Glossier U.S. State Privacy Notice

LAST UPDATED: January 8, 2026

California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have enacted consumer privacy laws that grant their residents certain rights and require additional disclosures. This U.S. State Privacy Notice ("Notice") addresses these state-specific requirements and serves as our California notice at collection. If you are subject to one of these laws, this Notice, together with our Privacy Policy, applies to you.

We may update this Notice from time to time. If we make changes, we will notify you by revising the date at the top of this Notice. If we make material changes, we will provide you with additional notice (such as by adding a statement to our websites or sending you a notification). We encourage you to review this Notice regularly to stay informed about our information practices and the choices available to you.

Click on the links below to jump to the different sections of this Notice.

Collection, Use, and Disclosure of Personal Data
Other Details About Our Information Practices
Your Privacy Rights
Notice of Financial Incentives
Contact Us

Collection, Use, and Disclosure of Personal Data

Our Privacy Policy explains how we collect, use, and disclose personal data about you, as well as our targeted advertising and analytics practices. Below, we use two different tables to explain this same information in accordance with state privacy laws.

Collection, Use, and Disclosure of Personal Data for Business Purposes

Category of Personal Data	Use of Personal Data	Categories of Recipients
Identifiers (such as your name, email, IP address, mailing address, and birthday)	We use this personal data to: ● Provide the products and services you request; ● Create and manage your online accounts, subscriptions, and profiles; ● Communicate with you, including to tell you about products and services that may be of interest to you and to respond to your requests, inquiries, comments, and suggestions; ● Complete the transactions you request (including recurring payments), perform our contractual obligations, send cart reminders, and use as otherwise anticipated within the context of our ongoing business relationship; ● Facilitate your engagement with us, including to enable you to post comments and reviews on our websites, to engage with other customers, and to post on social media; ● Offer contests, sweepstakes, and other promotions; ● Provide and administer our membership program and other rewards programs; ● Tailor the content and information that we send or display to you, offer location customization and personalized recommendations, help, and instructions, and otherwise personalize your experience while using our products and services; ● Conduct surveys and market research and monitor, audit, and analyze trends, usage, and activities in connection with our websites, stores, products, services, and advertisements; ● Carry out short-term activities and other internal uses related to the products or services you purchase from us or your ongoing relationship with us; ● Conduct internal research and development; ● Detect, investigate, and respond to security incidents and protect against illegal or objectionable activities; and ● Comply with our legal obligations, including those required for you to benefit from rights recognized by law, or any regulatory requirements or provisions.	● Partners that provide advertising and marketing services; ● Data analytics providers; ● Payment processors; ● Subscription management partners; ● Membership and rewards partners; ● Partners that help provide surveys and organize events; ● Fulfillment partners; ● Customer support partners; ● Internet service providers; ● Operating systems and platforms; ● Other users; ● Fraud prevention partners; ● Cloud service providers; ● Technical maintenance and system security providers; ● Customer feedback platforms; ● Market research platform partners; and ● Facility security partners.
Characteristics of Protected Classifications Under California or U.S. Law (such as your age and gender)	We use this personal data to: ● Facilitate your engagement with us, including to enable you to post comments and reviews on our websites, to engage with other customers, and to post on social media ● Tailor the content and information that we send or display to you, offer location customization and personalized recommendations, help, and instructions, and otherwise personalize your experience while using our products and services; ● Carry out short-term activities and other internal uses related to the products or services you purchase from us or your ongoing relationship with us; ● Conduct internal research and development; and ● Conduct surveys and other market research and monitor, audit, and analyze trends, usage, and activities in connection with our websites, stores, products, services, and advertisements.
Commercial Information (such as records of products you purchased)	Same as “Identifiers” above.
Internet or Other Electronic Network Activity Information (such as information about your activity on our websites)	We use this personal data to: ● Provide the products and services you request; ● Send cart reminders and use as otherwise anticipated within the context of our ongoing business relationship; ● Tailor the content and information that we send or display to you, offer location customization and personalized recommendations, help, and instructions, and otherwise personalize your experience while using our products and services; and ● Monitor, audit, and analyze trends, usage, and activities in connection with our websites, stores, products, services, and advertisements; ● Conduct internal research and development; ● Detect, investigate, and respond to security incidents and protect against illegal or objectionable activities ● Comply with our legal obligations, including those required for you to benefit from rights recognized by law, or any regulatory requirements or provision.
Approximate Geolocation Data (such as your city of residence)	We use this personal data to: ● Provide the products and services you request; ● Tailor the content and information that we send or display to you, offer location customization and personalized recommendations, help, and instructions, and otherwise personalize your experience while using our products and services; and ● Detect, investigate, and respond to security incidents and protect against illegal or objectionable activities
Audio, Electronic, or Visual Information (such as phone recordings when you call our customer service channels)	We use this personal data to: ● Communicate with you and provide customer service; Provide the products and services you request; ● Detect, investigate, and respond to security incidents and protect against illegal or objectionable activities; and ● Comply with our legal obligations, including those required for you to benefit from rights recognized by law, or any regulatory requirements or provision.
Inferences about you (such as information drawn about your shopping preferences)	We use this personal data to: ● Provide the products and services you request; ● Tailor the content and information that we send or display to you, offer location customization and personalized recommendations, help, and instructions, and otherwise personalize your experience while using our products and services; and ● Conduct internal research and development.

Personal Data that we “Share,” “Sell,” or Use for “Targeted Advertising”

We also disclose certain categories of personal data to show you targeted ads on third-party properties and to expand the reach and effectiveness of our own marketing campaigns. These activities may be considered “sales,” “sharing,” or “targeted advertising” under certain state laws and the table below provides more information about our practices. See below for details about opting out.

Category of Personal Data “Shared,” “Sold,” or Used for Targeted Advertising	Categories of Third Parties
Identifiers	Marketing and advertising partners
Commercial Information	Marketing and advertising partners
Internet or other electronic network activity	Marketing and advertising partners

Other Details About Our Information Practices

As described in more detail in our Privacy Policy, we collect personal data from different sources, including: directly from you; automatically when you purchase our products, access or use our websites, interact with our communications, or visit our stores; and from other sources, including other customers, online booking partners, order processing partners, marketing and advertising partners, market research companies, and sample distributors. We may also derive information or draw inferences about you based on the information we collect.

We do not knowingly sell or share personal data about consumers under the age of 16, or higher age where required by law.

We do not collect data that is considered “sensitive” under certain state privacy laws, and we do not use or disclose sensitive personal data to infer characteristics about you.

We retain personal data for as long as is necessary for the processing purposes for which the data was collected, and any other permissible purpose explained in this Notice or our Privacy Policy. For example, we may retain certain transaction details and correspondence until the time limit for claims arising from the transaction has expired. When we no longer need to use your personal data, we remove it from our systems and records or anonymize it so that you can no longer be identified from it.

Your Privacy Rights

Opting Out of Sales, Sharing, and Targeted Advertising

Some of the activities described above may be considered “sales,” “sharing,” or use of your personal data for “targeted advertising” under the law that applies to you. You may opt out of cookie-based ad targeting by clicking on the Your Privacy Choices link in the footer of our website and following the prompts there. You can also opt out by visiting our websites with a legally recognized universal choice signal enabled, such as the Global Privacy Control. Please note that you will need to renew your opt-out choice at each Glossier-branded website you visit, if you visit our websites from a new device or browser, or if you clear your cookies.

In addition to cookie-based ad targeting, we may disclose your identifiers, such as your email address and phone number, to our advertising partners. These advertising partners translate that information into a unique identifier that can then be used to show ads that are more relevant to you across the web and in mobile apps. You may opt out of having your identifiers disclosed for these purposes by following the instructions here.

Access, Correction, and Deletion

You have the right to (1) request to know more about and access your personal data, including in a portable format, (2) request deletion of your personal data, and (3) request correction of inaccurate personal data. Residents of Connecticut, Minnesota, and Oregon may also request a list of third parties to whom we have disclosed personal data, and residents of Rhode Island may learn more about these third parties as well by request.

To make any of these requests, please fill out our online form. If you prefer to talk to someone on the phone, or you have a disability that makes it difficult to use the online request forms, you may call our toll-free number at 1-855-929-2179 to submit a request. You can also access, correct, or delete certain information stored within your online account, including your profile, contact, payment, and shipping information, at any time by logging into your Glossier account. You can also deactivate your Glossier account by emailing gTeam@glossier.com. We may verify your request by asking you to provide information related to your recent interactions with us, such as your email address, shipping address, or order number.

Nondiscrimination

We will not discriminate against you for exercising your privacy rights.

Authorized Agent

If you are an authorized agent seeking to make an opt-out request for a consumer, please fill out this online form.

If you reside in California, you may also designate an authorized agent to submit an access, deletion, or correction request on your behalf. We may ask authorized agents to submit proof of their authority to make a request, such as a valid power of attorney or proof that they have signed permission from the consumer who is the subject of the request. In some cases, we may be required to contact the individual who is the subject of the request to verify his or her own identity or confirm the authorized agent has permission to submit the request. If you are an authorized agent seeking to make an access, correction, or deletion request on behalf of a California resident, please fill out our online form. If you prefer to talk to someone on the phone, or you have a disability that makes it difficult to use the online request forms, you may call our toll-free number at 1-855-929-2179 to submit a request.

Appeals

If we deny your request, you may appeal our decision by contacting us at Privacy@glossier.com. If you have concerns about the result of your appeal, you may contact the attorney general in the state where you reside.

Notice of Financial Incentives

We provide discounts, gift cards, and other benefits to customers who sign up to receive our marketing emails, participate in surveys, or sign up for our membership program. These offerings may constitute “financial incentives” or “bona fide loyalty programs” under certain state privacy laws (for simplicity, we refer to these offerings as financial incentives throughout this Notice). If you decide to participate in a financial incentive, we collect relevant personal data from you, such as identifiers (like your name, email address, and birthday), commercial information (like your purchase history), and inferences (like your shopping preferences). We may disclose your identifiers and commercial information to our program partners, including TYB Technologies, LLC.

You can opt into a financial incentive by following the sign-up or participation instructions we or our program partners provide. You can opt out at any time by following the unsubscribe instructions in our promotional emails, contacting us at Privacy@glossier.com, or following the instructions provided by our program partners. If you request that we delete personal information that is essential to providing you with the financial incentive we will not be able to provide you with such benefits going forward. For example, if you ask us to delete your email address and account, we will no longer be able to share with you the benefits of the membership program. In some cases, we may provide additional terms and conditions when you sign up to participate in a financial incentive. The value of your personal data is reasonably related to the value of the offer or discount presented to you.

If you have any questions, comments, or concerns about this Notice or about our privacy practices, please contact us using the information provided below:

Glossier, Inc.
233 Spring Street, Floor 10
New York, NY 10013
Privacy@glossier.com