Match My Makeup App - Consumer Health Data Privacy Policy

1. About this policy

This Consumer Health Data Privacy Policy explains how Ivivaco Pty Ltd trading as Match My Makeup (“MMM”, “we”, “us”) collects, uses, shares and deletes consumer health data through the Match My Makeup App.

It applies to you if you live in Washington or Nevada, or if your consumer health data is collected in Washington. It is published to meet the Washington My Health My Data Act (RCW 19.373) and Nevada’s consumer health data law (Nevada Senate Bill 370). It also sets out our biometric information retention and destruction schedule for users in Illinois, Texas and other states.

This policy supplements our Privacy Policy, which describes the rest of our data practices. If the two conflict on consumer health data, this policy applies.

2. Consumer health data we collect and why

We collect four categories of consumer health data, all connected with your Beauty Profile.

We collect Face Scan data only with your consent, given on the Face Scan consent screen before the camera opens. Face Scan is available only to users who confirm they are 18 or over. We collect skin concerns you enter yourself only because you have asked us to use them to build your Beauty Profile.

We also use consumer health data to keep the App secure and to comply with the law. We do not use it for advertising, and we do not use it to train artificial intelligence models.

We do not collect precise location data. We do not use geofencing around health care facilities or anywhere else, and we do not use your location to infer anything about your health.

3. Who we share consumer health data with

We do not share consumer health data with third parties or with affiliates. We disclose it only to the processors below, which handle it on our behalf, under contract, and only to provide their services to us.

We may also disclose consumer health data where the law requires it, for example in response to a valid court order. We will tell you about any such disclosure where the law allows.

We do not sell consumer health data. We will never sell, lease, trade or otherwise profit from your Face Scan photo or Face Scan results.

4. Retention and destruction schedule

We keep consumer health data only as long as we need it for the purpose it was collected, and never longer than the limits below. This schedule is also our written biometric information retention and destruction policy under the Illinois Biometric Information Privacy Act and the Texas Capture or Use of Biometric Identifier Act.

If the law requires us to keep any of this data for longer, for example because of a legal claim, we keep it only for that purpose and only as long as required.

5. Your rights

You have the following rights over your consumer health data:

• Confirm and access: ask us to confirm whether we collect or share your consumer health data, and to give you a copy of it.
• List of recipients: ask for a list of every third party and affiliate we have shared it with, with their contact details. As section 3 explains, we do not currently share it with any.
• Withdraw consent: withdraw your consent to Face Scan at any time. You can do this in Me > Beauty Profile > Redo Quiz
• Delete: ask us to delete your consumer health data. You can delete your Face Scan results and skin concerns in the App yourself. When we delete data, we also tell our processors to delete it.

How to make a request. Email appsupport@matchmymakeup.com with “Consumer Health Data Request” in the subject line, or use the in-app options above. We will ask you to confirm the email address linked to your account so we can verify that the request is yours. You can use an authorised agent, who will need your written permission.

When we respond. We will respond within 45 days of receiving your request. If we need more time, we may extend this once by up to 45 days and will tell you why within the first 45 days. Requests are free, up to twice in any 12-month period.

Appeals. If we decline your request, you can appeal by replying to our decision with “Appeal” in the subject line. We will give you a written decision within 45 days, with our reasons. If your appeal is refused, you can complain to the Washington State Attorney General at atg.wa.gov or the Nevada Attorney General at ag.nv.gov.

We will not treat you differently, or deny you any part of the App other than Face Scan itself, because you exercise these rights.

6. Security, changes and contact

Security. Only staff and processors who need consumer health data to provide the App can access it. We protect it with encryption in transit, access controls and other reasonable safeguards. We exclude it from error reports and application logs.

Changes. If we change how we collect, use or share consumer health data, we will update this policy and change the effective date. We will ask for your consent again before using your data in a new way that requires it.

Contact. Ivivaco Pty Ltd trading as Match My Makeup, 1501a, Tower 1, 520 Oxford Street, Bondi Junction, NSW 2022, Australia. Email: appsupport@matchmymakeup.com.