Privacy Policy
Contents
1. About this Privacy Notice
Welcome to our Privacy Notice. Kenvue UK Ltd, (“ Kenvue, we, us, our”) is committed to safeguarding your Personal Data. This Privacy Notice outlines our practices regarding the processing of your Personal Data.
You may fall into one of the following categories if your personal information is processed by us:
Healthcare professionals: This includes individuals such as doctors, nurses and other medical professionals with whom we established and maintain professional relationships.
Individual customers or prospect customers: If you are an independent pharmacist or similar professional, you likely belong to this group.
Representatives of corporate customers or prospect customers: This includes those who are employed by or represent pharmaceutical wholesale companies or similar organisations, serving as their contact point with our services.
We have organised this Privacy Notice into sections and included a Glossary at the end of this Privacy Notice where you can find explanation of any defined terms we have used.
We will update this Privacy Notice from time to time. Any changes will be available on the Privacy Notice accessible from the website and will include the last reviewed date. If we make any significant changes, we will notify you and provide you with additional information. We encourage you to check this Privacy Notice regularly to stay informed about how we use your Personal Data.
Links on our website may direct you to other brands or services we offer, each with its own privacy notice distinct from this one. We encourage you to review the specific privacy notices of these sites to understand how they use your personal data.
2. About Us and Contact Details
Kenvue UK Ltd, is registered in the United Kingdom, with offices at 50-100 Holmers Farm Way, High Wycombe, HP12 4EG. Under Applicable Data Protection Laws, we are the Controller responsible for processing your Personal Data.
If you have any questions about this Privacy Notice or how we process your personal data, you can contact our Data Protection Officer and the EMEA DPO Team at emeaprivacy@kenvue.com
3. How We Collect Your Personal Data
We will collect Personal Data about you from the following sources:
Directly from you e.g., when you visit our website or register to use our services.
Third-Party sources e.g. during collaborative events with other organisations.
Social media platforms e.g., for data enrichment, and only with your consent.
Through cookies we use on our website, for more information please visit our Cookie Policy
Via surveys and feedback forms e.g. data collected when you participate in surveys, feedback forms, or market research initiatives.
Companies that are part of Kenvue to assist us with the services we offer you or for internal administrative purposes.
Your devices e.g. when you use your device to browse our website. For more information about our use of Personal Data which we collect from your device see our Cookie Policy
4. What Personal Data We Collect and Why
We process your Personal Data in the following cases:
Where it is necessary to perform a contract with you or to take steps prior to forming a contract with you.
For our Legitimate Interests, balanced against your rights and freedom.
To comply with our legal and regulatory obligations
With your consent
The table below outlines our what activities we carry out, the type of Personal Data we use and our legal basis for processing your Personal Data.
Why We Collect Your Personal Data | Personal Data Processed | Our Legal Basis |
|---|---|---|
To provide you with access to our website. | Contact details (email, phone number), device information, IP address, login data. | To provide the contracted Service. |
To improve, personalise, and expand our website | Browsing history, user preferences, device information (device type, Operating system, unique Identifiers), location data, interaction with the website. Please see our Cookie Policy | Legitimate Interest. We process your data to improve user experience and ensure the content is relevant and engaging, reflecting our legitimate interest in enhancing our services and offerings. |
To monitor, understand and analyse trends, and how you use our website | IP address, web analytics data, user behaviour data, device type, browser type. Please see our Cookie Policy | Where have your consent |
To develop new brand products, services, features and functionality | Feedback and interaction data, user preferences, usage data. Please see our Cookie Policy. | Legitimate Interest (Kenvue has a legitimate interest in developing and enhancing its products and services) |
To provide you with information you have requested, including without limitation, brochures, and responses to applications | Contact details (email, phone number), request details, any personal data provided in forms or applications. | Where we have your consent. |
To communicate with you, either directly or through one of our partners, including for customer services, to provide you with updates and other information relating to the website, and for marketing and promotional purposes. | Contact details (email, phone number), communication preferences, interaction and engagement data, marketing preferences. | Where have your consent (for marketing communication) Contractual or Legitimate Interest (for service-related communications). |
For Event Management, to organise and manage professional events and webinars | Full name, contact details (email, address, phone number), Company name, job title, billing information, dietary requirements. Special Accommodation needs (may include physical disability or medical condition). | Performance of a contract (for event registration) Legitimate Interest providing personalised training content to you Explicit consent (if any special category data “sensitive data” such as physical disability or medical condition is processed) |
To send you emails | Email address, name, content of communication, interaction with emails. | Consent (the user has opted in to receive emails) Legitimate Interest (to keep individuals informed about updates services they use). |
To respond to any enquiries from you regarding our products and Services. | Contact details (email, phone number), enquiry details, any personal data provided during communication. | To provide the contracted Service. |
As part of our Key Opinion Leaders initiatives. | For more information on how we may process your data, please see our K OL Privacy Notice | |
Where you have agreed, provide you with information about certain other goods and services which we believe may be of interest to you. | Contact details (email, phone number), marketing preferences, interaction data, purchase history, and preferences. | Where we have your consent. |
To meet our legal and regulatory obligations, | Identity verification data, transaction records, communication records, compliance data. | To comply with our legal obligations. |
To find, investigate and prevent fraudulent activities. | Contact details (email, phone number), digital usage data - Information collected through digital platforms such as website visits, browser type, version, usage and pattern, and interactions with online content. Please see our Cookie Policy | Legitimate Interest, to prevent fraudulent activities. |
For claims, legal disputes, investigations, enforcement of terms and conditions, for the defense of our rights. | Contact details (email, phone number), transaction data, communication records, legal documents. | Legitimate Interest for the purpose of establishing, exercising, or defending legal claims. |
We may process and disclose your Personal Data to comply with legal process or applicable law, which may include laws outside your country of residence; | As required by the specific legal request or obligation, which could include a wide range of data, Contact details (email, phone number), As account details, transaction history, and communication records. | To comply with our legal obligations. |
5. Marketing
If you have opted in to direct marketing, you can withdraw your consent and not receive marketing communication from us anytime. You can do this by clicking unsubscribe in our marketing emails or contact us at CONS-professionalsprivacy@Kenvue.com.Please note that if you opt-out of receiving marketing related messages from us, we may still send you important transactional and administrative messages, from which you cannot opt out.
Marketing from our other parties
If you have previously consented to receiving marketing from our affiliates or third-party partners, each with its own unique offerings, you will receive messages and promotions directly from them. Our affiliates and third-party partner manage its own marketing activities. They will handle your Personal Data and any opt-outs as set out in their privacy notices.
You can withdraw your consent and not receive marketing communication from them anytime. Where you have consented but no longer wish to receive marketing from our affiliates or third-party partners, you should contact them directly to stop their marketing messages.
6. Sharing Your Personal Data
Your Personal Data may be shared with various third parties for the purposes outlined under section 4. For example, we may share Personal Data with:
IT services providers, in the field of image optimization, analytics, hosting services, logs management, security and performance for the browser.
Website Development Companies.
Data Analysis Firms to improve our services and user experiences.
Payment Processing Companies to handle transactions, ensuring secure and efficient payment processing for purchases.
Customer Service that assists in handling customer inquiries and issues.
Order fulfilment companies that manage the storage, packaging, and shipping of products orders through our platform.
Data enrichment service providers e.g. social media platforms (Facebook, Instagram).
Marketing agencies and advisors.
Affiliates that are part of Kenvue acting as our processor, to help us provide our services to you e.g. our customer service function to handle your enquiries.
Our external professional advisors e.g., legal advisors, our auditors.
Our Kenvue Affiliates, to send direct marketing about their services and products where you have consented to them doing so. A list of our affiliates is available at https://investors.kenvue.com/financials-reports/sec-filings/default.aspx - access Kenvue’s subsequent filings with the Securities Exchange Commission. Kenvue UK Limited is the party responsible for the management of the jointly-used Personal Information;
Where permitted by applicable law, a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).
We may also disclose your Personal Data when necessary or appropriate, especially in response to laws enforcement agencies, fraud prevention bodies, legal counsel, public or government authorities. This may include authorities outside your country of residence. Such disclosures are made to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others.
7. Protecting Your Personal Data
We seek to use effective organisational, technical, and administrative measures designed to protect Personal Data under our control. For example, we implement robust security measures to protect your information, which include encryption of transmitted data and secure password practices. If you have a reason to believe that your interaction with us is no longer secure (for example, you believe that the security of your account with us has been compromised), please immediately notify us at emeaprivacy@kenvue.com
8. International Transfers of Your Personal Data
We may transfer your personal data to countries outside the UK.
To ensure your data is protected during these transfers, we either:
Transfer your Personal Data to countries recognised by the UK as providing adequate data protection, please see list here
Transfer your Personal Data after implementing other appropriate safeguards such as by contractually ensuring that the recipient is bound by the UK International Data Transfer Agreement or the UK Addendum to the EU's Standard Contractual Clauses.
You may obtain a copy of these adequate measures by contacting our Data Protection Officer and the EU DPO Team at emeaprivacy@kenvue.com
9. How Long We Keep Your Personal Data
We will keep your Personal Data for as long as needed or permitted considering the purpose(s) for which it was obtained. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you and provide our services to you; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable considering our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).
10. Your Data Protection Rights
You have various rights regarding your data, as detailed in the table below.
Your rights | Description |
|---|---|
The right to object to the processing of your Personal Data | You have the right to object at any time if we process your personal data based on our legitimate interests or those of third parties, unless we can demonstrate that there are compelling reasons to continue or that the processing is necessary for legal action. We will then no longer use your data for this purpose. You have an absolute right to stop your Personal Data being used for direct marketing. |
The right to be informed | You have the right to know if and how we process your Personal Data, as detailed in this Privacy Notice. |
The right of access | You can request access to and a copy of your Personal Data we have unless legal exceptions and exemptions apply. |
The right to rectification (correct) | You can ask us to complete or correct any incomplete or incorrect Personal Data. |
The right to Erasure (also known as the “right to be forgotten”) | You have the right to ask us to delete your Personal Data. This is not an absolute right and only applies in certain circumstances, for example, we cannot delete if there is a legal or regulatory obligation on us to keep it. |
The right to restrict the processing | You can request that we limit processing your Personal Data in specific situations: a) when its accuracy is contested, b) the processing is unlawful, but you do not require the deletion of your Personal Data c) your Personal Data is no longer needed for processing, but you need it for the establishment, exercise or defence of legal claims d) If you object to processing of your Personal Data occurring based on our Legitimate Interest. |
The right to data portability | You can request your Personal Data in a machine-readable format, only when processing is based on your consent or contract and is carried out by automated means. |
The right to withdraw consent | If you gave consent for processing your Personal Data, you can withdraw it anytime in a manner which is as easy as when you gave that consent. Withdrawing consent will not affect the lawfulness of past processing, and we will inform you if we can no longer provide you with your chosen service. |
We will keep a record of your requests. We may charge a reasonable fee or refuse requests that are manifestly unfounded, vexatious or excessive. If you make a request, we will need to confirm your identity and may ask for additional information to help us with your request. We have up to one month to respond to your request after verifying your identity. If your identity cannot be verified, we cannot process your request. You can exercise your rights by emailing CONS-professionalsprivacy@Kenvue.com. Please note that for a complex request, timelines may extend to up to two months. In such case you will be promptly informed accordingly.
11. How to Lodge a Complaint
If you have any questions, concerns or complaints about this Privacy Notice, please contact CONS-professionalsprivacy@Kenvue.com.
In the UK you may also lodge a complaint with the Information Commissioner’s Office, the UK’s Data Protection Authority at Make a complaint | ICO
You may also lodge a complaint with a data protection authority where: you reside, you work or the matter you are complaining about took place.
12. Updates to the Privacy Notice
This policy was last updated on 12 May 2025
13. Glossary
Terms | Definitions |
Applicable Data Protection Laws | means all applicable worldwide legislation and regulation relating to data protection and privacy including without limitation UK's version of the EU GDPR (the "UK GDPR") and the UK's ePrivacy rules ("PECR"). |
Controller | is a person(s) or company (either alone or jointly or in common with other persons) who decides how Personal Data will be processed. |
Legitimate Interest | This is a legal basis which we are able to rely on where we are processing Personal Information for our activities and needs or the activities and needs of others, including providing you with the best service and experience we can offer. We will balance our interests against any potential impact on your rights or freedom. If your rights, interests and freedom override our interests, we will not process your Personal Information under this legal basis. |
Personal Data | This refers to any Information relating to an identified or identifiable individual, who can be directly or indirectly identified by reference to identifiers (e.g. name, email, demographic information, and online identifiers). |
Privacy Notice | Also referred to as a Fair Processing Notice or a Privacy Policy – informs individuals what Personal Information is processed and how and why a company will process it. This document is the Privacy Notice for the Website. |