MyELC Privacy Notice

Effective Date: April 6, 2026

The Estée Lauder Companies (“ELC”, “we”, “us”, “our”) respects your privacy and values the relationship we have with you. This Privacy Notice describes how ELC collects, uses, discloses and safeguards your personal information in relation to the MyELC Intranet site or application (the “Platform”). If you are an employee, you can also review your local HR Privacy Policy on MyELC for additional information on ELC’s privacy practices.

To review the list of Data Controllers of the personal information processed in connection with the Platform, see the Contact Us section below.

HOW WE COLLECT & PROCESS PERSONAL INFORMATION

We may collect or process the following types of information about you in connection with the Platform:

Note that certain of your personal information may also be visible to the employees participating to this Platform.

If you do not provide your personal information, you may not be able to use the services of this Platform. We also may use the information in other ways for which we provide specific notice at the time of collection.

LEGAL BASIS OF PROCESSING

The legal basis upon which we rely to process your personal information may vary based on the applicable privacy law. In connection with the purposes set out above, we will process your personal information based on your consent or, where permitted, based on our legitimate interest.

HOW WE SHARE AND TRANSFER YOUR PERSONAL INFORMATION

We may transfer personal information to our affiliates as well as service providers who perform services on our behalf based on our instructions. We do not authorize our service providers to use or disclose your personal information except as necessary to perform services on our behalf or comply with legal requirements. This following service providers are used in connection with this Platform:

Our affiliates and services may transfer, store or process personal information in countries other than the country in which the information was originally collected (such as the United States). Those countries may not have the same data protection laws as the country where you are located, and your personal information will be subject to applicable foreign laws. When we transfer your personal information to other countries, we will protect that information in the manner described in this Privacy Notice.  We will also comply with applicable legal requirements providing adequate protection for the transfer of personal information, such as the conclusion of data transfer agreements, E.U. Standard Contractual Clauses, or other applicable data transfer mechanisms. For additional information or, where permitted under applicable local privacy laws, to receive a copy of the data transfer mechanism, please contact us as indicated below.

YOUR PRIVACY RIGHTS

Depending on applicable laws, you may have rights with respect to your personal information. For example, you may be able to request access to the personal information we maintain about you, update and correct inaccuracies in your personal information, withdraw your consent, have the personal information deleted, or object to or restrict the processing of your personal information. You may also lodge a complaint with a data protection authority. For details on what rights apply to you and how to exercise them, see your local HR Privacy Policy or submit a request through our Privacy Request Portal.

HOW WE USE COOKIES

Cookies are small text files that websites place on your Internet-connected device to uniquely identify your browser or to store information or settings in your browser which allows us to remember you when you come back to our websites and provide you with personalized experiences and advertisements. We or our service provider use different types of cookies on our websites, which may include strictly necessary cookies, performance cookies, and functional cookies such as Google Analytics. You can edit your preferences through your browser settings. When editing your cookie preferences, please note that your settings only apply to the browser you use to submit your opt-out request, so if you use multiple browsers or devices, you must opt-out on each browser, on each device. Your opt-out is enabled using cookies so once you opt-out, if you delete your browser’s saved cookies on a device, you will need to opt-out again on that browser on that device.

HOW WE PROTECT INFORMATION

We maintain administrative, technical, and physical safeguards designed to protect the personal information you provide against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure, or use.  We restrict access to personal information on a need-to-know basis to employees and authorized service providers who require access to fulfil their job requirements.

HOW LONG WE RETAIN INFORMATION

In general, we retain personal information in connection with the Platform for your employment relationship, plus a reasonable period of time thereafter or such other time as may be required or permitted by applicable law. For additional information about data retention policies, visit your local HR Privacy Policy.

HOW TO CONTACT US

If you have questions or comments about this Privacy Notice, please visit your local HR Privacy Policy or submit a request through our Privacy Request Portal.

You can locate the relevant local data controller below: