Personal Data is information that does or may identify you.
You can choose not to share your Personal Data with us, but if you choose not to, we may not be able to provide you with our products and services, or answer any questions you may send to us through the Contact Us page or over the phone. We may collect your Personal Data from a variety of sources, including the following:
Personal Data you provide to us directly:
As a skincare company offering a wide range of products, some of the Personal Data we collect may be Sensitive Data. This might include information about your race, ethnicity, health or general wellbeing. Whilst we do not give health advice, to answer your queries, we may need information about the condition of your skin or your particular skin-related concerns.
We may collect your IP address, device ID, location data, computer and connection information such as browser type and version, time zone setting, browser plug-in types and versions, operating systems and purchase history.
We also use profiling techniques to collect information about how you use our sites and what pages you have visited. Profiling is an automated process that enables us to use your Personal Data to build a profile about you. This is one of the tools we use to analyse your online activities including surfing, searching and buying behavior. We may also analyse your participation in surveys, email preferences and activity on social medial channels. This helps us ensure that we deliver relevant content to you and to better understand what is of genuine interest to you.
We collect personal data from other sources including third-party platforms such as our brand accounts on Twitter, Facebook and Instagram. This may be in the form of product promotions, answering your direct messages or competitions that we run through or social platforms from time to time.
Additionally, we receive information about you and other visitors’ interactions with our advertising to measure whether our advertising is relevant and successful. We also collect information about you and your activities from a third-party when we jointly offer services or products.
We only collect, process and disclose your Personal Data for specific and limited purposes, these include:
Where required, we will get your consent to process your Personal Data. Where you have given consent, you may withdraw your consent at any time. Please see below.
We do not sell your Personal Data to any third party. We share your Personal Data internally within the company and with selected third parties in the following circumstances:
We will only send Personal Data collected within the EEA to foreign countries for the following reasons:
If we do transfer Personal Data outside of the EEA, we will make sure that it is protected in the same way as if it was being used in the EEA. We will use one of the following safeguards:
We take the security of your Personal Data very seriously. We take every effort to protect your Personal Data from misuse, interference, loss, unauthorized access, modification or disclosure. Access to your Personal Data is only permitted among our employees and agents on a need-to-know basis and subject to strict contractual confidentiality obligations when processed by third parties.
We will keep your Personal Data for as long as we need it for the purpose it is being processed for. This may include holding your Personal Data to enable us to respond to any quality concerns raised or for complying with any contract we may have entered into.
This is a summary of your rights relating to the Personal Data we hold about you:
You have the right to be informed and to be provided with clear, transparent and easily understandable information about how we use your Personal Data and your rights. Therefore, we’re providing you with the information in this charter.
You have the right to access and rectification. You also have the right to access, correct or update your Personal Data at any time. We understand the importance of this and should you want to exercise your rights, please contact us as set out below:
You have the right to data portability. The Personal Data you have provided us with is portable. This means it can be moved, copied or transmitted electronically under certain circumstances.
You have the right to be forgotten. Under certain circumstances, you have the right to request that we delete your Personal Data. If you wish to delete the Personal Data we hold about you, please let us know and we will take reasonable steps to respond to your request in accordance with legal requirements. If the personal data we collect is no longer needed for any purposes and we are not required by law to retain it, we will do what we can to delete, destroy or permanently de-identify it.
You have the right to restrict processing. Under certain circumstances, you have the right to object to certain types of processing, including processing for direct marketing (i.e. receiving emails from us notifying you or being contacted with varying potential opportunities).
You have the right to lodge a complaint with a supervisory authority. You have the right to lodge a complaint Information Commissioners Office about how we process our Personal Data.
You have the right to withdraw consent. If you have given your consent to anything we do with your Personal Data, you have the right to withdraw your consent at any time by contacting the details below.
You have the right not to be subject to automated decision making, which is any decision which is based solely on automated processing in certain circumstances
If you wish to contact us about your Personal Data, including where you wish to withdraw consent or restrict certain processing activities, please email firstname.lastname@example.org