Privacy Notice

L’Oréal SAPMENA Big Bang Beauty Tech Innovation Program 2026

L’Oréal’s ambition is to be an exemplary corporate citizen to help make the world a better place. We place great value on honesty and clarity and we are committed to building a strong and lasting relationship with our visitors based on trust and mutual benefit. Part of this commitment means safeguarding and respecting your privacy and your choices.

Given this need for transparency and because participating the Big Bang Beauty Tech Innovation Program 2026 (“Competition”) organised by the L'Oréal Group involves the processing of Personal Data within the meaning of applicable regulations, it is our duty to inform you of our commitments in this respect and to apply this privacy policy.

Our commitments:
 

  1. We respect your privacy and your choices. 

  1. We make sure that privacy and security are embedded in everything we do. 

  1. We are committed to keeping your data safe and secure. This includes working only with trusted partners.  

  1. We are committed to being open and transparent about how we use your data. 

  1. We do not use your data in ways that we have not told you about. 

  1. We respect your rights, and always try to accommodate your requests as far as possible, in line with our own legal and operational responsibilities. 

This Privacy Notice sets out the different types of Personal Data that We may collect from you directly or from your interaction with us, how We may use it, the purposes for which We collect it, the people with whom We may share it, how We protect it and keep it secure and the rights you have with respect to such Data. 

When you share Personal Data with us or when we collect or generate with our IT tools Personal Data about you, We do so in line with this Privacy Notice.  

If you have any questions or concerns about your Personal Data, please contact us at: [email protected]

 

Who is the Data Controller?

​​​​​Your Data Controller is responsible for the Personal Data that you share for the purposes of the Competition. 

Who your Data Controller is will depend on what region and country you register as a participant from. If you do not register for the Competition, it depends on where you access this site from: 

Country 
Relevant Data Controller 
Additional Terms Relating to Your Jurisdiction 

Singapore, and all other countries not listed here 

L’Oréal Singapore Pte Ltd  

 

Australia 

L’Oréal Australia Pty Ltd  

 

New Zealand 

L’Oréal New Zealand Limited  

 

Vietnam 

L’Oréal Vietnam Company Limited 

 

Philippines 

L’Oréal Philippines, Inc.  

 

Indonesia 

PT L’Oréal Indonesia 

Addendum for Indonesia

Malaysia 

L’Oréal Malaysia Sdn Bhd 

Addendum for Malaysia

Morocco 

L’Oréal Maroc 

 

India 

L’Oréal India Private Limited  

 

Thailand, Cambodia, Laos, Myanmar 

L’Oréal (Thailand) Limited 

 

Kingdom of Saudi Arabia, United Arab Emirates,  Bahrain, Kuwait, Oman, Qatar 

L’Oréal Middle East FZE 

 

Pakistan 

L’Oréal Pakistan Private Limited 

 


By using the Website and/or submitting an application in the Competition, you agree that processing of your Personal Data will be governed by the laws of the jurisdiction in which your Data Controller is based. 

Any use of the word “L’Oréal”, “We”, or “Us” refers to your Data Controller unless otherwise stated. 

For any questions relating to your Personal Data rights, please reach out to us at [email protected]

Who is covered by this Privacy Notice?

The Privacy Notice applies to all persons who visit the specific pages of the Competition website (“Site”), and any persons submitting their Personal Data to register as a participant in the Competition. 

In addition to this policy, visitors are strongly recommended to read the​ ​Website Terms of Use, which they accept and which they undertake to comply with by way of continuing to access and use the Site. 

What does “Personal Data” mean?

“Personal Data” means any information or pieces of information that could identify you either directly (e.g. your name, like email/home addresses/mobile phone) or indirectly (e.g. through pseudonymised data such as a unique ID number, your computer’s IP address or your mobile device’s MAC address, as well as cookies). 

How do we collect, generate or receive your Personal Data? 

Your participation in the Competition may require that: 

  • You provide your Personal Data to Us, for example when you fill in a registration form; or

  • We collect your Personal Data ourselves through the implementation of technologies for watching people's activity, such as cookies. 

Collection of your Personal Data may be necessary for the following reasons: 

  • Participation as a contestant in Competition;  

  • Contacting you in connection with the Competition or answering a request that you have sent us; 

  • Usage of the tools We have put in place in order to ensure the smooth execution of the Competition; 

  • Business process optimization by the L’Oréal Group relating to Site traffic, the Competition, market studies; or 

  • Compliance with our legal requirements.  

When you are merely accessing our Site as a visitor, you are not required to enter your Personal Data in order to browse the Site. However, in using the site, you provide consent for Us to place cookies on in order to better understand your browsing habits, in accordance with our Cookie policy (located below in this Privacy Notice)

​​​​​Summary of Personal Data Processing by your Data Controller 

During which interactions may you provide and we may collect your data? 
What Personal Data may we receive from you directly or resulting from your interaction with us? 
How and why we may use your Personal Data? 
What is the legal basis for using your Personal Data? 
Retention period 

Information collected through your registration for the Competition 

Depending on how much you are interacting with us, the Personal Data may include: 

  • Full name;

  • Gender; 

  • Image; 

  • Email address; 

  • Address; 

  • Phone number; 

  • Country of residence and nationality; 

  • Information on your career and academic background; 

  • Content as uploaded by you, such as videos, pictures, texts, images 

To: 

  • Manage your participation in the Competition;

  • Respond to your questions and otherwise interact with you; 

  • Contacting you for potential engagements with the L’Oréal Group; 

  • Allow you to manage your preferences; 

  • Monitor and improve the Site; 

  • Run analytics or collect statistics; 

  • Secure our websites/apps and protect you and us against fraud; 

  • For participants that progress to Semi-Finals or Grand Finals: publication or advertisement in relation to the Competition.  

Consent. (If applicable to your Data Controller, another legal basis, e.g. Legitimate Interest may also apply)

  • To send you information and updates regarding the progress of the Competition;

  • For the smooth execution of the Competition by L’Oréal and its affiliates. This includes logistical preparations for your participation in the different stages of the Competition. This may involve sharing your data with your Data Controller’s affiliates within the L’Oréal Group or trusted third parties engaged to assist with the organization of the Competition; 

  • To conduct analytics in relation to the Competition for the L’Oréal Group’s insights. 

  • To ensure our websites/apps remain secure, to protect them against fraud, and to help us better understand your needs and expectations and therefore improve our services, and brands. 

Contract (If applicable to you under the Competition Terms and Conditions) 

  • Publication of your name, image, and other Personal Data in promotional media relating to the Competition. 

2 years maximum 

Online browsing 

Information collected by cookies or similar technologies (“Cookies”*) as part of your browsing on the Site. 

*Cookies are small text files stored on your device (computer, tablet or mobile) when you are on the Internet. 

The Cookies used do not track or store your Personal Data. They only store data relating to the options you may have selected in relation to reminders or notices on the Website, and to create a session identifier that links your browser to temporary session data. 

We use Cookies to ensure proper functioning of our website, and to prevent malicious code or software from interrupting your activity. 

Consent. (If applicable to your Data Controller, another legal basis, e.g. Legitimate Interest or Necessity may also apply) 

 

Please refer to the section on cookies below.  

 
Please note that regardless of the legal basis set out above, to the extent that an alternative legal basis is available under local applicable laws, our Processing of your Personal Data may be based on a lawful basis other than your consent. 

Cookie Policy

When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience.  

By using this Website, you provide your consent to the use of the following essential cookies: 

Cookie Name 
Description 
Duration of Storage 

_agorize_session 

  

Creates a session identifier to link your browser to temporary session data. This maintains your browsing session, and helps protect against Cross-Site Request Forgery attacks. This does not track any other data about you. 

4 hours 

cookies_policy_accepted 

Saves a user's choice regarding cookies. This does not track any other data about you. 

13 months 

hide_profile_incomplete 

Saves a user’s choice to dismiss reminders regarding any incomplete fields in the registration form. This does not track any other data about you. 

13 months 


You may choose to block cookies by activating a setting within your browser that allows you to refuse the setting of all or some cookies. If you do so, certain parts or functions of our website may not function or display accurately as they rely on the operation of essential cookies. 

If you wish to withdraw your consent to the continued use of cookies at any time, you will need to delete the cookies stored with you using your browser settings. Each browser will have its own instructions on how this can be done. Please follow the 'Help' option in your internet browser for more details.

Processing and access rights

No Profiling devices used in analysing your application 

In order to make an initial selection of participants, We use solutions developed by third-party suppliers. This enables us to analyse your applications and your suitability for the contest. 

These solutions are not based on profiling devices (i.e. automated processing consisting of using your Personal Data to evaluate your participation). 

 Who may access your Personal Data?

Your Personal Data is accessible to entities within the L'Oréal group. Your Personal Data may also be shared with and processed or hosted by trusted service providers solely to carry out services necessary to the running of the Site and execution of the Competition.

In this context, your Personal Data may be transferred: 

  • To service providers which provide digital tools to help us organize, view, and assess your applications; 

  • To service providers which provide us with IT services relevant to the Competition; 

  • If we have to disclose or share your Data to comply with a legal obligation or a judicial or administrative decision, or for any other circumstances that you have agreed to; or to protect the rights, property or safety of L'Oréal, its customers or employees;  

  • For the defence of L’Oréal’s rights in the context of litigation; 

  • If permitted by law; 

  • Pursuant to a purpose you consented to in this Privacy Notice; and 

  • If We sell or intend to sell a business or assets (by any means, including by sale of the business carrying on that business or owning those assets), We may disclose your Data to the purchaser of that business or assets and to potential purchasers for the purposes of an audit, including advice. 

In the event that you progress to Regional Finals or Grand Finals, your Personal Data (such as your name and image) may also be made public in connection with publications or advertisements relating to the Competitio

How long do We keep your Personal Data?

  • Your Data is kept only for the time necessary for the purpose for which it is processed, or to meet our legal obligations. The retention periods for each processing purpose are shown in the summary table above. 

  • At the end of the retention periods, your Data will be deleted from our systems or made anonymous, unless their retention is necessary for legal protection purposes. 

Where do we store your Personal Data and what security measures are taken to protect it? 

1. Location of your Personal Data 

  • Your Personal Data is primarily hosted in France, Europe. Other potential hosting locations include United States. 

2. Security measures 

  • We take all useful and reasonable precautions given the nature of the Personal Data and the risks that are presented by processing, to preserve the security of the Personal Data and, in particular, to prevent it from an accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to Personal Data transmitted, stored or otherwise processed. 

  • As such, we undertake to identify the risks your data may be exposed to and to implement measures to protect and secure your Data that we consider proportionate to those risks. However, as the Internet is an open environment, the transmission of Data via the Internet cannot be completely secure. Therefore, despite our best efforts, we cannot guarantee that such risks will never occur considering of your Personal Data that is transmitted via the Internet. 

  • In addition, we require third-party service providers who access your Personal Data on our behalf to apply the same security standards under their service agreements with Us or the L’Oréal Group. 

Your rights 

L’Oréal respects your right to privacy. It is important that you are able to control your Personal Data. Depending on the jurisdiction of your Data Controller, You have the following rights regarding your Personal Data: 

Your rights 
What does this mean? 

The right to be informed 

You have the right to obtain clear, transparent and easily understandable information about how we use your Personal Data, and your rights. This is why we are providing you with the information in this Privacy Notice. 

The right of access 

You have the right to access the Personal Data We hold about you (subject to certain restrictions).  

We may charge a reasonable fee taking into account the administrative costs of providing the information. 

Requests manifestly unfounded, excessive or repetitive may not be answered.  

The right to rectification 

You have the right to have your Personal Data rectified if it is incorrect or outdated and/or completed if it is incomplete.  

The right to erasure/right to be forgotten 

In some cases, you have the right to have your Personal Data erased or deleted. Note this is not an absolute right, as we may have legal or legitimate grounds for retaining your Personal Data.  

The right to withdraw consent at any time for data processing based on consent 

  

You can withdraw your consent to our processing of your Personal Data when such processing is based on consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. We refer to the table inserted in the section “What Personal Data do we collect from you and how do we use it” especially the column “What is our legal basis for processing your Personal Data?” to identify where our processing is based on consent. 

However, your withdrawal may also make it impractical or impossible for Us to facilitate your participation in the Competition. We reserve the right to remove you from the Competition in the event you choose to withdraw your consent. 

The right to object to processing based on legitimate interests 

You can oppose at any time to our processing of your Personal Data when such processing is based on the legitimate interest. We refer to the tables inserted in the section “What Personal Data do we collect from you and how do we use it” especially the column “What is our legal basis for processing your Personal Data?” to identify where our processing is based on legitimate interests. 

The right to lodge a complaint with a supervisory authority 

  

You have the right to contact the Personal Data protection authority of your country in order to lodge a complaint against the Personal Data protection and privacy practices of L’Oréal.  

Do not hesitate to contact Us before lodging any complaint with the competent Personal Data protection authority. 

The right to data portability 

You have rights to move, copy or transfer your Personal Data from Our database to another. This only applies to Personal Data that you have provided, where processing is based on a contract or your consent, and the processing is carried out by automated means. We refer to the tables inserted in the section “What data do we collect from you and how do we use it” especially the column “What is our legal basis for processing your data?” to identify where our processing is based on the performance of a contract or on consent.  

For further details, please contact Us at the relevant email address listed in this Privacy Notice.  

The right to restriction 

You have the right to request restriction of our processing of your Personal Data. This right means that our processing of your Personal Data is restricted, so we can store it, but not use nor process it further.  

It applies in limited circumstances listed by the relevant data protection regulations applying to you and/or your relevant Data Controller, which may include any of the following: 

  • the accuracy of the Personal Data is contested by the data subject (i.e. You), for a period enabling the controller to verify the accuracy of the Personal Data; 

  • the processing is unlawful and the data subject (i.e. You) opposes the erasure of the Personal Data and requests the restriction of their use instead; 

  • the controller (i.e. L’Oréal / Us) no longer needs the Personal Data for the purposes stated in this Privacy Notice, but they are required by the data subject for the establishment, exercise or defence of legal claims; 

  • the data subject (i.e. You) has objected to processing based on the legitimate interests of the data controller pending the verification of whether the legitimate grounds of the controller override those of the data subject.  

The right to deactivate Cookies 

You have the right to deactivate Cookies. The settings from the Internet browsers are usually programmed by default to accept Cookies, but you can easily adjust it by changing the settings of your browser. 

Many cookies are used to enhance the usability or functionality of websites/apps; therefore disabling cookies may prevent you from using certain parts of the Site.  

If you wish to restrict or block all the cookies which are set by our websites/apps (which may prevent you from using certain parts of the site), or any other websites/apps, you can do this through your browser settings. The Help function within your browser should tell you how.  

 
If you have questions about the specific rights that apply to you, please contact us at [email protected].

How to exercise your rights 

The request to exercise any of your rights must come exclusively from you (unless you have given a mandate to a third party in due form) and must be made in writing to [email protected]. 

We will do our best to answer your request within the applicable deadline, namely one to three months depending on the level of complexity of the request. In case of a mistake on your part regarding which L'Oréal entity is competent to answer your request, we will redirect your request so that it can be properly processed. We may ask you to clarify your request if it is not sufficiently precise or if we are unable to identify the right you wish to exercise. If We have any doubt as to your identity, We may ask you to provide additional information and proof of identity, which will be deleted after verification is complete. 

In addition, you acknowledge that we will not be required to answer your request if it is manifestly unfounded or excessive, and in particular if you make repetitive requests.