Privacy Policy

INTRODUCTION

Johnson & Johnson Limited cares about your privacy and wants you to be familiar with how we collect, use, and disclose information. This Privacy Policy describes our practices in connection with information that we or our service providers collect through the website or application (hereinafter the “Service”) operated and controlled by us from which you are accessing this Privacy Policy. By providing personal information to us or by using the Service, you acknowledge that you have read and understand this Privacy Policy.

Johnson & Johnson Limited, is responsible for processing your personal data in accordance with data protection laws. You can contact the Data Protection Officer at emeaprivacy@kenvue.com.

USE BY MINORS

An individual under the age of 16 may use the Service only with the prior consent of his or her parent or legal guardian. Instructions for obtaining your parent’s or legal guardian’s consent are given on the Service.

INFORMATION COLLECTION

We may combine the information you submit with other information we have collected from you, whether on or offline, including, for example, your purchase history. We may also combine it with information about you obtained from other sources: Kenvue Subsidiaries, Amazon, Meta, Teads, The Trade Desk.

If you submit any personal information relating to another individual to us, you acknowledge that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.

SENSITIVE INFORMATION

Unless we specifically request or invite it, we ask you to not send us nor disclose, any sensitive personal information (e.g., information related to racial or ethnic origin, political opinions, religion or philosophical beliefs, health or medical conditions, sex life or sexual orientation, criminal background, or trade union membership, or biometric or genetic data) on or through the Service or otherwise to us.

AUTOMATIC INFORMATION COLLECTION AND USE

We and our service providers may collect certain information automatically as you navigate around the Service. Please read the Cookie Policy for detailed information about the cookies and other tracking technologies used on the Service. Except where allowed by applicable law, we place cookies after having received your consent through the cookie banner or preference centre. The Cookie Policy includes information on how you may disable these technologies.

We and our service providers may also automatically collect and use information in the following ways:

Through your browser : Certain information is collected by most browsers, such as your Media Access Control (MAC) address, computer type (Windows or Mac), screen resolution, operating system name and version, and Internet browser type and version. We may collect similar information, such as your device type and identifier, if you access the Service through a mobile device. We use this information to ensure that the Service functions properly.

IP address : Your IP address is a number that is automatically assigned to your computer by your Internet Service Provider. An IP address is identified and logged automatically in our server log files whenever a user visits the Service, along with the time of the visit and the pages visited. Collecting IP addresses is standard practice and is done automatically by many online services. We use IP addresses for purposes such as calculating Service usage levels, diagnosing server problems, and administering the Service. We may also derive your approximate location from your IP address.

Device Information : We may collect information about your mobile device, such as a unique device identifier, to understand how you use the Service.

HOW WE USE YOUR INFORMATION

Where required by applicable law, we will obtain your consent prior to using your personal data when collecting information. We may also use your personal information where this is necessary for the performance of a contract, to comply with our legal obligations (for example, in relation to pharmacovigilance) or to meet our legitimate business interests. We may also rely on other legal bases for specific purposes.

Processing activities	Legal basis
Provide personal data to enable you to benefit from specified functionalities (in particular newsletter subscriptions, advice/guidance or order processing).	Consent
Participate in a particular activity (in particular prize draws or other promotions).	Legitimate interest - To improve the user experience and engage users in promotional activities.
To collect and process the views and opinions of users in order to improve our products and services, enhance the customer experience and provide feedback to other users.	Legitimate interest - Gathering opinions to improve products/services and inform other users.
Reply to your requests by sending the documents or email alerts you have requested.	Legitimate interest - Responding to user requests and providing necessary information or updates.
To send you marketing communications about our brands and products, events, promotions and services we would like to offer you. Please see cookie Policy	Consent
We use cookies to provide personalised advertising. Please see cookie Policy	Consent
We use cookies or mobile advertising identifiers to limit the frequency of the advertisements you see. Please see cookie Policy	Consent
Cookies or mobile advertising identifiers are used to generate aggregate reports on advertising. Please see cookie Policy	Consent
We use cookies or mobile advertising identifiers to detect and prevent fraud and abuse. Please see cookie Policy	Legitimate interest - To protect the security and integrity of the system, services and users.
Send you important information about our relationship or the Service, changes to our terms and conditions and policies, or other administrative information.	Legal obligation
For data analysis, for example, to improve the efficiency of the Service.	Legitimate interest - Optimising operational efficiency and improving services.
To verify that our internal processes operate as intended and comply with our legal, regulatory or contractual obligations.	Legitimate interest - Improving the efficiency of the service and ensuring compliance.
For fraud and security control, for example, to detect and prevent cyber-attacks or attempts at identity theft.	Legitimate interest - Protecting the security and integrity of our systems.
For the development of new products and services, including research and identification of users' needs, preferences and potential trends in order to create offers that better meet their expectations.	Legitimate interest - To innovate and improve our products and services to better meet user expectations and market demands.
To identify the types of use of the Service, for example, in order to identify the aspects of our Service that are of most interest to users.	Legitimate interest - To understand user behaviour and preferences in order to optimise service provision.
To measure the effectiveness of our promotional campaigns, in order to tailor them as closely as possible to the needs and interests of our users.	Legitimate interest - Optimising strategies and campaigns.
To understand you better, to personalise our exchanges with you and to provide you with information or offers tailored to your areas of interest.	Legitimate interest - to offer personalised content and services.
To enable you to benefit from the Service and the corresponding customer service.	Performance of the contract
Send you important information about our relationship or the Service, changes to our terms and conditions and policies, or other administrative information.	Legal obligation Performance of the contract
To improve or modify our website or our products and services.	Legitimate interest - Improving the user experience and keeping services relevant and up to date.
To better understand your preferences and deliver relevant content.	Legitimate interest - Providing personalised content that matches users' preferences.

USE OF COOKIES AND PERSONAL DATA TO PERSONALISE ADVERTISING

With your consent, we use cookies and similar technologies on our website to collect information about your browsing activities. This information may include details such as the pages you visit, the links you click and the time you spend on our site.

Personalised advertising

With your consent, we use the data collected by cookies to personalise the advertising you see on our website. This means that the advertisements shown to you can be tailored to your interests, preferences and online activities. For example, if you frequently visit pages related to a particular subject, you may see more advertisements related to that subject.

Information collected through cookies may be shared with services such as Google (please view Google’s Business Data Responsibility Site), in order to personalise the advertisements you see on our website. This means that advertisements can be tailored to your preferences based on your browsing history and interactions on our site. Our partners may use this data to provide you with more relevant advertising on different websites.

Consent

When you first visit our website, you will see a consent notice in which we ask for your permission to use cookies, which may include sharing your data with services we work with. By accepting cookies, you agree to your personal data being used by us or shared with these services (e.g. Google) for ad personalisation as described above. You can manage your cookie preferences at any time via our cookie settings.

MARKETING AND COMMUNICATION

We give you choices regarding our use and disclosure of your personal information for marketing purposes. You may opt out from:

Receiving marketing communications from us: If you no longer want to receive marketing communications from us on a going forward basis, you may opt out of receiving them by contacting us via this contact form. In your request to us, please provide your name, identify the form(s) of marketing communications that you no longer wish to receive, and include the address(es) to which it/they are sent. For example, if you no longer wish to receive marketing e mails or direct mail from us, tell us that, and provide your name and e mail or postal address. In addition, you may opt out of receiving marketing e mails from us by following the unsubscribe instructions provided in any such message.
Receiving reminders from us: If you no longer want to receive medical reminders from us on a going forward basis, you may opt out of receiving them by contacting us via this contact form. In your response to us, please provide your name and the e mail address or phone number at which you receive reminders from us.
Our sharing of your personal information with affiliates and third party partners: If you previously opted-in to receiving marketing communications from our affiliates or third party partners, you may opt out of our sharing of your personal information with those parties for their direct marketing purposes on a going forward basis by contacting us via this contact form.
In your communication to us, please state that we should no longer share your personal information with our affiliates and/or third party partners for their marketing purposes, and include your name and e mail address.

We will seek to comply with your request(s) as soon as reasonably practicable. Please note that if you opt out as described above, we will not be able to remove your personal information from the databases of our affiliates with which we have already shared your information (i.e., as of the date that we implement your opt out request). However, we will make reasonable efforts to inform our affiliates of your request. Please also note that if you opt out of receiving marketing related messages from us, we may still send you important transactional and administrative messages, from which you cannot opt out.

WITH WHOM WE SHARE YOUR DATA

We also disclose information collected through the Service:

to our affiliates for the purposes described in this Privacy Policy. A list of our affiliates is available at https://investors.kenvue.com/financials-reports/sec-filings/default.aspx - access Kenvue’s subsequent filings with the Securities Exchange Commission. Johnson & Johnson Limited is the party responsible for the management of the jointly used Personal Information;
to our third party partners with whom we offer a co branded or co marketed promotion;
to collaborate with specialist data analysis and digital marketing companies working on our behalf to improve our services and campaigns. To this end, we will share your data with these companies so that they can carry out these tasks on our behalf.
We may share your personal data with third party service providers, such as advertising technology companies (e.g. Google, Meta, Teads, The Trade Desk and Amazon), in order to provide you with personalised advertising, where we have obtained your consent to do so.
to our third party service providers who provide services such as website hosting and moderating, mobile application hosting, data analysis, payment processing, order fulfilment, infrastructure provision, IT services, customer service, e mail and direct mail delivery services, auditing, and other services, in order to enable them to provide services; and as permitted by applicable law, to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).

In addition, we may use and disclose your information as we believe to be necessary or appropriate: (a) to comply with legal process or applicable law, which may include laws outside your country of residence; (b) as permitted by applicable law to respond to requests from public and government authorities, which may include authorities outside your country of residence; (c) to enforce our terms and conditions; and (d) to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others. We may also use and disclose your information in other ways after obtaining your consent to do so.

We may use and disclose information we collect automatically as described above, under “Automatic Information Collection and Use.”

In addition, where allowed by applicable law, we may use and disclose information that is not in personally identifiable form for any purpose. If we combine information that is not in personally identifiable form with information that is identifiable (such as combining your name with your geographical location), we will treat the combined information as personal information as long as it is combined.

YOUR RIGHTS

If you would like to access, correct, update, restrict, or delete your personal information, object to the processing of your personal information (particularly for direct marketing purposes), or if you would like to request an electronic copy of your personal information for purposes of transmitting it to another company (to the extent these rights are provided to you by applicable law), please contact us via this contact form . We will respond to your request as soon as reasonably practicable and no later than one month after receipt. If circumstances cause any delay in our response, you will be promptly notified and provided a date for our response.

CROSS BORDER TRANSFER

Your personal information may be stored and processed in any country where we have facilities or service providers, and by using our Service or by providing consent to us (where required by law), your information may be transferred to countries outside of your country of residence, including to the United States, which may provide for different data protection rules than in your country. Nonetheless, appropriate contractual and other measures are in place to protect personal information when it is transferred to our affiliates or third parties in other countries.

Some countries outside the UK are recognised by the UK Government as providing an adequate level of data protection (the full list of these countries is available here). For transfers from the UK to countries not considered adequate by the UK Government, we have ensured that adequate measures are in place, including by ensuring that the recipient is bound by Standard Contractual Clauses, to protect your Personal Information. You may obtain a copy of these measures by contacting our data protection officer in accordance with the “ Contacting Us ” section below.

SECURITY

We seek to use reasonable organizational, technical, and administrative measures designed to protect personal information under our control. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you have with us has been compromised), please immediately notify us in accordance with the “ Contacting Us ” section below.

RETENTION PERIOD

We will retain your personal information for as long as needed or permitted in light of the purpose(s) for which it was obtained. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you and provide the Service to you; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).

For example, if we collect your personal information related to a complaint regarding product quality we will store it for a period of 10 years from the end of product life.

Please note, however, that this is not an exhaustive list of retention periods. Your personal information may be stored for a longer period using the criteria set forth in the first paragraph of this section, especially points (ii) and (iii).

THIRD PARTY SITES AND SERVICES

This Service may contain links to sites of third parties. This Privacy Policy does not address, and we are not responsible for, the privacy, information, or practices of any third parties, including any third party operating any site or online service (including, without limitation, any application) that is available through this Service or to which this Service contains a link. The availability of, or inclusion of a link to, any such site or property on the Service does not imply endorsement of it by us or by our affiliates.

CONTACTING US

Johnson & Johnson Limited, located at 50-100 Holmers Farm Way, High Wycombe, HP12 4EG, is the company responsible for collection, use, and disclosure of personal information under this Privacy Policy.

If you have any questions about this Privacy Policy, please contact us via this contact form, or please write to the following address:

Johnson & Johnson Limited

50-100 Holmers Farm Way,

High Wycombe,

HP12 4EG

You may also contact our data protection officer responsible for your country or region, if applicable, at emeaprivacy@kenvue.com.

LODGING A COMPLAINT WITH A REGULATOR

You may lodge a complaint with the UK regulator, the Information Commissioner’s Office (ICO), at https://ico.org.uk/global/contact-us/.

UPDATES TO THIS PRIVACY POLICY

We may change this Privacy Policy. Any changes to this Privacy Policy will become effective when we post the revised Privacy Policy on the Service. Your use of the Service following these changes means that you accept the revised Privacy Policy. We recommend that you regularly review the Privacy Policy when you visit the Service. This policy was last updated on December 5, 2024.