At times, we will need personal information regarding a customer or a prospect. For example, to process an order or provide a subscription, we may need to know a customer’s name, mailing address, email address, and credit card details. It is our intent to inform you before we collect personal information, such as your name and/or address on the Internet. If you notify us that you do not wish to have this information used as a basis for further contact with you, we will respect your wishes.
Our Site may contain links to other websites. We are not responsible for the privacy practices or the content of those other websites.
1. Personal Information We Collect About You.
a) Identifying Information. We may collect and use the following personal information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household: legal name, postal address, email address, user name, password, telephone number, method of payment, and if applicable, credit card number. We may request additional information necessary to establish and maintain customer’s account.
b) Service Quality Monitoring. Some Site transactions may require a customer to telephone us, or for us to call the customer. We will not contact you by telephone without your prior consent, except to confirm an order placed online and/or to inform a customer of the status of such order. Customer should be aware that it is our practice to monitor, and in some cases record such calls for staff training or quality assurance purposes.
c) Information from Children. We will not collect or post information from a child under the age of majority of their state or province without the involvement of a parent or guardian. We will notify the child's parent or guardian at the e-mail address provided by the prospective customer, alerting the parent or guardian to the child's use of the Site and providing instructions as to how the parent or guardian can delete the child's registration from the Site.
d) Lost or Stolen Information. If a customer's credit card or account password is lost or stolen, the customer should promptly notify us in order to enable us to cancel the lost or stolen information and to update our records with a changed credit card or account password.
2. Uses Made of the Information.
a) Limited Uses Identified. Without customer's prior consent, we will not use your personal identifiable information for any purpose other than that for which it is submitted. We use personal identifiable information to reply to inquiries, handle complaints, provide operational notices and in program record-keeping. We also process billing and business requests related to our Site participation.
b) Marketing Uses. Unless customer elects to opt-out, we reserve the right to provide customer with information about our Site, our products and services, exclusive offers, promotions, and related information in which customer has indicated an interest.
c) Stored Information Uses. We store and retain the information provided by customer. This information is used to compile a customer's purchase history in order to enable us to recommend products, services, or special offers that would be of interest to a customer; or to support customer interaction with our Site; to deliver customer purchases; and to contact customer again about our other services and products.
d) Online Advertising. Some companies that help us deliver interactive on-line advertising, such as banner ads, may collect and use information about our customers to help us better understand the types of advertising or promotions that are most appealing to our customers. We use Shopify to power our online store--you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site -- you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
3. Chat Rooms, Forums and Bulletin Boards.
If a customer participates in a Company chat room, discussion forum, or posts messages to a Company bulletin board, customer should be aware that the information disclosed and shared will be broadly available to other persons, both inside of and/or outside the Company, who have access to that chat room, forum or bulletin board. Some individual chat rooms, forums or bulletin boards have additional rules and conditions regarding participation. Also, customer’s expressed opinion is his or her own and should not be considered as reflecting the opinion of the Company.
4. Disclosure of the Information.
a) Within Corporate Organization. We may share your personal information within our corporate organization, and may transfer the information to countries in the world where we conduct business. Some countries may provide less legal protection for customer personal information. In such countries we will still handle customer personal information in the manner described herein.
b) Mergers and Acquisitions. Circumstances may arise where for business reasons, we decide to sell, buy, merge or otherwise reorganize our businesses in the United States or some other country. Such a transaction may involve the disclosure of personal identifying information to prospective or actual purchasers, and/or receiving such information from sellers. It is our practice to seek appropriate protection for information in these types of transactions.
c) Agents. We employ or engage other companies and individuals to perform business functions on behalf of Company. These persons are provided with personal identifying information required to perform their functions, but are prohibited by contract from using the information for other purposes. These persons engage in a variety of functions which include, but are not limited to, fulfilling orders, delivering packages, removing repetitive information from customer lists, analyzing data, providing marketing assistance, processing credit card payments and providing customer services.
d) Affiliated Businesses. We work closely with affiliated businesses operating web site stores, providing services or selling products on each other's Web sites. These businesses mayidentify themselves to customers. Customer information related to a transaction with an affiliated business is shared with that affiliated business.
e) Marketing Analysis by Third Parties. We reserve the right to disclose to third parties personal information about customers for marketing analysis; however, any information disclosed will be in the form of aggregate data that does not describe or identify an individual customer.
f) Disclosure to Governmental Authorities. Under certain circumstances, personal information may be subject to disclosure pursuant to a judicial or other government subpoena, warrant or order.
5. Use of Computer Tracking Technologies.
a) No Tracking of Personal Information. Company’s Site is not set up to track, collect or distribute personal information not entered by visitors. Through web site access logs we do collect clickstream data and HTTP protocol elements, which generate certain kinds of non-identifying site usage data, such as the number of hits and visits to our sites. This information is used for internal purposes by technical support staff for research and development, user analysis and business decision making, all of which provides better services to the public. The statistics garnered, which contain no personal information and cannot be used to gather such information, may also be provided to third parties.
c) Use of Web Beacon Technologies. The Company may also use Web beacon or other technologies to better tailor its Site to provide better customer service. If these technologies are in use, when a visitor accesses these pages of the Site, a non-identifiable notice of that visit is generated which may be processed by us or by our suppliers. Web beacons usually work in conjunction with cookies. If a customer does not want cookie information to be associated with customer's visits to these pages, customer can set his or her browser to turn off cookies; however, Web beacon and other technologies will still detect visits to these pages, but the notices they generate cannot be associated with other non-identifiable cookie information and are disregarded.
d) Collection of Non-Identifiable Information. We may collect non-identifiable information from user visits to our Site in order to provide better customer service. Examples of such collecting include: traffic analysis, such as tracking of the domains from which users visit, or tracking numbers of visitors; measuring visitor activity on our Site; Web site and system administration; user analysis; and business decision making. Such information is sometimes known as "clickstream data." The Company or our contractors may use this data to analyze trends and statistics.
e) Collection of Personal Information. We collect personal identifying information from a customer during a transaction. We may extract some personally identifying information about that transaction in a non-identifiable format and combine it with other non-identifiable information, such as clickstream data. This information is used and analyzed only at an aggregate level (not at an individual level) to help us understand trends and patterns. This information is not reviewed at an individual level.
6. Information Security.
a) Commitment to Online Security. We employ physical, electronic and managerial procedures to safeguard the security and integrity of personal information. Billing and payment data is encrypted whenever transmitted or received online. Personal information is accessible only by staff designated to handle online requests or complaints.
b) No Liability for Acts of Third Parties. We will exercise all reasonable efforts to safeguard the confidentiality of customer personal information. However, transmissions protected by industry standard security technology and implemented by human beings cannot be made absolutely secure. Consequently, we shall not be liable for unauthorized disclosure of personal information due to no fault of the Company including, but not limited to, errors in transmission and unauthorized acts of Company staff or third parties.
b) Opt-Out Right. Customers and prospective customers have the right at any time to cease permitting personal information to be collected, used or disclosed by us and/or by any third parties with whom we have shared and/or transferred such personal information. Right of cancellation may be exercised by contacting us via e-mail or mail. Our contact information is provided below in Section 11. After processing the cancellation, we will delete customer or prospective customer's personal information from our database.
8. Access Rights to Data.
a) Information Maintained by Us. Upon customer's request, we will provide a reasonable description of customer's personally identifiable information that we maintains in our database. Our contact information is provided below in Section 11.
b) Corrections and Changes to Personal Information. Help us to keep customer personal information accurate. If customer's personal information changes, or if customer notes an error upon review of customer information that we have on file, please promptly contact us and provide the new or correct information. Our contact information is provided below in Section 11.
9. Your California Privacy Rights.
Under the California Consumer Privacy Act of 2018, customers of Company who are California residents have the right to request that we disclose what personal information we have collected, used, shared, or sold about customer; and why we collected, used, shared or sold that information. Specifically, we must disclose:
a) The categories of personal information collected;
b) Specific pieces of personal information collected;
c) The categories of sources from which the business collected personal information;
d) The purposes for which the business uses the personal information;
e) The categories of third parties with whom the business shares the personal information; and
f) The categories of information that the business sells or discloses to third parties.
To make such a request, please contact us. Within forty-five (45) days of receiving customer’s request, we will disclose the information you requested for the immediately preceding calendar year. Customer’s request may be made no more than twice per calendar year. We reserve our right not to respond to requests submitted for information outside the scope of this Section.
10. Your Rights Under the GDPR.
If you are a European resident, under the General Data Protection Regulation (“GDPR”), you have the following rights:
a) Right To Access - Right to be provided with a copy of your personal information;
b) Right To Rectification - Right to require us to correct mistakes in your personal information;
c) Right to be Forgotten - Right to in certain situations, require us to delete your personal information;
d) Right to Restriction of Processing - Right to require us to restrict processing of your personal information in certain circumstances;
e) Right to Data Portability - Right to receive the personal information you provided to us and/or transmit that data to a third party;
f) Right to Object - Right to object at any time to your personal information being processed for direct marketing, and right to object in certain situations to our continued processing of your personal information; and
g) Right not to be Subject to Automated Individual Decision-Making - Right not to be subject to a decision based solely on automated processing that produces legal effects concerning you or that similarly significantly affects you.
For additional information on each of those rights, including the circumstances in which they apply, see the guidance from the UK Information Commissioner's Office (ICO) on individual rights under the General Data Protection Regulation.
11. Questions, Problems and Complaints.
Impressions of Beauty LLC
8343 Roswell Road, Suite 408
Atlanta, GA 30350
Please note that you may only make a CCPA-related data access or data portability disclosure request twice within a twelve-month period. If you choose to contact directly by email or mail, you will need to provide us with:
We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person’s behalf. Any personal information we collect from you to verify your identity in connection with you request will be used solely for the purposes of verification.
If customer chooses to enter into a transaction or to subscribe to our services, customer's action is hereby deemed acceptance of our practices described in this policy statement. Any dispute over privacy between customer and Company is subject to the provisions of this notice and to our Terms and Conditions which is hereby incorporated herein and which can be read at https://impressionsofbeauty.com/terms-and-conditions.
Revised on: September 23, 2020