Merle Norman Franchise Opportunity Privacy Notice

Effective Date: May 11, 2026

1. Introduction

Welcome. You have arrived at a website provided by Merle Norman Cosmetics, Inc. (“Merle Norman,” “MNC,” “we,” “our” or “us”).

At Merle Norman, we take your privacy seriously. We provide this Privacy Notice (“Notice”) to tell you what information we collect about you, how we obtain it, how we share it, and how you may limit the ways in which we use your Personal Information. If you have questions about this Notice after you review it, feel free to contact us using the methods in the Contact Us section below.

2. Scope

This Notice governs the Merle Norman Cosmetics Franchise Opportunity website, merlenormanfranchise.com, its subdomains, and all subdomains or portals that link to this Notice (“Site”) or otherwise when you provide Personal Information or interact with us online or in person related to the MNC Franchise Opportunity. For the purpose of this Notice, “Personal Information” means any information relating to an identified or identifiable individual that is protected by applicable privacy laws. The definition of Personal Information does not include publicly available information from federal, state, or local government records, such as professional licenses and real estate or property records.

We refer to all the above as our “Services.” Our Services are used by our partners (“Business Partners”), potential franchise owners (“Franchise Applicants”), current franchise owners (“Franchise Owners”), and website visitors (“Site Visitors”).

By using our Site or otherwise using our Services, you acknowledge this Notice and agree to our Terms and Conditions (“Terms”).

3. What Information We Collect

As a rule, we limit the Personal Information we collect to that which is adequate, relevant and reasonably necessary for us to provide our Services to you.

Information That You Provide to Us

As you interact with our Site or Services, we collect the following Personal Information via webforms or inputs/uploads on our Site, and through telephone calls, text messages, letters, emails, and other communications with you.

Site Visitors

• If you submit a webform requesting information about becoming a Franchise Applicant, we request your first and last name, email address, telephone numbers, mobile numbers, city, and state, as well as general net worth and liquid asset.
• Social media handles, content and other data shared with us through third-party features that you use on our Site (such as tools, widgets and plug-ins offered by social media services like Facebook, Instagram, Twitter and Pinterest) or posted on social media pages (such as our social media pages or other pages accessible to us).

Business Partners

• Contact information such as your first and last name, job title, email address, business address, shipping address, telephone numbers, mobile numbers; and
• Financial information such as your business credit card or debit card number, bank account information and your payment, service and purchase history.

Franchise Applicants/Owners

• Contact information such as your first and last name, username, email address, home or business address, shipping address, telephone numbers, mobile numbers;
• Identifiers such as a driver’s license number, passport number, and/or Social Security Number;
• Social media handles (optional);
• Educational background;
• Employment history;
• Spouse's first and last name and basic employment information;
• Financial information, including assets, liabilities, income and sources,
• Credit check and credit history;
• Photo (optional) and
• Other information that could reasonably be used to identify you personally.

Information That Is Automatically Collected

Like many businesses, we and our service providers automatically collect and/or store certain information when you visit or interact with the Site (“Usage Information”), including via cookies and other tracking technologies (see Use of Cookies and Other Tracking Technologies section below). This Usage Information may be stored and/or accessed from your personal computer, laptop, tablet, mobile phone, or other device (“Device”) whenever you visit or interact with our Site. Usage Information includes:

• Your IP address, IDFA, Android/Google Advertising ID, IMEI, or another unique identifier;
• Your Device functionality (including browser, browser language, settings and behavior, operating system, hardware, mobile network information);
• Referring and exit web pages and URLs;
• The areas within the Site that you visit and your activities there, including remembering you and your preferences;
• Your Device location or other location information, including the zip code, state, or country from which you accessed the Site;
• Your Device characteristics (such as device type (computer vs. mobile) and ID, operating system, hardware);
• Certain other Device data, including the time of day you visit our Site or other information used to provide analytics or other usage information;
• Information about your engagement with our emails; and
• Statistical information about how both unregistered and registered users, collectively, use the Site and Services.

We may record your voice when you leave a voicemail with us.

Information Collected from Third Parties

The Site includes functionality that allows certain kinds of interactions between the Site and your account on a third-party website or application. The use of this functionality may involve the third-party site providing information to us. For example, we might obtain information about the traffic and usage of Merle Norman from third parties. We might also provide links to make it easier to send a communication from the Site, or we may use third parties to make it easier to send emails or post to social media (like a “Share” or “Forward” button). These third parties also use cookies and other tracking technologies to capture information about your interactions with Merle Norman.

Merle Norman does not have control over the information that is collected, used, and shared by these third parties. We encourage you to review the privacy statements of these third parties to understand their privacy practices.

Information We Infer

We derive information or draw inferences about you based on information we collect about you. For example, based on your browsing, we may infer your interest in certain activities or brands.

4. Use of Cookies and Other Tracking Technologies

We may use various methods and technologies (“Tracking Technologies”) to store or collect Usage Information, to recognize your browser or device, learn more about your interests to personalize your experience, and deliver our Site and Services to you. These tracking technologies allow us and other third parties to collect information such as your device type, browser type, interactions with our Site,

geographic location, your web request, the date and time of your web request, your Internet Protocol address, the domain name of your Internet service provider and other data. If you can be identified from this information, for example by combination with other pieces of information, then we will treat this information as Personal Information. Tracking Technologies may set, change, alter or modify settings or configurations on your Device. By using this Site, you consent to our use of Tracking Technologies. To exercise your choices regarding Tracking Technologies, please click on Your Privacy Choices at the bottom of the webpage.

Types of Tracking Technologies We Use

A few of the Tracking Technologies used on the Site include, but are not limited to, the following (there may be future-developed tracking technology or methods that are not listed here):

• Cookies. A cookie is a file placed on a Device to uniquely identify your browser or to store information on your Device. Cookies themselves don’t hold Personal Information. They only have a unique alphanumeric identifier that sits on your browser. And in many cases, we won’t be able to link the information we collect by using a cookie back to you. They can, however, enable us to link that information back to you and your Personal Information. Our Site may use HTTP cookies, HTML5 cookies, and other types of cookie technology to store information on local storage.
• Pixels: A pixel is a small graphic file that allows us and third parties to monitor the use of the Site and provide us with information based on your interaction with the Site. These tags may collect the IP address from the device on which you loaded the page and the browser type. Pixel tags are also used by our third parties to collect information when you visit our site, the links and other actions you take on our Site, and we may use this information in combination with cookies to display targeted advertisements.
• Web Beacons. A Web Beacon is a small tag (which may be invisible to you) that may be placed on our Site’s pages and messages.
• Embedded Scripts. An embedded script is programming code that is designed to collect information about your interactions with the Site, such as the links you click on.
• ETag, or entity tag. An ETag or entity tag is a feature of the cache in browsers. It is an opaque identifier assigned by a web server to a specific version of a resource found at a URL.
• Browser Fingerprinting. Collection and analysis of information from your Device, such as, without limitation, your operating system, plug-ins, system fonts, and other data, for purposes of identification.
• Recognition Technologies. These technologies, including application of statistical probability to data sets, attempt to recognize or make assumptions about users and devices (e.g., that a user of multiple devices is the same user).
• Other data technologies may be used that collect comparable information for security and fraud detection purposes.

We may also engage third parties, such as Google Analytics or Meta, to track and analyze non-personally and personally identifiable website data and to serve advertisements. To do so, we may permit third parties to place cookies on devices of users of our Site, where permitted by law, and subject to your right to opt out through the Site. We use the data collected to help us administer and improve the quality of the Site and to analyze the Site’s usage. Such third parties may combine the information that we provide about you with other information that they have collected. These third parties are required to use your information in accordance with this Privacy Notice. We will record all such disclosures and will use reasonable efforts to ensure that such third parties do not use your Personal Information for any purpose that is not expressly provided for herein.

We classify our cookies into the following categories:

• Essential. Also known as “strictly necessary,” these cookies are essential for you to browse the Site and use its features, such as accessing secure areas of the site. You cannot disable this type of cookie on our Site.
• Functionality cookies. Also known as “preference cookies,” these cookies allow the Site to remember choices you have made in the past, like what language you prefer, or what your username and password are so you can automatically log in. Disabling these cookies can cause some parts of the Site to not work properly, so we discourage you from disabling these cookies.
• Performance cookies. Also known as “analytics cookies,” these cookies collect information about how you use a website, like which pages you visited and which links you clicked on. Their purpose is to improve website functions. This includes cookies from third-party analytics services if the cookies are for the exclusive use of the owner of the website visited. In some jurisdictions, you may be able to turn these cookies off.
• Marketing. Also known as “targeting and advertising cookies,” these cookies track your online activity to help advertisers deliver more relevant advertising or to limit how many times you see an ad. These cookies can share that information with other organizations or advertisers. These are persistent cookies and are almost always from third parties. In some jurisdictions, you may be able to turn these cookies off.

There are many ways to control cookies. For example, you can alter the configuration of your browser to refuse to accept cookies, but it is possible that doing so may cause limited functionality of the Site. In so doing, we may not be able to recognize your computer or device, and you may need to log in every time you visit. You can also opt out of non-essential cookies by opting-out of cookies in our Site’s cookie preference center or enabling an Opt-Out Preference Signal (OOPS). OOPS is also commonly referred to as Global Privacy Control (GPC).

To control the use of cookies on most of the popular web browsers, you can use the links below to modify your web browser’s settings:

• Apple Safari
• Google Chrome
• Microsoft Edge
• Mozilla Firefox

Our Use of Google Analytics Advertising Features

We use the following Google Analytics Advertising Features:

• Remarketing,
• Display Network Impression Reporting,
• Demographics and Interest Reporting and/or
• Certain integrated services that require Google Analytics to collect data for advertising purposes, including the collection of data via advertising cookies and identifiers.

With respect to these advertising features, Merle Norman is the sole controller under all applicable data protection legislation. We will not identify users or facilitate the merging of Personal Information with additional information collected through any Google advertising product or feature unless we have your affirmative opt-in consent to that identification or merger.

You can opt out of Google Adwords Remarketing here.

You can block Google Analytics from accessing your online activity with a browser add-on here.

Separately, you can change your Facebook Ad Preferences here.

General Cookie Information

To generally find out more about cookies, visit this site which also has instructions on how to opt out of targeted advertising cookies here. More opt-out resources are also available from the Digital Advertising Alliance. We do not control these opt-out links or whether any organization chooses to participate in these opt-out programs. Please note that even if you exercise the opt-out choices above, you may continue to receive advertisements, for example, ads based on the website you are viewing (e.g., contextually based ads), or ads that are not targeted at you and may be less relevant. Also, if your browser (like some Safari browsers) is configured to reject opt-out cookies when you opt out on the DAA websites, your opt-out may not be effective. We always do our best to honor your choices, but because some choices are set at the browser or device level, you may have to make these choices multiple times if you use different browsers or different Devices.

5. Why We Collect Information

We use the information we collect about you in a variety of ways, including the following:

To Provide Our Services

We process certain Personal Information when you access or use our services, including to:

• operate, maintain, and improve the Site and its services;
• enable you to access and use the Site;
• send you notices, updates, security alerts, and support or other messages;
• provide and deliver the information and services you request, process applications, and send you related information, including requests for additional information and confirmations;
• process your requests for services;
• support and improve our rewards program; and
• facilitate the functionality of our Site.

To Communicate with You

We process certain information to communicate with you in relation to your accounts, our services, our marketing, and your requests, including to:

• communicate with you about your application, franchise owner accounts, programs, and contests;
• respond to your customer service inquiries and requests for information;
• post your comments or statements on our Site;
• send you personalized promotions, content, and special offers;
• communicate with you about our brands, products, events, or other promotional purposes;
• implement your communications preferences, such as sharing information with our Business Partners so that they may email you about their promotions, products and initiatives; and
• provide important product safety information and notice of product recalls.

For Improvement of Our Site or Services

We want to ensure that our Site and Services are continually improving and expanding so that we meet and exceed your needs and expectations. To do so, we may process certain Personal Information, including to:

• test, research, analyze, or develop products;
• maintain, improve, and analyze our Site or Services; and
• detect, prevent, or investigate suspicious activity or fraud.

For Profiling

We use Personal Information to personalize your experience and improve our services. This may include creating profiles that allow us to send communications and/or advertisements that may be more appropriate for or interesting to you. We do not use profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

To Comply with Applicable Laws

We may be required to process certain Personal Information under certain laws and regulations, such as tax laws, as well as to:

• maintain appropriate records for internal administrative purposes; and
• comply with applicable legal and regulatory obligations, and respond to lawful governmental requests, as needed.

To Enforce our Terms, Agreements, or Policies

To maintain a safe, secure, and trusted environment for you when you use our Site and Services, we use your Personal Information to ensure our terms, policies, and agreements with you and any third parties are enforced.

To Evaluate Your Franchise Application

We use your Personal Information to evaluate your application for an MNC franchise opportunity.

With Your Consent

We process certain Personal Information to fulfill any other business or commercial purposes at your direction or with your consent.

Training Large Language Models (LLMs)

We do not collect, use, or sell your Personal Information for the purpose of training LLMs.

6. When We Disclose Information

To the extent permitted by law, certain Personal Information about you may be disclosed in the following situations:

• Service providers. To provide information to our affiliates and nonaffiliated third parties who perform services or functions for us in conjunction with our services to you, but only if we have a contractual agreement with the other party that prohibits them from disclosing or using the information other than for the purposes for which it was disclosed. Examples include automated communications to deliver important and/or emergency messages.
• Marketing and advertising. We also may share your information, including your Personal Information, with our affiliates and other third parties, such as companies with whom we have marketing or other relationships, for direct marketing purposes. Examples include email and SMS providers for marketing. In addition, we may share the information we have collected about you, including Personal Information, as disclosed at the time you provide your information and as described in this Notice.
• Legal process. To comply with a validly issued and enforceable subpoena or summons; as a part of any actual or threatened legal proceedings or alternative dispute resolution proceedings either initiated by or against us, provided we disclose only the information necessary to file, pursue, or defend against the lawsuit and take reasonable precautions to ensure that the information disclosed does not become a matter of public record.
• Compliance. In the course of a review of our practices under the authorization of a state or national licensing board, or as necessary to properly respond to an inquiry or complaint from such a licensing board of organization.
• Business transactions. In conjunction with a prospective purchase, sale, or merger of all or part of our business, if we take appropriate precautions (for example, through a written confidentiality agreement) so the prospective purchaser or merger partner does not disclose information obtained in the course of the review.

Finally, we may aggregate, de-identify, and/or anonymize any information collected through the Site or Services such that such information is no longer linked to your Personal Information. We may use and share this aggregated and anonymized information (non-Personal Information) for any purpose, including without limitation, for research and marketing purposes, and may also share such data with our affiliates and third parties, including advertisers, promotional partners and others.

7. Automated Decision Making

We do not use automated decision-making technologies that produce an adverse legal effect on you.

8. Your Choices About the Information We Collect

Communications Preferences

We prefer to keep your Personal Information accurate and up to date. If you would like to change your contact information, please contact us using the information in the Contact Us section below. We will make good faith efforts to make requested changes in our then active databases as soon as reasonably practicable (but we may retain prior information as business records).

You can opt out of receiving marketing emails or text messages from us at any time. You will still receive transactional messages from us. To manage your email preferences with us, please click on the Unsubscribe link in any email you receive from us or contact us using the information in the Contact Us section below. Your choice will not affect our ability to share information in the other ways described in this Notice. To opt out of text messages from us, text “STOP” at any time. For more information on SMS and text messaging, please see our Terms.

Controlling Your Cookies

You can opt out of cookies by enabling an opt-out preference signal on your browser or opting out of cookies in our Site’s cookie preference centers. To exercise your choices regarding cookies or other Tracking Technologies, please click on Your Privacy Choices at the bottom of the webpage. Please refer to section 4. Use of Cookies and Other Tracking Technologies for more information.

Note that if you turn cookies off, you may be unable to access certain parts or benefit from the full functionality of the Site. To learn more about cookies and similar technologies or to opt-out of targeted advertising cookies, visit resources from the Digital Advertising Alliance (DAA). We do not control these opt-out links or whether any organization chooses to participate in these opt-out programs.

Please note that even if you exercise the opt-out choices above, you may continue to receive advertisements, for example, ads based on the website you are viewing (e.g., contextually based ads), or ads that are not targeted at you and may be less relevant. Also, if your browser (like some Safari browsers) is configured to reject opt-out cookies when you opt out on the DAA websites, your opt-out may not be effective.

Do Not Track

Do Not Track (DNT) is a web browser feature that requests that a web application disable its tracking of an individual user. There is no universally agreed upon standard for what an organization should do when it detects a DNT signal. Currently, we do not monitor or take any action with respect to these signals or other mechanisms. You can learn more about Do Not Track here.

9. Retention of Personal Information

Merle Norman will retain your Personal Information only for as long as is necessary for the purposes set out in this Notice. We will retain and use your Personal Information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

All information you provide to us is stored on our secure servers or those of our third-party data storage providers.

We utilize the following criteria to determine the length of time for which we retain Personal Information:

• How long we have had a relationship with you or provided our Services to you;
• The business purposes for which the information is used, and the length of time for which the information is required to achieve those purposes;
• Whether we are required to retain the information, or the information is otherwise necessary, in order to comply with legal obligations or contractual commitments; defend against potential legal claims; detect or prevent potential illegal activity or actions in violation of our policies and procedures; secure our systems and online environment; or protect health and safety;
• The privacy impact on individuals of ongoing retention; and
• The manner in which information is maintained and flows through our systems, and how best to manage the lifecycle of information in light of the volume and complexity of the systems in our infrastructure.

10.Children’s Privacy

Our Site is not intended for use by children under the age of 13. We do not request, or knowingly collect, any personally identifiable information from children under the age of 13. If you are the parent or guardian of a child under 13 who you believe has provided her or his information to us, please contact us using the information in the Contact Us section below to request the deletion of that information.

11.Visitors to the Site Outside of the United State

Our Site is not intended for visitors outside of the United States and we do not direct our activities at users outside of the United States. If you are visiting the Site from a location outside of the U.S., your connection will be through and to servers located in the U.S. All information you receive from the Site will be created on servers located in the U.S., and all information you provide will be maintained on web servers and systems located within the U.S. The data protection laws in the United States may differ from those of the country in which you are located, and your information may be subject to access requests from governments, courts, or law enforcement in the United States according to laws of the United States. By using the Site or providing us with any information, you consent to the transfer to, and processing, usage, sharing and storage of your information in the United States and in other countries, as set forth in this Notice.

12.Links

For your convenience, the Site and this Notice may contain links to other websites. Merle Norman is not responsible for the privacy practices, advertising, products, services, or the content of such other websites. None of the links on the Site should be deemed to imply that Merle Norman endorses or has any affiliation with the links.

13.Security

We incorporate commercially reasonable safeguards to help protect and secure your Personal Information. However, no data transmission over the Internet, mobile networks, wireless transmission, or electronic storage of information can be guaranteed 100% secure. As a result, we cannot guarantee or warrant the security of any information you transmit to or from the Site, and you provide us with your information at your own risk.

14.Your California Privacy Rights

This section of the Notice applies solely to California residents. We adopt this Section to comply with the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act (CPRA). Any terms defined in the CCPA have the same meaning when used in this Section.

California residents have the following rights:

• To access and know the Personal Information we have about you;
• To correct your Personal Information;
• To delete the Personal Information you have provided to us, with certain exceptions;
• To opt out of the sale or share of Personal Information, including targeted advertising;
• To limit the use and disclosure of Sensitive Personal Information to purposes other than those permitted by the CCPA;
• To opt out of certain automated decision-making technology used to make significant decisions about you, and to request meaningful information about the logic involved and the likely outcome of such processing, as applicable; and
• Not to be discriminated against for exercising your privacy rights.

Request for Information, Correction, or Deletion

California residents have the right to request, under certain circumstances, that a business that collects Personal Information about them discloses the information listed below for the preceding 12 months:

• The categories of Personal Information collected about you;
• The categories of sources from which the Personal Information is collected;
• The business or commercial purpose for collecting, selling or sharing Personal Information;
• The categories of third parties to whom we disclose Personal Information; and
• The specific pieces of Personal Information collected about you.

Please note that if we collected information about you for a single one-time transaction and do not keep that information in the ordinary course of business, that information will not be retained for purposes of a request under this section. In addition, if we have de-identified or anonymized data about you, we are not required to re-identify or otherwise link your identity to that data if it is not otherwise maintained that way in our records.

You can also request that we correct or delete your Personal Information. There may be certain exceptions to our obligation to correct or delete your information, such as when you have an existing contract or transaction with us or if we have a legitimate business reason to keep your information.

Personal Information Collected

We have collected the following categories of Personal Information from consumers within the last twelve (12) months:

Chart 1: Personal Information Collected, Sources, Purposes

Information related to how long we retain each category of Personal Information is included in the Retention of Personal Information section above.

Personal Information Sold or Shared

We have sold or shared (as those terms are defined in the CCPA) to third parties the following Categories of Personal Information in the last twelve (12) months:

Chart 2: Personal Information Sold or Shared

We do not have actual knowledge that we sell or share the Personal Information of consumers under 16 years of age.

Personal Information Disclosed for Business Purposes

We have disclosed the following categories of Personal Information for business purposes in the last twelve (12) months:

Chart 3: Personal Information Disclosed for Business Purposes

Do Not Sell My Personal Information

As a California resident, you also have the right, at any time, to tell us not to sell or share Personal Information – this is called the “right to opt-out” of the sale or share of Personal Information. We do not sell Personal Information, but we recognize that some privacy laws define “Personal Information” in such a way that making available identifiers linked to you for a benefit may be considered a “sale” or “share.” To opt out of this, please click on Your Privacy Choices at the bottom of the webpage.

Right to Limit Use of Sensitive Personal Information

We only use Sensitive Personal Information, such as Social Security numbers, driver's license numbers, and passport numbers, to provide the services you requested. We do not use or disclose your Sensitive Personal Information for any other purposes.

Right Not to Be Discriminated Against

Exercising privacy rights will not adversely affect your application or franchise relationship with MNC, to the extent permitted by law. Unless permitted by California law, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you with a different level or quality of goods or services.
• Suggest that you receive a different price or rate for goods or services or a different level or quality of goods or services.

Notice of Financial Incentives

We may offer you a one-time discount when you apply for a Franchise Opportunity or open a studio. We collect your email address when you sign up, which allows us to tailor our communications and product suggestions for you. This, in turn, helps us establish a stronger relationship with you – something we at Merle Norman value. 

For more information on the categories of personal information we collect, what we use it for, with whom we share the personal information, and whether we sell that information and to whom, please review the Privacy Charts.

In determining the value of this data to Merle Norman, we consider the profit generated from Franchise Opportunities, Studios, and products purchased, which is reasonably correlated to the value provided through the discount offered.  

Participation is voluntary and requires your prior opt-in consent, which you may revoke at any time. If you wish to unsubscribe from email marketing, use the unsubscribe link in the email or contact us through our Contact Us form. To opt out of offline sharing for advertising, please use Contact Us form or call +1 (800) 421 6648.

Third Party Marketing (“Shine The Light” law)

If you are a California resident with an established business relationship with us, you have the right under California Civil Code Section 1798.83 to request information regarding the disclosure of your Personal Information to third parties for their own direct marketing purposes in the preceding calendar year. You have the right to prevent disclosure of Personal Information, and we provide a cost-free option to exercise that right below in “Exercising Your California Privacy Rights.” Please include “Shine the Light Opt Out” in your request. We do not disclose Personal Information to third parties for their own direct marketing purposes if you have exercised your opt-out right.

Exercising Your California Privacy Rights

You or your authorized agent may make a request to access and know, correct, delete, opt-out of the sale or share of your Personal Information, limit the use and disclosure of your Sensitive Personal Information, or opt out of certain automated decision-making technology.

To exercise your privacy rights, you may submit your request to us by contacting us at any of the following: Phone: +1 (800) 421 6648 or  Contact Us form.

If you use an authorized agent to submit your request, we may require proof of the written authorization you have given. We also may require you to confirm your identity and your residency for access and know, correct, and delete requests, and you are only entitled to make certain requests twice in 12 months. We will acknowledge your request within 10 days and respond to your request within 45 days or let you know if we need additional time. If you make this request by telephone, we may also ask you to provide the request in writing so that we may verify your identity for non-opt-out requests. If we are unable to honor your request for any reason, we will notify you of the reason within the request time period.

15.Your Privacy Rights under Other US State Laws

Residents of Alabama, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Texas, Tennessee, Utah, Virginia, or any other state with an applicable privacy law have certain rights relating to the collection, use, disclosure, and other processing of their Personal Information. The exact scope of these rights may vary by state and depending on certain exceptions. This may include the right:

• To confirm whether or not a controller is processing your Personal Information and to access such Personal Information;
• To know the categories of Personal Information we collect about you, the purposes for the collection, how long we retain your Personal Information, and whether that information is sold or shared or disclosed and to whom;
• To correct inaccuracies in your Personal Information;
• To delete your Personal Information;
• To obtain a copy of your Personal Information that you previously provided to us in a portable, and if technically feasible, readily usable format, if processing is carried out by automated means;
• To opt out of the processing of your Personal Information for purposes of (i) targeted advertising, (ii) the sale of Personal Information, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.

To exercise any of these rights, you may submit your request to us by contacting us at any of the following: Phone: +1 (800) 421 6648 or  Contact Us form.

We may require you to confirm your identity and your residency for access and know, correct, and delete requests, and you are only entitled to make certain requests up to twice annually.

We will process your request within 45 days or let you know if we need additional time or cannot process your request. If you make this request by telephone, we may also ask you to provide the request in writing so that we may verify your identity for non-opt-out requests. If we are unable to honor your request for any reason, we will notify you of the reason within the request time period.

Right to Opt Out

You may have the right to opt out of the processing of your Personal Information for purposes of (i) targeted advertising, (ii) the sale or share of Personal Information, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. To exercise your right, please click on Your Privacy Choices at the bottom of the webpage where your information is being collected.

Opt-Out Preference Signals

Some browsers and browser extensions support opt-out preference signals such as the Global Privacy Control (GPC) that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including data sales. GPC is a web browser-level setting, maintained by either a browser or a browser extension, that a user or privacy-focused technology can set. In certain regions, when we detect such a signal, we treat opt-out preference signals as a valid request to opt-out of the sale or sharing of your Personal Information. When we detect such a signal, we will apply it without requiring additional steps from you.

Opt-out preference signals generally apply to the specific browser or device from which the signal is sent. If you are logged into a consumer account with us, we may, where required by law and technically feasible, associate the signal with your account so that it applies more broadly. Otherwise, the signal may need to be enabled separately on each browser or device.

You may also exercise your right to opt out through other methods described in this Privacy Notice, including designated opt-out links or account settings, where available.

Appeals of Our Decisions

In some jurisdictions, you may appeal to us if we refuse to take action on your exercise of certain choices described above. To appeal such a refusal, please submit a request via our Contact Us form.

If we decline to take action on any request you make, we will provide you with the information required by the a

information on how to appeal our decision, and/or how to make a complaint to your state Attorney General.

16.Changes to This Privacy Notice

We may change this Privacy Notice at any time. We will post all changes to this Notice on this page and will indicate at the top of the page the modified policy’s effective date. We encourage you to refer to this page on an ongoing basis so that you are aware of our current Notice. If required by the applicable law, we will notify you of the changes.

By continuing to use the Site or Services or providing us with information following such a replacement Notice being uploaded, you agree that you will be bound by the Privacy Notice as changed.

17.Contact Us

If you have questions or concerns regarding this Notice, contact us using our  Contact Us form, by phone or by mail at:

Merle Norman Cosmetics, Inc. Attention: Franchise Operations

9130 Bellanca Avenue

Los Angeles, California 90045

For products, orders and general customer service: +1 (800)788-1191

For privacy and franchise information: +1 (800)421-6648