how information is collected when you interact with our Store.

Choice. We will offer you choices about how your information can be used and shared by us and our trusted business partners. Certain Stores, Sites or features may ask for you to affirmatively “opt-in” to this Privacy Policy, however, except for those countries where the GDPR applies continued use of the Site, Store or feature is considered your agreement to the terms and conditions of this Privacy Policy. Additionally, when applicable, certain features may allow users to choose an alternative version of the Site with revised functionality that can further limit information sharing.

Data Integrity. We will take reasonable precautions to protect information we collect about you via the Store using adequate security measures and ongoing checks of our data storage infrastructure.

We collect the following information when you use the Store for the purposes, and relying on the legal basis, described below:

Account Information. We collect Personal Information when you create an account with us, make purchases, or sign up for a recurring subscription. To create an account, you will need to provide us with your name, email address and a password or agree to communicate the same by signing in using an authorized third-party website. Once you create an account, you have the option to add one or more addresses to your account address to expedite the checkout process for purchases you make through the Amyris Store. If you reside in the United States, you may also elect to provide us with your telephone number to receive SMS messages from us. Our Terms of Service contain further information about how we would use your telephone number in these circumstances. You can update or delete any of the addresses you add to your account.

Purchase Information. When you buy one of our products through the Store, we will need to collect your shipping and billing address to fulfill your order. To complete your purchase, you will need to provide either a credit card or use one of our payment partners, such as PayPal, Amazon Pay, or Afterpay.

As part of processing a return, fraud prevention or for other legitimate purposes (including for compliance with legal obligations), you may be asked to provide government issued identification numbers, such as driver’s license number.

Rewards Program. If you create, or have already created an account with us, you may be eligible to participate in certain rewards program (“Rewards Program”), which will provide you with access to rewards, based on your annual spend in our Store. We will use your Personal Information (including your name, email address, details of your purchases and how much you spend in our Store) and other information in our legitimate interests to administer our Rewards Program, including to monitor your expenditure with our Store, to provide you with rewards and to enable you to redeem them and to communicate with you about the Rewards Program. If you do not want to take part on our Rewards Program, you can opt-out and withdraw your consent at any time by contacting us using the details provided below or as specified in the Rewards Program Terms and Conditions. You will also have the option to provide us with your birthday, to receive a birthday gift if you make a qualifying purchase in that month.

Communications with Us. We will collect your name and email address when you interact with us in connection with our marketing offers or when you ask to learn more about our brand (e.g. when you provide your email address to receive additional information or benefits) or to receive marketing promotions, information about Amyris events near you, or other news about Amyris or when you submit unsolicited suggestions, feedback or other materials (which may include your name, photos, videos or other items including your personal information). We also collect your information when you contact customer service. Customer service communications may also include chat bots, or other artificial intelligence tools to better serve our customer’s needs. We use this information to store and respond to your inquiries, customer service matters, or to let you know about our products and services, including our Rewards Programs. Customer service communications may also be recorded for quality assurance and customer service purposes, and by accepting this Privacy Policy you affirmatively consent to the recording and collection of Personal Information while interacting with customer service.

Product Reviews on the Site. You may submit product reviews to appear on the Site. If you submit a review, we will collect your first name and last initial, email address and any information you choose to submit in your review. Although we will not display your email address, your first name, last initial and review will be publicly available through the Store and all affiliated brand Sites globally. Please be mindful not to post information if you aren’t comfortable with it being public.

Registration for Contests and Sweepstakes. Occasionally, we may run contests or sweepstakes. We may ask those who enter in the contests or sweepstakes to provide Personal Information (e.g., an e-mail address). If you participate in a contest or sweepstake, your personal information may be used to reach you about the contest or sweepstakes, to comply with legal reporting requirements and for other marketing and business purposes.

Surveys. We may contact you to participate in surveys. If you do decide to participate, you may be asked to provide certain information which may include personal information. All information collected from your participation in our surveys is provided by you voluntarily and we may use your survey responses for other marketing and business purposes.

Interaction with Us on Third Party Services (e.g., Social Media). We have pages on several popular social media sites, and we also include social media features, such as the Facebook “Like”, or “Share” button and widgets and links to various social media platforms on our website. When you use these tools on our Site or when you post on our social media pages, we may receive Personal Information about you, including your name, email address, and other contact information associated with your social media account which may be used for things including but not limited to on-platform optimization and reporting. The information we receive is dependent upon your privacy settings with the social network and is subject to this Privacy Policy. Information you post on a third-party social media (or other) site is subject to such site’s privacy policy. We encourage you to always review and, if necessary, adjust your privacy settings on third party websites before linking or connecting them to our website. We do not control the third-party websites' information practices, so please review their statement and your settings on the third party’s site carefully to protect your information.

For the processing operations carried out jointly for the purpose of on-platform optimization and reporting, as well as for advertising purposes, we and Facebook Ireland Limited (“Facebook”) act as joint controllers and, to this end, we have entered into a joint controllership agreement that sets out our respective responsibilities regarding compliance with our obligations under the Regulation (EU) 2016/679 (“GDPR”) (available at this link). According to this agreement, we are responsible for providing you with the information referred to in Articles 13 and 14 GDPR, while Facebook is responsible for responding to your requests to exercise your rights under Articles 15-20 GDPR with respect to the personal data stored by Facebook as a result of the processing. In any case, you may exercise your rights with reference to the data processing carried out with Facebook also directly to Facebook.

Further information on how Facebook processes personal data, including the legal basis Facebook relies on and the ways to exercise data subject rights against Facebook, can be found in Facebook’s Data Policy at https://www.facebook.com/about/privacy.

Security. Server logs may be reviewed for security purposes – e.g., to detect unauthorized activity on the Store.

Merger, Sale, or Other Asset Transfers. If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, then your information may be processed also in the context of such transactions and for the purpose of executing the transactions. In connection with any such transactions, we will require that any counterparty to the transaction maintain the same standards employed by JVN Privacy Policy with respect to your personal information.

Your Referrals. If you use our “Refer a Friend” program or other referral programs to send promotional messages to one or more of your contacts, we will collect the recipient’s email address and use it solely to send the referral message. We will let the recipient know we sent the referral at your request and that we received his/her email address from you. The person you referred may contact us at privacy@amyris.com to request that we remove this information from our database; nevertheless, we recommend that you inform the referred person prior to the communication of his/her data to us and that you refrain from communicating his/her data to us in case he/she does not want you to proceed.

Browsing Information. We collect certain information about your use of the Site, including the areas or web pages you viewed on our Site, the Amyris products you viewed or purchased, your IP address, details about your browser or device, and other information about your browsing behavior (collectively, “browsing information”). We use browsing information to improve the design and content of our Site, to suggest content and products that we think may be relevant to you, and to help us learn things like what pages are most attractive to our visitors, what promotions visitors like to see, and to measure the success of our advertising campaigns. We collect browsing information and allow third parties to collect such information through cookies, pixel tags, web beacons, local storage, and other tracking technologies (collectively, “Technologies”) as further described below.

Information from Other Sources. We may receive information about you from other sources, including through third-party services and organizations to supplement information provided by you for the purposes of tailoring content and products that we think may be relevant to you.

Access to Camera, Video Chat, and Photo Collection. With your consent you may wish to take advantage of Store features that utilize the camera on your personal device to capture photos or conduct a live video chat with customer service or a beauty advisor. Amyris may collect your image or a video for the purpose of executing these services described in the Store feature. Your image will not be shared publicly, except where you choose to use your device's share capabilities to share a specific image. Images may be retained and used for other internal Amyris purposes, such as user-facing value-add features (e.g. seeing your progress over time), improving features and services (such as through analytics, research and development), and other direct marketing efforts related to your specific use of the Store feature. When you permit access the audio and visual aspects of your personal device for the purposes of a live video chat you may be redirected to a third-party website that supports this video chat function. Please note, as with any access to a third-party website, the privacy policy of that site will apply when you are redirected to another website.

Legal basis for processing. The above processing activities will be carried out only when one or more of the following legal bases apply:

• The processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract (e.g. “Account information”, “Purchase information”, “Rewards Program”, “Communications with Us”, “Product Reviews on the Site”, “Registration for Contests and Sweepstakes”);
• You have provided your consent to one or more processing activities (e.g. “Rewards Program”, “Survey”, “Interaction with Us on Third Party Services”, “Browsing Information” – when consent is required –, “Information from Other Sources”, “Access to Camera, Video Chat, and Photo Collection”);
• The processing is necessary for compliance with a legal obligation to which we are subject (e.g. “Purchase information”, “Registration for Contests and Sweepstakes”, “Security”);
• The processing is necessary for the purposes of our legitimate interests (e.g. “Purchase information”, “Rewards Program”, “Surveys”, “Interaction with Us on Third Party Services”, “Security”, “Merger, Sale, or Other Asset Transfers”, “Your Referrals”, “Access to Camera, Video Chat, and Photo Collection”). Details on the legitimate interests pursued by us are available upon request, to be forwarded at the contact details stated in this Privacy Policy.

When the processing is based on your consent, you are free to decide on whether or not to grant your consent and you will be entitled to withdraw the consent at any time, as described in this Privacy Policy.

When the processing is based on our legitimate interest, you will be entitled to exercise your right to opt-out or object to the processing at any time, as described in this Privacy Policy.

Like many websites, our Store uses automated data collection Technologies, including cookies, to collect certain information. We, as well as third parties, use these Technologies as follows:

Cookies and Web Technologies (the “Technologies”). A “cookie” is a small text file that identifies your computer or device. When you visit our Store, unique cookies are placed on your browser. A web beacon is a technology with a unique identifier that is typically contained in a small graphic file in a web page or in an email. We may use these Technologies to identify that you’ve logged into the Store, to hold selected products in your shopping cart when you navigate away from the order page, to suggest content and products that we think may be relevant to you, and to monitor aggregate usage of our Store. We also use these Technologies to measure the effectiveness of our advertising campaigns and to improve our Store by recognizing which pages are visited and whether those visits result in purchases.

More in details, the Technologies installed on the Store include:

• Strictly Necessary Technologies, which are necessary for the Store to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these Technologies, but some parts of the site will not then work. These Technologies do not store any personally identifiable information.
• Performance Technologies, which allow us to count visits and traffic sources so we can measure and improve the performance of our Store. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these Technologies collect is aggregated and therefore anonymous. If you do not allow these Technologies we will not know when you have visited our site, and will not be able to monitor its performance.
• Functional Technologies, which enable the Store to provide enhanced functionality and personalization. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these Technologies then some or all of these services may not function properly.
• Targeting Technologies, which may be set through our Store by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverting on other sites. They may store directly personal information, and are based on uniquely identifying your browser and internet device. If you do not allow these Technologies, you will not experience targeted advertising.

You can change your cookies settings for the majority of cookies used on our website through our cookie preference center.

Where we allow third parties to drop cookies, we do not necessarily have absolute control over those cookies or the data collected. To make any requests related to the third parties that may drop cookies on the Store, you may also contact us at privacy@amyris.com.

Interest-Based Advertising. So that we can better target our advertising to individuals’ interests, we work with advertising partners who may use Technologies, including cookies to gather browsing Information about you when you use our Store. Section 6 ‘Choices Regarding Your Information’ below contains further information about these activities.

Analytics. We may also use Google Analytics, Hotjar, Lucky Orange, TikTok, Meta, Pinterest, and other service providers to collect information regarding visitor behavior and visitor demographics on our Store. For more information about Google Analytics, please visit www.google.com/policies/privacy/partners/. You can opt out of Google’s processing of data generated by your use of the Store by visiting http://tools.google.com/dlpage/gaoptout.

We use information we collect for the following purposes:

We use information collected to provide and operate Amyris, to facilitate your online shopping, to enable purchases and process payments, to operate the Site features, to communicate with you (e.g., for customer support), to administer our Rewards Program, to implement your requests (e.g., referrals), on-platform optimization and reporting, to improve customer experience through personalization of products and their application, and to tailor and send you marketing materials.

We use your browsing and other information to help us analyze our Store and offerings.

We use your browsing, shopping, and other information to enhance your use of our Store and provide you with interest-based advertising.

We may use your email address to contact you about your account, and any relevant information about the Store (e.g., security updates or issues, etc.).

We may use information you post in public areas to provide you with an interactive social media experience that brings aspects of your social networking community into your Store experience.

We may use information we collect for our own and our affiliate companies’ legitimate interests, such as direct marketing, research (including marketing research), network and information security, to detect security incidents, and to investigate, prevent, or take action regarding possible malicious, deceptive, fraudulent, or illegal activity, including attempts to manipulate or violate our policies, procedures, and terms and conditions.

We may use the information we collect for any other purpose that was disclosed to you at the time it was collected or for other purposes where these are not incompatible with the disclosed purposes or where we otherwise have your consent.

We may share your information as described in this Privacy Policy or with your permission.

Trusted Service Providers. We may share your Personal Information with third-party service providers we engage to help us administer and operate the Store (including our Rewards Program), to process and fulfill your orders, and to communicate with you. The types of vendors to whom we entrust Personal Information include: (i) IT services, including hosting our Store and the provider of our Rewards Program platform; (ii) communications service providers who help us send newsletters and other marketing emails and SMS messages; (iii) payment processing and order fulfillment services; and (iv) providers of customer support services. These service providers have access to your Personal Information only for the purpose of performing services on our behalf. Brand will not purchase consent, or sell, rent or share consent to opt-in to the brand’s mobile SMS/texting program.

Business Partners and Affiliates. We may share Personal Information with companies that are under common ownership or control with us (e.g., Amyris subsidiaries or parent companies) to provide you with a product or service that you have requested or that we believe may be of interest to you or similar purpose as described herein. We require our affiliates not to use Personal Information for any other purpose other than the purpose as directed.

Marketing – Interest-Based Advertising and Third-Party Marketing. As described above, we may allow Third-Party advertising partners to use web Technologies to collect information about your browsing Information for interest-based advertising. You may opt-out and withdraw your consent to such sharing at no cost by following the instructions below.

Use of Affiliate Marketing Partners – When you access this Amyris website from an affiliate marketing network, affiliate advertiser, or other third-party advertising network they may collect Personal Information through cookies or other means when you interact with our digital property, including IP addresses, digital identifiers, information about your web browsing, app usage, and other ways you interact with our properties and ads for a variety of purposes, such as personalization of offers or advertisements, analytics about how you engage with websites or ads and other commercial purposes. For more information about the collection and use of your data and your rights with respect to these affiliate networks, please locate the privacy policy for the affiliate marketing website you used to access the Amyris website.

Disclosures to Protect Us or Others (e.g., as Required by Law and Similar Disclosures). We or our service providers may access, preserve, and disclose your Personal Information if we believe doing so is required or appropriate: (i) to comply with law enforcement or national security requests and legal process, such as a court order or subpoena; (ii) to respond to your requests; (iii) to protect yours’, ours’ or others’ rights, property, or safety; (iv) to enforce our policies or contracts; (v) to collect amounts owed to us; (vi) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation or prosecution of suspected or actual illegal activity; or (vii) if we, in good faith, believe that disclosure is otherwise necessary or advisable (subject to applicable privacy laws) or (viii) as otherwise may be required or permitted by applicable U.S., Canadian, or other law or legal process, which may include lawful access by US or foreign courts, law enforcement or other government authorities.

In addition, from time to time, server logs may be reviewed for security purposes – e.g., to detect unauthorized activity on the Store. In such cases, server log data containing IP addresses may be shared with law enforcement bodies in order that they may identify users in connection with their investigation of the unauthorized activities.

Merger, Sale, or Other Asset Transfers. If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, then your information may be sold or transferred as part of such a transaction as permitted by law and/or contract. In such event, we will require the transferee to use Personal Information in a manner that is consistent with the Privacy Policy in effect at the time such Personal Information was collected

All the entities above will act, as the case may be, as autonomous data controllers or data processors and, in the latter case, in accordance with the instructions provided by us also through execution of a data processing agreement as required by the applicable law. For more information on the entities to which your Personal Information may be communicated (including the updated list of such entities), please contact us at the contact details provided in this privacy policy.

Safeguarding Your Personal Information

We maintain physical, technical, and administrative safeguards to protect the confidentiality and security of information transmitted to us. However, no data transmission over the Internet or other network can be guaranteed to be 100% secure. As a result, while we strive to protect information transmitted on or through our Store also by implementing adequate security measures as required by the applicable laws, we cannot and do not guarantee the security of any information you transmit on or through our Store, and you do so at your own risk. To the fullest extent permitted by applicable law, we do not accept liability for unintentional disclosure.

When you register for the Store, we ask you to set up a password that you can use to access your information. If you want to cancel your password or change it, or something happens to your password, click on “Sign In” from any page on our Store, so you can access, correct or update your choices and settings from within your account.

We use Secure Socket Layer (SSL) and/or Transport Layer Security (TLS) or similar industry standard technology to encrypt transmissions of sensitive information from your computer to our servers. However, when you communicate with customer service via email on our website, these communications may be handled via unsecured transmissions or by third party service providers. Please be aware that information provided (such as email address, payment information, etc.) may be accessible to others. For that reason, we ask that you protect yourself and not share sensitive information via these communication channels.

Data Retention

Amyris retains the Personal Information we receive as described in this Privacy Policy for as long as you use our Store or as necessary to fulfill the purpose(s) for which it was collected, operate our Store, resolve disputes, establish legal defenses, prevent fraud, conduct audits, pursue legitimate business purposes, enforce our agreements (including our Terms of Service), and comply with applicable laws.

For further information about how long we retain your Personal Information, please contact us using the details provided in this Privacy Policy.

International Data Transfers

The information processed by us may be transferred, processed, and stored anywhere in the world, including but not limited to, Brazil, the United States, the European Union or other countries in order to provide and operate the Store. Personal Information may be stored in the cloud, on our servers, on the servers of our affiliates or the servers of our service providers. If you are located in the European Economic Area or UK, your Personal Information will be transferred only when a level of protection essentially equivalent to that guaranteed within the European Economic Area or UK (as applicable) is granted (e.g. in case the country of destination of the Personal Information is an “adequate country” pursuant to a European Commission or UK government adequacy decision; or when the standard contractual clauses adopted by the European Commission or approved by the Information Commissioner’s Office (ICO) in the UK have been executed and additional safeguards have been implemented).

By using the Store, you are agreeing to the collection, use, transfer, and disclosure of your Personal Information, browsing information, and that communications will be governed by any applicable laws, including the ones applicable in the United States. Use of the Brazilian Store (including the collection, use, transfer, and disclosure of your Personal Information, browsing information, and communications) will be governed by the laws of Brazil.

Supervisory Authority

If you are in the European Economic Area, you have the right to lodge a complaint with a privacy authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you believe our processing of your Personal Information violates applicable law.

If you are in the United Kingdom, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe our processing of your Personal Information violates applicable law.

If you are located in Brazil, the Brazilian General Data Protection Law (Law No. 13,709/2018) or (“LGPD”) and its subsequent amendments may be applicable to you. The LGPD guarantees specific rights and Amyris complies and respects such rights in accordance with the LGPD. If you have any questions concerning our privacy practices in Brazil, please contact privacidade@amyris.com or send a message through our website’s Contact Us page.