Privacy Policy - Merz Aesthetics

Merz North America Privacy Policy

Revised [February, 2024]

A. Merz is responsible for personal data that you share with us or that we receive about you.

Merz North America, Inc., (“Merz” or “We”), including its parent and affiliated companies, is responsible for processing personal data about you that is collected or otherwise used as you use this website (“Site”) and as you interact with Merz offline. Trust is an important Merz value, and we aim to earn your trust not just by providing safe, effective pharmaceuticals and medical devices but also by responsibly managing your personal data

Please note that this site is intended for United States residents only. If you are from a country outside the United States, please see www.merzaesthetics.com and/or www.us.merzaesthetics.com to identify the affiliate that does business where you live.

B. Why we process your personal data

Like most companies, we process your personal data for several legitimate, lawful reasons related to providing our goods and services to you. We describe the data we process and the reasons for doing so below.

C. What data we collect, why we collect it, and with whom we share it

Personal data, sometimes called personal information, is information relating to an identified or identifiable person. The following table describes the personal data we collect and have collected in the last 12 months, the reasons we collect it, and how we use and share it and have used and shared it in the last 12 months. We also disclose the personal data we collect to our affiliated companies and service providers. For the purpose of this Privacy Policy, “third party” means a person or entity other than a service provider or processor, or affiliate of the Merz.

All categories of personal data may be collected for our General Business Use, which includes the following:

To complete a sales transaction
To honor an agreement or contract between you and Merz;
To protect the security and integrity of our websites, mobile services, and our business;
To comply with legal and/or regulatory requirements;
To respond to reviews, requests, comments, or other feedback you provide us;
To process an employment application; and
To, if necessary, prosecute or defend a legal claim.

¹ Including Merz Pharmaceuticals, LLC, Ulthera, Inc., and ON Light Sciences, Inc., Merz, Incorporated.

Categories of personal data we may collect (description in parentheses identifies information category under the California Consumer Privacy Act)

Sources of that personal data

Data elements we may collect

Purposes for collecting and processing this data

Categories of third parties with which we may disclose this data for business purposes

Contact information (Identifiers)

You

Your authorized representative

Name

Post office box and/or street address

Telephone numbers

Email addresses

To communicate with you

To send you messages about doing business with us

To send you marketing and promotional communications

To process payment or loyalty points

For market research

To advertise and market Merz and Merz related products to you via email and social media

For General Business Use

Healthcare providers who use Merz products and social media companies, but only if you have initiated the transaction or otherwise agreed

To government agencies, if required by law

Authentication information (Sensitive Personal Information – – California Only)

You

Usernames and passwords that you use to gain access to some of our websites and tools

To provide you with secure access to certain websites and tools

Third-party authentication services, such as Google or Facebook (who may also use the data to deliver ads on their own platform), but only if you consent or direct us to do so

Unique identifiers (Identifiers)

You

Your healthcare provider, if you permit it

Third parties, such as ad delivery and social media companies, who place cookies containing advertising IDs on your device

Merz identification number, including customer number, account number, Merz loyalty number

Device identifier

Advertising ID

Online user ID

To identify you or your device, including to associate you with different devices that you may use

For recordkeeping and reporting

To track your use of products, services, websites, including for ad delivery and personalization

For market research purposes

To send marketing and promotional communications

For General Business Use

To government agencies, if required by law

To our third party marketing partners

Financial information (California Customer Records under Cal. Civ. Code § 1798.80)

You

Payment processors or financial institutions

Consumer reporting agencies

Bank account number if you have directed us to collect it for automatic payments

Payment card information if you provide it to our payment card processors

Credit reporting if you ask us for financing

We maintain this information as part of transactions we do with you in order to fulfill our business relationship with you

For required financial recordkeeping

For General Business Use

Our payment card processors

Our financial institutions

Credit reporting agencies

To government agencies, if required by law

Relationship information (Protected Classification Characteristics)

You

Service providers and third parties that provide information that helps us understand our customers, including Customer Relationship Management (“CRM”)

Third parties that provide access to information you make publicly available, such as social media companies

We may also infer information about you based on your past interactions with us

Age range, gender, marital and family status, languages spoken, household demographic data, gender information from so

To better understand you and to understand our customers generally

To design, develop, market, sell, and/or improve our products, services, and programs, including loyalty programs

To send marketing and promotional communications

To identify prospective customers

For market research purposes

For internal business purposes, such as quality control, training, and analytics

For our General Business Use

Third parties with whom we have joint marketing, copromotion, distribution, or similar arrangements

To government agencies, if required by law

Relationship information (Commercial Information)

You

Service providers and third parties that provide information that helps us understand our customers, including Customer Relationship Management (“CRM”) platform entities and public records providers

Third parties that provide access to information you make publicly available, such as social media companies

We may also infer information about you based on your past interactions with us

Shopping preferences, loyalty and rewards program data

To better understand you and to understand our customers generally

To design, develop, market, sell, and/or improve our products, services, and programs, including loyalty programs

To send marketing and promotional communications

To identify prospective customers

For internal business purposes, such as quality control, training, and analytics

For our General Business Use

Third parties with whom we have joint marketing, copromotion, distribution, or similar arrangements

To government agencies, if required by law

Relationship information (Identifiers)

You

Third parties that provide access to information you make publicly available, such as social media companies

We may also infer information about you based on your past interactions with us

Information from social media profiles

To better understand you and to understand our customers generally

To design, develop, market, sell, and/or improve our products, services, and programs, including loyalty programs

To send marketing and promotional communications

To identify prospective customers

For market research purposes

For internal business purposes, such as quality control, training, and analytics

For our General Business Use

Third parties with whom we have joint marketing, copromotion, distribution, or similar arrangements

To government agencies, if required by law

Relationship information (Internet/Network Activity Information)

You

Third parties that provide access to information you make publicly available, such as social media companies

We may also infer information about you based on your past interactions with us

Information from social media activities such as “likes” and emoticons, and preferences for being contacted

To better understand you and to understand our customers generally

To design, develop, market, sell, and/or improve our products, services, and programs, including loyalty programs

To send marketing and promotional communications

To identify prospective customers

For market research purposes

For internal business purposes, such as quality control, training, and analytics

For our General Business Use

Third parties with whom we have joint marketing, copromotion, distribution, or similar arrangements

To government agencies, if required by law

Relationship information (Sensitive Personal Information)

You

Third parties that provide access to information you make publicly available, such as social media companies

We may also infer information about you based on your past interactions with us

Languages spoken

To better understand you and to understand our customers generally

To design, develop, market, sell, and/or improve our products, services, and programs, including loyalty programs

To send marketing and promotional communications

To identify prospective customers

For market research purposes

For internal business purposes, such as quality control, training, and analytics

For our General Business Use

Third parties with whom we have joint marketing, copromotion, distribution, or similar arrangements

To government agencies, if required by law

Relationship information (Inferences)

We may also infer information about you based on your past interactions with us

To better understand you and to understand our customers generally

To design, develop, market, sell, and/or improve our products, services, and programs, including loyalty programs

To send marketing and promotional communications

To identify prospective customers

For market research purposes

For internal business purposes, such as quality control, training, and analytics

For our General Business Use

Third parties with whom we have joint marketing, copromotion, distribution, or similar arrangements

To government agencies, if required by law

Transaction information (California Customer Records under Cal. Civ. Code § 1798.80)

You

Third parties that transact business with us such as distributors or resellers

Customer account information, shipping, and billing information

Marketing and ad campaign data and history

Customer service records

To fulfill our business relationship with you, including customer service and performance of agreements

For recordkeeping and compliance, including dispute resolution

To design, develop, market, sell, and/or improve our products, services

For market research purposes

To send marketing and promotional communications

For our General Business Use

Third parties who transact business on our behalf

To government agencies, if required by law

Transaction information (Commercial Information)

You

Third parties that transact business with us such as distributors or resellers

Customer purchase product lot number, purchase history, and related records (e.g., returns, product service records, records of payments)

Marketing and ad campaign data and history

Customer service records

To fulfill our business relationship with you, including customer service and performance of agreements

For recordkeeping and compliance, including dispute resolution

To design, develop, market, sell, and/or improve our products, services

For market research purposes

To send marketing and promotional communications

For our General Business Use

Third parties who transact business on our behalf

To government agencies, if required by law

Transaction information (Sensitive Personal Information)

You

Third parties that transact business with us such as distributors or resellers

Patient engagement and support data

To fulfill our business relationship with you, including customer service and performance of agreements

For recordkeeping and compliance, including dispute resolution

To design, develop, market, sell, and/or improve our products, services

For market research purposes

To send marketing and promotional communications

For our General Business Use

Third parties who transact business on our behalf

To government agencies, if required by law

Online or technical information (Identifiers)

You and from your computer or devices

First- and third-party cookies, including ad IDs

Web beacons, clear gifs, and pixel tags

Preference management including opt-in and opt-out management

For system administration, technology management, including optimizing our websites and applications and data analytics

For recordkeeping

To design, develop, and/or improve our products, services, and programs, including loyalty programs

To better understand our customers and prospective customers

When you consent through our cookie banner, for online targeting and advertising purposes where advertisements are placed on other websites when you visit

For market research purposes

For our General Business Use

Third-party network advertising partners who may, in turn, disclose to additional advertising providers or social media companies, but only if you consent through our cookie consent banner or your web browser settings permit it

To government agencies, if required by law

Online or technical information (Internet/Network Activity Information)

You and from your computer or devices

First- and third-party cookies, including ad IDs

Web beacons, clear gifs, and pixel tags

Preference management including opt-in and opt-out management

Device characteristics (such as browser information)

Web Server Logs

Browsing Data

Viewing Data

For system administration, technology management, including optimizing our websites and applications and data analytics

For recordkeeping

To design, develop, and/or improve our products, services, and programs, including loyalty programs

To better understand our customers and prospective customers

When you consent through our cookie banner, for online targeting and advertising purposes where advertisements are placed on other websites when you visit

For market research purposes

For our General Business Use

To government agencies, if required by law

Visual information (Sensitive Personal Information and Sensory Information)

You

Photographs and video images that you provide

To fulfill a contract with you

If you consent, for use on social media and in other marketing or advertising materials

To government agencies, if required by law

Visual Information (Sensitive Personal Information and Sensory Information)

You

Third parties that provide access to information you make publicly available, such as social media companies

We may also infer information about you based on your past interactions with us

Photos on social media profile

To better understand you and to understand our customers generally

To design, develop, market, sell, and/or improve our products, services, and programs, including loyalty programs

To send marketing and promotional communications

To identify prospective customers

For market research purposes

For internal business purposes, such as quality control, training, and analytics

For our General Business Use

Third parties with whom we have joint marketing, copromotion, distribution, or similar arrangements

To government agencies, if required by law

Geolocation Information (Geolocation Information)

From you or your computer or devices

Location

To provide you information regarding local physicians selling Merz products

Shared with third party providers

We disclose and have disclosed in the last 12 months personal data to third-party advertising partners for targeted advertising purposes and this is deemed a sale of personal data under some state data privacy laws. We do not otherwise sell your personal data. The categories of personal data we disclose and have disclosed in the last 12 months to third-party advertising partners for targeted advertising purposes include: identifiers – IP, MAC, and SSID addresses or persistent identifiers; and Internet/Network Activity Information – Device characteristics (such as browser information), Web Server Logs, Browsing Data and Viewing Data.

D. How we use cookie data

This Site uses cookies to simplify and improve your experience of our webpages. Cookies are small text files that are stored on your computer or server that exchange settings-related information with Merz’s systems. A cookie normally contains the name of the domain from which the cookie data were sent, information about the cookie’s age, and an alphanumeric identifier.

Cookies are also used to collect information about how you navigate our Site and what specific areas and products interest you. This information in-turn enables us to improve our websites and your online experiences. The information stored in the cookies is neither used to identify you nor is it combined with other stored personal data about you. Instead, we use aggregate cookie data to analyze and improve our website’s relevance and your user experience.

You can deactivate or restrict the transmission of cookies by changing your internet browser settings to disable the use of cookies. You may also use your browser to delete any cookies already stored. If you choose to deactivate or delete cookies for the Merz websites, you may not be able to make full use of all the Site’s functions.

E. How we use online advertising to promote our products

Merz uses third-party vendor remarketing tracking tools, including Facebook Pixel, to serve ads about Merz products online. These ads appear on Facebook, Google products, and on sites across the Internet. The third-party vendors use cookies, web beacons, and similar technologies to tailor the ads based on your past visits to our website and elsewhere online and to measure ad conversion. If you have asked for more information about our products by providing us your contact information on our website, we may share that with social media providers to serve you ads with information about our products.

F. How we use Google Analytics

Merz uses third-party vendor remarketing tracking tools, including Facebook Pixel, to serve ads about Merz products online. These ads appear on Facebook, Google products, and on sites across the Internet. The third-party vendors use cookies, web beacons, and similar technologies to tailor the ads based on your past visits to our website and elsewhere online and to measure ad conversion. If you have asked for more information about our products by providing us your contact information on our website, we may share that with social media providers to serve you ads with information about our products.

You can find more information about Google’s data protection practices and terms of use by visiting Google’s websites here. You can prevent Google from collecting and processing cookie-generated data relating to your use of a website by downloading and installing the browser plug-in available here.

G. How we use Google Maps

Our Site uses Google Maps API, which uses your location to provide additional services and features that you choose to interact with—for example, displaying the locations of Merz companies and medical specialists near you. If you access Google Maps on Merz websites, technical data about your accessing the system (e.g., your postal code or IP address) may be transmitted to servers of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043.

If you do not wish to use Google Maps you should not use the integrated Google Maps feature on our websites or enter your address into the medical specialist locator tool.

H. How we use Google Fonts

In order to reduce the loading times, some of our Sites use fonts (“Google Fonts”) downloaded from the servers of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Generally, if you access one of our Sites, then anonymous technical data about your accessing system will be transmitted to Google where it is cached and stored for one day.

I. How we use YouTube videos

Our Site sometimes displays YouTube videos. YouTube is a service offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. You can prevent the transmission of your data to Google by not clicking on the YouTube videos integrated into the Site.

J. How We Use Meta Pixel

Our Site uses remarketing pixels from Meta Platforms, Inc, 1601 Willow Road, Menlo Park, CA 94025, USA. When you visit our Site, Meta may use a tracking technology called a pixel to collect information about your visit from our Site and elsewhere on the Internet. Meta then uses that information to provide measurement services and target ads to you and to others like you. You can learn how to opt-out from the Meta Pixel on our Site and on other websites by visiting Meta’s website here.

K. Data we collect on social media

Our websites include social media features, such as the Facebook share button. These features may collect your IP address and which page you are visiting on our site and may set a cookie to enable the feature to function properly. For more information on how these social media websites or other third parties are using your personal data, you can read the privacy policy of that organization.

L. Do-Not-Track Signals

Some browsers have a “Do-Not-Track” feature that lets you tell websites that you do not want to have your online activities tracked. When you choose to turn on the Do-Not-Track setting in your browser, your browser sends a signal to websites, analytics companies, ad networks, plug-in providers, and other web services that you may encounter while browsing the Internet, instructing them to stop tracking your activity via cookies or other online tracking technologies. The Site does not currently respond to browser-based Do-Not-Track signals. For information regarding Do-Not-Track and how to enable this setting if available on your devices, please see https ://allaboutdnt.com.

M. Third-Party Practices

The Site may contain links to other sites or apps, which are not owned or operated by us. We provide such links only as a convenience, and the inclusion of a link on the Site does not imply our endorsement of the linked site or app. Other sites may also reference or link to our Site. If you provide any personal data through a third-party website or app, your transaction will occur on such third party’s website (not our Site) or app and the personal data you provide will be collected by, and controlled by the privacy policy of, that third party. We are not responsible for the privacy practices or the content of such third-party website or app, including such website’s or app’s use of any personal data that you provide to them.

N. Third-Party Practices

Our disclosure of personal data to third-party advertising partners for targeted advertising purposes is deemed a sale of personal data under some state data privacy laws. We do not otherwise sell your personal data. Merz does not trade, rent, or share your personal information with third-party organizations other than those with which we partner in order to provide you with great Merz products and services and as described in the table above. For example, we will only send your contact information to physicians in our network if you request to receive additional information from them. Merz may also share personal data with authorized third-party service providers that perform services for us to help us manage our business and provide goods and services to our customers. For example, we may use service providers to host, maintain, and operate the websites, manage social media profiles, send communications, conduct research, manage and analyze data, and perform other services for us. If we share your personal information with third-party service providers, we do not authorize them to use or disclose it for any purpose other than the intended purpose.

O. Data retention and storage

Merz retains your information for business purposes, for as long as your account is active, or as long as is reasonably necessary to provide you with our products and services. Merz will also keep your information as reasonably necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

P. Data Security

We follow generally accepted industry standards to protect the personal data we collect or process. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while we strive to use commercially acceptable means to protect personal data, we cannot guarantee its absolute security.

Q. Collection of information from children

Merz recognizes the importance of protecting the privacy and safety of children. We direct our website and services towards adults in the general public and are towards children. We do not knowingly collect information about children under the age of 13. A parent or guardian of a child may contact us at 1-844-469-6379 and ask for our Privacy Office, which will help you with any request to information about your child.

R. International transfer of personal information

In addition, Merz may share customer information within our family of companies for a variety of purposes, for example to provide you with the latest information about our products and services and offer you our latest promotions. This may involve the transfer of personal data to other locations outside your home country to other Merz companies in different locations around the world. Merz complies with all international data transfer laws.

S. Changes to the data privacy policy

Merz may review and update this Privacy Policy periodically without any prior notice. Merz will post a notice to its website to inform you of any changes to our privacy policy and say when it was most recently updated.

T. Contact Information

If you have any questions about this Privacy Policy, you may contact the Data Protection Officer of Merz at:

Merz North America, Inc.
Privacy Officer
6501 Six Forks Road
Raleigh NC 27615
dataprivacy@merz.com

U. Notice to California Residents

The information in this section applies to residents of California. Please contact us at dataprivacy@merz.com if you have any questions about this Privacy Policy, including this section specific to California residents. You may print a copy of this Privacy Policy by selecting the “Print” button in your web browser. If you have any questions about this notice, please contact us at dataprivacy@merz.com.

(1) How We Collect and Use Personal Information

In accordance with the California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), please refer to Sections C-K above for details on:

the categories of personal information we collect and have collected in the last 12 months
the categories of sources from which the personal information is collected
the business or commercial purposes for which the personal information is collected or processed
the categories of personal information we have disclosed to third parties for business or commercial purposes in the last 12 months
for each category of personal information, the categories of third parties to whom we disclose and have disclosed the personal information for business or commercial purposes
the specific business or commercial purpose for disclosing the personal information
the categories of personal information we have sold or shared for targeted advertising purposes in the last 12 months
for each category of personal information, the categories of third parties to whom we have sold the personal information or shared personal information for targeted advertising purpose
the specific business or commercial purpose for selling or sharing the personal information

(2) Your Rights and How to Exercise Them

Under the CCPA, California residents have certain rights with regard to their personal information. Those rights may only apply in certain circumstances and may be subject to limitations or exceptions. A summary of those rights is provided below as well as information on how to exercise your rights. Please note that we will require certain identifying information about you as necessary for us to verify your request in accordance with applicable law.

Right to Know: You have the right to ask us to tell you the categories of personal information we collect, disclosed, sold or shared for targeted advertising purposes, the categories of sources from which the personal information is collected, the purposes for which we collected, sold or disclosed that information, and the categories of third parties to whom we disclose, sell or share for targeted advertising purpose the information. To exercise this right, please complete our online form available or email your request to dataprivacy@merz.com and include “Right to Know” in the subject line of your message.
Right to Access: You have the right to request access to the specific pieces of personal information we have collected about you. To exercise this right, please complete our online form or email your request to dataprivacy@merz.com and include “Right to Access” in the subject line of your message.
Right to Delete: You have the right to request us to delete the personal information we have collected or maintain about you. Please note that certain exceptions may apply to your right to delete information, such as when we must retain personal information as required or permitted by law and we will maintain a copy of your deletion request. We will notify you if any such exceptions apply to your request. To exercise this right, please complete our online form available or email us at dataprivacy@merz.com and include “Right to Delete” in the subject line of your message.
Right to Opt Out of Sale or Sharing: You have the right to opt out or ask us not to sell or share your personal information. You do not need to create an account with us to exercise this right. Please note that we do not share or sell your personal information in exchange for monetary compensation. We share your information with third parties to market our products or send you information about offers we think may be of interest to you, which is deemed a sale under CCPA. To exercise this right, please complete our online form available or email us at dataprivacy@merz.com and include “Exercising Data Subject Right” in the subject line of your message. To opt out of targeting cookies, please refer to Section D.
Right to Correct: You have the right to request that we correct any inaccurate personal information that we maintain about you. To exercise this right, please complete our online form available or email us at dataprivacy@merz.com and include “Right to Correct” in the subject line of your message.

We will not discriminate against you for exercising any of the rights noted above. However, we may offer certain financial incentives, charge reasonable fees related to your requests, or deny your right to know, right to access, or right to deletion in accordance with applicable law.

You can exercise these rights yourself or you can designate an authorized agent to make a request on your behalf. If you would like an authorized agent to submit a request on your behalf, please send us an email at dataprivacy@merz.com for instructions and details on proof and information required for use of an authorized agent.

(3) Children’s Personal Information

We do not knowingly sell or share the personal information of consumers under 16 years of age.

(4) Sensitive Personal Information

We do not use or disclose any sensitive personal information for purposes other than those specified in section 7027(m) of the CCPA regulations.

(5) Third-Party Marketing Disclosure

Under California Civil Code § 1798.83, California residents with whom we have a business relationship can request information about the types of personal information, if any, we shared with third parties for the direct marketing purposes of the third parties and the identities of the third parties with whom we shared such information in the immediately preceding 12 months. We do not share your Personal Information with third parties in this manner and have not done so in the last 12 months. You may request more information by contacting us at dataprivacy@merz.com.

V. Notice to Colorado Residents

The information in this section applies to residents of Colorado. This section addresses additional rights to Colorado residents. If you have any questions about this notice, please contact us at dataprivacy@merz.com.

(1) How We Collect and Use Personal Information

In accordance with the Colorado Privacy Act, including its implementing regulations (“CPA”), please refer to Sections C-K above for details on what personal information we collect, the purposes for our collection and processing of personal information and who we disclose or sell the personal information to.

We do not process personal information for the purpose of profiling in furtherance of decisions that produce legal or similarly significant effects concerning a consumer as defined under the CPA.

(2) Your Rights and How to Exercise Them

Under the CPA, Colorado residents have certain rights with regard to their personal information. Those rights may only apply in certain circumstances and may be subject to limitations or exceptions. A summary of those rights is provided below as well as information on how to exercise your rights. Please note that we will require certain identifying information about you as necessary for us to verify your request in accordance with applicable law. We will need to verify your identity and confirm you are a resident of Colorado before processing most requests, which may require us to request additional personal information from you. In order to verify your identity, we will generally require either the successful authentication of your account, or the matching of information you provide us to the information we maintain about you in our systems. We will use the personal information provided in connection with a request as needed to review and comply with the request. If you do not provide the necessary information, we may not be able to verify or complete your request in all circumstances. If you wish to submit a verifiable consumer request on behalf of a Colorado resident (including a minor child), then we will also need sufficient information to verify that the individual is the person about whom we collected personal information and that you are authorized to submit the request on their behalf.

If you would like an authorized agent to submit a request on your behalf, we will also need sufficient information to verify that then you are the individual about whom we collected personal information and that the agent is authorized to submit the request on your behalf. We may verify the authorized agent’s authority to act on your behalf as follows:

For requests to know, access, correct or delete Personal Information, or to opt-out of sale, targeted advertising or profiling, we may ask you to provide sufficient evidence to show that you have provided the authorized agent signed permission to act on your behalf, verified your own identity directly with us pursuant to the instructions set forth above, and directly confirmed with us that you provided the authorized agent permission to submit the request on your behalf.

Right to Know: You have the right to confirm whether or not we process your personal information and to access such personal information. To exercise this right, please complete our online form available or email your request to dataprivacy@merz.com and include “Right to Know” in the subject line of your message.
Right to Portability: You have the right to obtain a copy of your personal information that you previously provided to us in a portable, and to the extent technically feasible, readily usable format that allows you to transmit the personal information to another business without hindrance, where the processing is carried out by automated means. To exercise this right, please complete our online form or email your request to dataprivacy@merz.com and include “Right to Portability” in the subject line of your message.
Right to Correct: You have the right to request that we correct any inaccurate personal information that we maintain about you. To exercise this right, please complete our online form available or email us at dataprivacy@merz.com and include “Right to Correct” in the subject line of your message.
Right to Delete: You have the right to request us to delete the personal information we have collected or maintain about you. Please note that certain exceptions may apply to your right to delete information, such as when we must retain personal information as required or permitted by law and we will maintain a copy of your deletion request. We will notify you if any such exceptions apply to your request. To exercise this right, please complete our online form available or email us at dataprivacy@merz.com and include “Right to Delete” in the subject line of your message.
Right to Opt Out of Sale, Targeted Advertising or Profiling: You have the right to opt-out or direct us not to process your personal information for certain types of targeted advertising, to sell your personal information, or to process your personal information for profiling in furtherance of decisions that produce legal or similar significant effects on you. You do not need to create an account with us to exercise this right. Please note that we do not share or sell your personal information in exchange for monetary compensation. We share your information with third parties to market our products or send you information about offers we think may be of interest to you, which is deemed a sale under CPA. To exercise this right, please complete our online form available or email us at dataprivacy@merz.com and include “Exercising Data Subject Right” in the subject line of your message. To opt out of targeting cookies, please refer to Section D.
Right to Appeal: If we refuse to take action on a request, you have the right to appeal our decision within a reasonable time. To exercise this right, please complete our online form or email your request to dataprivacy@merz.com and include “Right to Appeal” in the subject line of your message.

(3) Non-discrimination

We do not discriminate against you for requesting any of the rights noted above. We will process your request in accordance with applicable law.

(4) Children’s Data

We will not process personal information of consumers we know to be less than 13 years of age unless we receive affirmative authorization from the parent or guardian of a child less than 13 years of age.

W. Notice to Connecticut Residents

The information in this section applies to residents of Connecticut. This section addresses additional rights to Connecticut residents. If you have any questions about this notice, please contact us at dataprivacy@merz.com.

(1) How We Collect and Use Personal Information

In accordance with the Connecticut Data Privacy Act, including its implementing regulations (“CTDPA”), please refer to Sections C-K above for details on what personal information we collect, the purposes for our collection and processing of personal information and who we disclose or sell the personal information to.

(2) Your Rights and How to Exercise Them

Under the CTDPA, Connecticut residents have certain rights with regard to their personal information. Those rights may only apply in certain circumstances and may be subject to limitations or exceptions. A summary of those rights is provided below as well as information on how to exercise your rights. Please note that we will require certain identifying information about you as necessary for us to verify your request in accordance with applicable law.

Right to Know: You have the right to confirm whether or not we process your personal information and to access such personal information. To exercise this right, please complete our online form available or email your request to dataprivacy@merz.com and include “Right to know” in the subject line of your message.
Right to Portability: You have the right to obtain a copy of your personal information that you previously provided to us in a portable, and to the extent technically feasible, readily usable format that allows you to transmit the personal information to another business without hindrance, where the processing is carried out by automated means. To exercise this right, please complete our online form or email your request to dataprivacy@merz.com and include “Right to Portability” in the subject line of your message.
Right to Correct: You have the right to request that we correct any inaccurate personal Information that we maintain about you. To exercise this right, please complete our online form available or email us at dataprivacy@merz.com and include “Right to Correct” in the subject line of your message.
Right to Delete: You have the right to request us to delete the personal information we have collected or maintain about you. Please note that certain exceptions may apply to your right to delete information, such as when we must retain personal information as required or permitted by law and we will maintain a copy of your deletion request. We will notify you if any such exceptions apply to your request. To exercise this right, please complete our online form available or email us at dataprivacy@merz.com and include “Right to Delete” in the subject line of your message.
Right to Opt Out of Sale, Targeted Advertising or Profiling: You have the right to opt-out or direct us not to process your personal information for certain types of targeted advertising, to sell your personal information, or to process your personal information for profiling in furtherance of decisions that produce legal or similar significant effects on you. You do not need to create an account with us to exercise this right. Please note that we do not share or sell your personal information in exchange for monetary compensation. We share your information with third parties to market our products or send you information about offers we think may be of interest to you, which is deemed a sale under CTDPA. To exercise this right, please complete our online form available or email us at dataprivacy@merz.com and include “Exercising Data Subject Right” in the subject line of your message. To opt out of targeting cookies, please refer to Section D.
Right to Appeal: If we refuse to take action on a request, you have the right to appeal our decision within a reasonable time. To exercise this right, please complete our online form or email your request to dataprivacy@merz.com and include “Right to Appeal” in the subject line of your message.

(3) Non-discrimination

We do not discriminate against you for requesting any of the rights noted above. We will process your request in accordance with applicable law.

X. Notice to Virginia Residents

The information in this section applies to residents of Virginia. This section addresses additional rights to Virginia residents. If you have any questions about this notice, please contact us at dataprivacy@merz.com.

(1) How We Collect and Use Personal Information

In accordance with the Virginia Consumer Data Protection Act (“VCDPA”), please refer to Sections C-K above for details on what personal information we collect, the purposes for our collection and processing of personal information and who we disclose or sell the personal information to.

(2) Your Rights and How to Exercise Them

Under the VCDPA, Virginia residents have certain rights with regard to their personal information. Those rights may only apply in certain circumstances and may be subject to limitations or exceptions. A summary of those rights is provided below as well as information on how to exercise your rights. Please note that we will require certain identifying information about you as necessary for us to verify your request in accordance with applicable law.

Right to Know: You have the right to confirm whether or not we process your personal information and to access such personal information. To exercise this right, please complete our online form available or email your request to dataprivacy@merz.com and include “Right to know” in the subject line of your message.
Right to Portability: You have the right to obtain a copy of your personal information that you previously provided to us in a portable, and to the extent technically feasible, readily usable format that allows you to transmit the Personal Information to another business without hindrance, where the processing is carried out by automated means. To exercise this right, please complete our online form or email your request to dataprivacy@merz.com and include “Right to Portability” in the subject line of your message.
Right to Correct: You have the right to request that we correct any inaccurate personal information that we maintain about you. To exercise this right, please complete our online form available or email us at dataprivacy@merz.com and include “Right to Correct” in the subject line of your message.
Right to Delete: You have the right to request us to delete the personal information we have collected or maintain about you. Please note that certain exceptions may apply to your right to delete information, such as when we must retain personal information as required or permitted by law and we will maintain a copy of your deletion request. We will notify you if any such exceptions apply to your request. To exercise this right, please complete our online form available or email us at dataprivacy@merz.com and include “Right to Delete” in the subject line of your message.
Right to Opt Out of Sale, Targeted Advertising or Profiling: You have the right to opt-out or direct us not to process your personal information for certain types of targeted advertising, to sell your personal information, or to process your personal information for profiling in furtherance of decisions that produce legal or similar significant effects on you. You do not need to create an account with us to exercise this right. Please note that we do not share or sell your personal information in exchange for monetary compensation. We share your information with third parties to market our products or send you information about offers we think may be of interest to you. To exercise this right, please complete our online form available or email us at dataprivacy@merz.com and include “Exercising Data Subject Right” in the subject line of your message. To opt out of targeting cookies, please refer to Section D.
Right to Appeal: If we refuse to take action on a request, you have the right to appeal our decision within a reasonable time. To exercise this right, please complete our online form or email your request to dataprivacy@merz.com and include “Right to Appeal” in the subject line of your message.

(3) Non-discrimination

We do not discriminate against you for requesting any of the rights noted above. We will process your request in accordance with applicable law.

Y. Notice to Utah Residents

The information in this section applies to residents of Utah. This section addresses additional rights to Utah residents. If you have any questions about this notice, please contact us at dataprivacy@merz.com.

(1) How We Collect and Use Personal Information

In accordance with the Utah Consumer Privacy Act (“UCPA”), please refer to Sections C-K above for details on what personal information we collect, the purposes for our collection and processing of personal information and who we disclose or sell the personal information to.

(2) Your Rights and How to Exercise Them

Under the UCPA, Utah residents have certain rights with regard to their personal information. Those rights may only apply in certain circumstances and may be subject to limitations or exceptions. A summary of those rights is provided below as well as information on how to exercise your rights. Please note that we will require certain identifying information about you as necessary for us to verify your request in accordance with applicable law.

Right to Know: You have the right to confirm whether or not we process your personal information and to access such personal information. To exercise this right, please complete our online form available or email your request to dataprivacy@merz.com and include “Right to Know” in the subject line of your message.
Right to Portability: You have the right to obtain a copy of your personal information that you previously provided to us in a portable, and to the extent technically feasible, readily usable format that allows you to transmit the personal information to another business without hindrance, where the processing is carried out by automated means. To exercise this right, please complete our online form or email your request to dataprivacy@merz.com and include “Right to Portability” in the subject line of your message.
Right to Delete: You have the right to request us to delete the personal information we have collected or maintain about you. Please note that certain exceptions may apply to your right to delete information, such as when we must retain Personal Information as required or permitted by law and we will maintain a copy of your deletion request. We will notify you if any such exceptions apply to your request. To exercise this right, please complete our online form available or email us at dataprivacy@merz.com and include “Right to Delete” in the subject line of your message.
Right to Opt Out of Sale and Targeted Advertising: You have the right to opt-out or direct us not to process your personal information for certain types of targeted advertising, or to sell your Personal Information. You do not need to create an account with us to exercise this right. Please note that we do not share or sell your personal information in exchange for monetary compensation. We share your information with third parties to market our products or send you information about offers we think may be of interest to you. To exercise this right, please complete our online form available or email us at dataprivacy@merz.com and include “Exercising Data Subject Right” in the subject line of your message. To opt out of targeting cookies, please refer to Section D.

(3) Non-discrimination

We do not discriminate against you for requesting any of the rights noted above. We will process your request in accordance with applicable law.

Country

Merz North America Privacy Policy