Welcome to our website www.carolinaherrera.com (hereinafter, the “Website”). We kindly ask you to read this Privacy Policy carefully.

1. Our Commitments

Every individual has the right to the protection of their personal data, which includes any information relating to an identified or identifiable living person (hereinafter, “Personal Data”). We respect the right of users to be informed about the collection and other operations involving their Personal Data. We will always apply the principle of strict necessity when using data that may directly or indirectly identify you. For this reason, we have designed the Website to minimize the use of your Personal Data and to respect the limitation imposed by the purposes for which it is collected or processed.

We will not process your Personal Data when we can provide the relevant services using anonymous data (such as market research conducted to improve our services) or by other means that do not allow us to identify you, except when strictly necessary or when requested by competent authorities or the police (for example, in the case of traffic data or your IP address).

2. Data Controller

For the purposes of Data Protection Legislation (as defined below), PUIG Group companies that may need to access and process Personal Data collected on the Website for one of the purposes listed below will be considered, separately and independently, controllers of your Personal Data.

• Marketing and other purposes (including general online customer service and information/claims related to the Website): Antonio Puig S.A.U., a Spanish company with registered office at Plaza d’Europa 46-48, L’Hospitalet de Llobregat 08902, Barcelona (Spain), registered with number A08158289 (hereinafter, “APSA”).

• Online Sales: managed by the relevant Puig Selling Entity, as defined in the applicable Terms and Conditions of Sale. This entity will act as controller of the personal data collected and processed through the Website for commercial purposes.

• Offline Sales: any data collected at a PUIG physical point of sale may be processed by the Selling Entity for sales-related purposes (including personalized communications) and by ANTONIO PUIG for marketing purposes (including newsletters and other communications).

PUIG undertakes to treat all information provided online by a user as strictly confidential.

This Privacy Policy refers to the Personal Data of any user accessing the Website, using its services, or filling in forms, whether or not a product is purchased. By using the Website, you agree to the practices described in this Privacy Policy.

You must inform Customer Service of any changes to your Personal Data to ensure accuracy. You are responsible for the accuracy of the information you provide, and we reserve the right to suspend or terminate services if inaccurate data is provided.

For any issue or question related to this Privacy Policy, you may contact:
Email: [email protected]

3. Applicable Legislation

Personal Data collected through the Website or product purchases will be processed in accordance with the applicable laws of the user’s country of residence, including:

• For residents of the Republic of Chile: Law No. 19.628 and any amendments or replacements, without prejudice to local consumer protection laws.

• Any other applicable conflict-of-law rules.

4. Purposes of Processing Personal Data and Legal Basis

PUIG processes Personal Data for the following purposes:

• Online Sales: to provide e-commerce services (e.g., product shipping, handling incidents, or transmitting data to service providers). Legal basis: contractual obligations.

• Third-Party Data: users may disclose third-party data (e.g., sending gifts, recommending products). Users must ensure prior consent; PUIG assumes no liability if such consent is not obtained.

• Marketing Purposes: with your consent (or as permitted by law), we may send commercial information, product news, offers, promotions, event invitations, etc., via email, phone, SMS, postal mail, instant messaging, push notifications, or digital advertising (including on Facebook, Instagram, Google, Snapchat, Pinterest, TikTok).

• Security Purposes: based on legitimate interests, we may use IP addresses, device data, and usage patterns to prevent fraud, identity theft, phishing, and unauthorized account use, and share data with authorities if irregularities are detected.

5. What Happens If You Do Not Provide Personal Data?

Certain Personal Data (name, email, postal address, etc.) is necessary to process purchases or provide requested services. Failure to provide such data may prevent us from fulfilling obligations or processing orders. Optional data will always be clearly marked.

6. With Whom Will We Share Your Personal Data?

• Third-party service providers (IT, logistics, payment platforms, marketing, customer service) acting as data processors.

• PUIG companies, distributors, and licensees in the EU and abroad for their own marketing purposes.

• If you opt in for CH Carolina Herrera communications, your data may be shared with STL – Sociedad Textil Lonia, S.A., which will act as an independent controller.

• Authorities, if legally required.

7. Security Measures and Data Retention

We have adopted security measures to prevent accidental or unlawful destruction, loss, alteration, or unauthorized access to Personal Data.

We recommend using updated antivirus software and ensuring your Internet provider adopts security measures such as firewalls and anti-spam filters.

Data is retained only as long as necessary for the purposes described, or until you withdraw consent. Data will then be deleted.

8. Transfer of Personal Data Abroad

Personal Data will be stored within Chile or in other countries guaranteeing an adequate level of protection. Data may be transferred to third countries only if adequate safeguards are provided.

9. Your Rights Regarding Personal Data

Depending on applicable law, you may exercise the following rights:

• Right to withdraw consent at any time (may affect services).

• Right of access to confirm if we process your Personal Data and to obtain details.

• Right of rectification of inaccurate or incomplete data.

• Right of erasure (“right to be forgotten”), under applicable law.

• Right to object to processing, including automated decision-making and profiling.

• Right to data portability: to receive your data in a structured format and transfer it to another controller.

• Right to lodge a complaint with the competent supervisory authority.

10. Opt-in/Opt-out

Whenever consent is required, PUIG will inform you in advance and provide the option to grant or refuse it.

We may also process Personal Data without consent when necessary to comply with legal obligations or contractual requirements.

11. Contact

For questions about your Personal Data or this Privacy Policy, contact:
Email: [email protected]

Or contact our Data Protection Officer at:
Email: [email protected]
Postal Address: Puig Brands, S.A. – Attn: Data Protection Officer, Plaza Europa, 46/48, 08902, L'Hospitalet de Llobregat, Barcelona, Spain.

12. Amendments and Updates

We may amend or update this Privacy Policy, including when changes to data protection laws occur. Updates will be binding as soon as they are published on the Website. Please check this section regularly.

Last updated: August 2025
© Antonio Puig, S.A.U. 2025. All rights reserved.