IL MAKIAGE® Australia - PRIVACY POLICY

Last Updated: May 13, 2024

PRIVACY POLICY QUICK LINKS

Below are links to key sections of our Privacy Policy:

1. INTRODUCTION
2. HOW AND WHY WE COLLECT PERSONAL INFORMATION
3. HOW AND WHY WE SHARE PERSONAL INFORMATION
4. HOW WE COLLECT AND USE NON-PERSONALLY IDENTIFIABLE INFORMATION
5. ANONYMOUS INFORMATION
6. COOKIE POLICY
7. YOUR RIGHTS REGARDING YOUR INFORMATION
8. HOSTING OF OUR SITES
9. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION
10. OUR SECURITY MEASURES.
11. LINKS TO AND INTERACTION WITH THIRD PARTY PRODUCTS.
12. CHILDREN’S PRIVACY
13. MODIFICATIONS OF THIS PRIVACY POLICY
14. QUESTIONS REGARDING OUR PRIVACY PRACTICES
15. FILING A COMPLAINT
16. YOUR CALIFORNIA PRIVACY RIGHTS/DISCLOSURES
17. YOUR NEVADA PRIVACY RIGHTS
18. YOUR RIGHTS IN CANADA
19. ADDITIONAL RIGHTS APPLICABLE TO RESIDENTS OF THE EUROPEAN UNION AND UNITED KINGDOM

1. INTRODUCTION

IM Pro Makeup NY LP (“IL MAKIAGE®”, “we”, “us”, or “our”) respects the privacy of your Personal Information (defined below), and as such, we make every effort to ensure that your Personal Information is protected and private.

This IL MAKIAGE® Privacy Policy (“Privacy Policy”) describes how we use Personal Information that we collect, receive and store about individuals in connection with the use of the website www.ilmakiage.com, and any other related or affiliated websites and mobile applications (each, together with any sub-domains, content and services, the “Sites”), as well as the various product and/or service offerings made available on the Sites (collectively, “Site Offerings”). Users with disabilities who wish to access this Privacy Policy in an alternative format can contact us by emailing us at: [email protected] or sending us a request by U.S. mail to: IM Pro Makeup NY LP, 110 Greene St., Suite 305, New York, NY 10012.

YOU SHOULD CAREFULLY READ THIS PRIVACY POLICY. By accessing, browsing, and/or otherwise using the Sites and/or Site Offerings, you are acknowledging that you have read and understood this Privacy Policy. If you do not agree with the processing set out in this Privacy Policy, and/or would prefer that we not collect, use, or share your Personal Information as described herein, you should not use the Sites and/or Site Offerings, or otherwise provide us with any information.

This Privacy Policy explains our online information practices and the choices you can make about the way your Personal Information is collected and used in connection with our Sites. When we refer to “Personal Information” in this Privacy Policy, we are referring to any information that may be used, either alone or in combination with other information, to personally identify an individual, as well as the personal or material circumstances of an identified or identifiable individual. Different states, countries and jurisdictions define Personal Information (and similar terms, such as personal data and personally identifiable information) to include different things, but Personal Information in this Privacy Policy includes information as set out in the “HOW AND WHY WE COLLECT PERSONAL INFORMATION” section below.

This Privacy Policy applies only to Personal Information and other information provided and collected through the Sites including where you make a purchase of a product. It does not apply to Personal Information and/or other information that we, or other parties, may collect through other means, such as through any business relationship between us and you. In this circumstance, there will be a separate privacy policy that applies to the relevant processing of personal Information. Other than where mandated by applicable law, this Privacy Policy also does not apply to information that you submit on other websites, even if we communicate with you on those sites, or provide a link to those sites through our Sites. For example, if you post something on Facebook, LinkedIn, Twitter, or other social media or networking sites, that information is governed by the privacy policies of those sites, not by this Privacy Policy.

Terms of Use

This Privacy Policy works alongside the Terms and Conditions of using the Site (“Terms”), which are available here. By using the website you are creating a binding contract on the terms and conditions set out in the Terms.

Jurisdiction-specific terms

Note that there are some specific terms applicable if you are located in (1) EUROPEAN UNION AND UNITED KINGDOM, (2) CALIFORNIA, (3) NEVADA, (4) CANADA. If you are from any of these jurisdictions, please ensure you review those sections along with the main sections of the Privacy Policy. Anything in those sections will override any contradictory statements provided in the main section of the Privacy Policy.

2. HOW AND WHY WE COLLECT PERSONAL INFORMATION

Providing Personal Information is your choice. We do not currently require you to provide Personal Information in order to access general information available on our Sites. However, if you choose to make use of certain Site Offerings and/or Site features, you may need to provide certain Personal Information to us. If you choose not to provide mandatory Personal Information, you may still visit parts of our Sites but you may be unable to access certain Site Offerings, options, programs, offers, and services that involve our interaction with you. If you do provide us with any Personal Information as described below, you agree that it will be accurate and complete, and will notify us of any changes.

We collect Personal Information that you provide to us, e.g. during the registration, email submission and check out process, to fulfil your request to receive additional information or for the purpose of handling the contractual relationship that you have with IL MAKIAGE®. We only use and store your Personal Information if we have a legal basis for doing so, including where you have given us your express consent, where we have a legitimate business interest or pursuant to a contractual relationship between you and IL MAKIAGE®. Please be advised that users may withdraw consent at any time by using the options made available in this Privacy Policy (below).

The types of Personal Information you may be asked to provide, and the circumstances in which we request it, are described below. In particular, we collect the following categories of personal information from customers and website users:

We present the information below based on the categories of information collected, but please be aware that similar specific pieces of information may apply to multiple categories. For example, your name and email address may be included within each of the “Identification and Contact Information,” “Billing Information,” and “User-Provided Information” categories described below.

Identification and Contact Information.

This is information that identifies you as an individual, such as your first and last name, and information that enables us to contact you, such as an email address, mailing address, or phone number, as well as information about Site pages and products you have browsed, and actions taken on these pages. This information is generally collected when you create an account with us, when you contact us using the Sites, when you request to receive newsletters and other materials, when you make purchases, and when you participate in interactive features of the Sites, such as our PowerMatch Quiz.

Below is some additional information on how we collect this information:

1. Account Creation: During your use of our Sites, and in order to use certain Site Offerings, you may choose or be required to create an account, referred to herein as an “Account.”
We may offer different options to create an Account, including:

• Direct registration, where you input your Personal Information to complete and submit a registration form directly on our Sites.

• Registration using third party accounts, where you use a “login with…” (or similar) button that we display on our Sites for a designated third party service, referred to herein as a “Third Party Account,” such as Facebook® or Google®. Doing so will enable you to link your Account and your Third Party Account. If you choose this option, then you will be required to approve the connection as well as the types of information (which may include Personal Information) that we will obtain from your Third Party Account and the types of activities that we may perform in connection with your Third Party Account. Please note that in order to use this option, you will need to have, and may need to be signed-in to, an existing Third Party Account.

2. Share with Friends Services: Our Sites may allow you to invite friends to use our Sites by sending them an invitation email or message.
You may do so by:

• Using our Sites to send or post an invitation message via your Third Party Account; and/or

• Using our Sites to send an invitation email to your friend’s external email address (for example, a Gmail address).

3. We collect and use this category of Personal Information for the purposes of (a) verifying your identity when you create an Account, make a purchase, or access certain Site Offerings and/or other features of our Sites; (b) providing you with Site Offerings, products, services, or content you have purchased, used, or otherwise engaged with; (c) contacting you regarding your use of the Site Offerings, purchases, or your Account, which may include providing updates and/or seeking feedback on our products; (d) sharing invitations and messages with your friends at your request; (e) responding to your inquiries and administrative requests; (f) subject to your consent to receive marketing communication and your right to opt out, and subject to applicable law, sending you newsletters and other marketing and advertisement communications that we believe may be of interest to you; (g) targeting you with relevant ads on third party media companies (h) providing and improving our Sites and associated Site Offerings; and (i) for internal business purposes, such as analyzing and managing our service offerings including, without limitation, the Site Offerings. We may also combine the information we have gathered about you with information from other sources.

4. Our legal bases for processing this Personal Information are:

• (1) our legitimate business interests, specifically our ability to provide you with the requested Site Offerings, to offer you our products and services, and to promote our Site Offerings and the content of our Sites.

• (2) performance of a contract such as when you make a purchase of goods or services through our website.

• (3) your consent, such as when you request information about products of services or make enquiries to and message our team via the website, social media or telephone.

5. We will retain this Personal Information for as long as we continue to have a business need to do so (which will be at least as long as you continue to maintain an Account), unless a longer period is required by law. Such business needs may include legal, taxation, accounting, risk management, and other business purposes.

Direct Marketing

• Mobile device - At times, we may want to contact you via your mobile device regarding your use of the Site Offerings. For Australian, EU or UK residents, we will only contact you via your mobile device (including artificial voice calls, pre-recorded messages and/or calls (including SMS text messages) delivered via automated technology, to the telephone number(s) that you provided) regarding your use of the Site Offerings and/or for marketing purposes where you provide your consent as required under applicable law, or we have another valid legal basis under applicable law to do so.. For Canadian residents, we will only contact you via your mobile device via SMS text messages to the telephone number(s) that you provided regarding your use of the Site Offerings and/or for marketing purposes where you provide your consent as required under CASL, or there is an exemption under CASL enabling us to do so. For US residents, where you provide “prior express consent” within the meaning of the Telephone Consumer Protection Act (47 USC § 227), and its implementing regulations adopted by the Federal Communications Commission (47 CFR § 64.1200), as amended from time-to-time (“TCPA”), you consent to receive telephone calls, including artificial voice calls, pre-recorded messages and/or calls (including SMS text messages) delivered via automated technology, to the telephone number(s) that you provided. To stop receiving text messages from IL MAKIAGE®, please reply “STOP” to the text message that you received from us. Please note this preference will only apply to the phone number that received the text message. Please reply “HELP” to receive help information. Please note that you are not required to provide this consent in order to obtain access to the Site Offerings, and your consent simply allows IL MAKIAGE® to contact you via these means. Please be advised that in order to effectively process Personal Information of the correct individual, you need to inform us if and when the telephone number that you have previously provided to us changes via e-mail at: [email protected], or by using one of the methods set forth in the “Contact Us” section below.

• Email – we may contact you via email with information regarding the Site Offerings where you provided your consent to receive marketing communication or where it is required to provide the services you ask for by using our Site. Each communication will incorporate an unsubscribe link, or you can contact us in order to change you marketing preferences.

• We collect this information in order to communicate offers to you and to inform you of our other products and services which may be of interest to you, subject to your prior consent to receive marketing communications. If you do not wish to receive these communications you can adjust your preferences as discussed above.

• Our lawful bases for processing are:
  (1) Consent where you agree to receive marketing communications about our Site Offerings.

• We will retain Personal Information for as long as we continue to have a business need to do so or until you withdraw consent for that specific type of marketing.

Billing Information.

• Our Sites include the option to purchase products or services from us. If you choose to make any kind of purchase, we will require sufficient information from you to complete the transaction. Such information could include a credit card number and related account and billing information, invoice related information, and other Information required to process the order.

• We collect and use this type of information for the purpose of processing required payments.

• IL MAKIAGE® may utilize third-party service providers to provide payment processing services. If you choose to purchase products and/or services via the Sites, the payment method information provided will either be collected directly by the applicable third-party payment processor(s), or we will share that payment method information with those contracted third-party payment processor(s). IL MAKIAGE® requires that its third-party payment processing service provider(s) has/have in place privacy policies and practices consistent with this Privacy Policy; provided, however, that we cannot guarantee the privacy practices of our third-party payment processing service provider(s).

• Our legal basis for processing this information is your contractual agreement to pay for our products (known under the GDPR and UK GDPR as the “performance of a contract” basis).

• We will retain this information for as long as necessary to complete your purchase and/or to process any return, unless you have opted to save your billing information. If you do so, we will retain the information for as long as you maintain your Account.

User-Provided Information.

• Some parts of our Sites may enable you to build a public profile in connection with your Account, referred to herein as a “Public Profile.” Your Public Profile may include your name and other information that you choose to include in your Public Profile, such as your gender and a profile picture. Our Sites may also include interactive features, such as our PowerMatch Quiz that allows you to answer questions about your preferences, or pages that allow users to submit product reviews or upload content. If you participate in any of these interactive areas, we will collect whatever Personal Information you choose to include. We collect and use this information for the purpose of allowing our customers and fans to engage with us and others through the Sites.

• Our legal bases for processing this information are: (1) our legitimate business interests, specifically our ability to operate an interactive platform that allows our customers and others to learn more about each other and receive information relating to relevant products; and (2) your consent where you choose to include information and upload this to your Public Profile

• We will retain this information for as long as we have a business need to do so, unless a longer period is required by law. Note that while you can, in some circumstances, request removal of this type of information, in some cases we may not be able to remove Personal Information that you voluntarily disclose due to technical limitations. We will inform you if we cannot remove information as requested.

• A Special Note About User-Provided Information. If you create a Public Profile or use other interactive features of the Sites, or engage with us via any social media websites, the information (including Personal Information) that you submit may be seen and used by others for as long as the applicable web pages remain active, and may be visible longer if pages are cached (depending on your privacy settings associated with your accounts with the applicable social media websites). This information may be used by other end-users of the Sites or the public to send you unsolicited messages. We provided notices and tools on our Sites to inform you of which content may be publicly available. However, We are not responsible for the Personal Information that you choose to post in this manner, and we encourage you to think carefully before posting anything in any public area of our Sites, and only to post information that you are sure you want to be accessible to everyone. Further, the social media websites operate independently from us, and we are not responsible for such social media websites’ interfaces or privacy or security practices. We encourage you to review the privacy policies and settings of the social media websites with which you interact to help you understand those social media websites’ privacy practices. If you have questions about the security and privacy settings of any social media websites that you use, please refer to their applicable privacy notices or policies.

Location Information.

• We may provide certain location-based services, or “Location Services,” through our Sites that are dependent on Information related to the geographic location, or the Location Information, of your mobile device and/or other device through which you are accessing our Sites. You should be able to use the settings on your mobile device or other device to turn off location-sharing features.

• We collect this information for purposes of offering the Location Services on our Sites so that we can provide the applicable location-based content to you.

• Our legal basis for processing this information is our legitimate business interests, specifically our ability to provide products and services that are applicable in the area in which our users are accessing and using the Sites.

• We will retain this information for only as long as the location services are active on your device.

3. HOW AND WHY WE SHARE PERSONAL INFORMATION

We may share Personal Information with third parties in the following circumstances:

• We may share Personal Information with third parties in the following circumstances:

  We may transfer your Personal Information to other companies within our group, including our subsidiaries, affiliates, and/or related companies, for the purpose of storing, using or processing such information on our behalf. We require that these parties agree to process such information in compliance with this Privacy Policy.

• We may share your Personal Information with our third party service providers and partners, but only to assist us with our business operations and to provide our Sites’ services to you and other users. For examples, our service providers may process payments made when you make purchases, deliver products you have ordered, or handle our Information management and email distribution. We use commercially reasonable efforts to only engage or interact with third party service providers and partners that post a privacy policy governing their processing of Personal Information.

• We may share your Personal Information with our third party media partners in an anonymous, encrypted, hashed format (MD5 or SHA1 encryption) or in standard format that is hashed and encrypted by the third party upon receipt in order to track performance of our marketing efforts (including tracking across multiple devices) and to provide you with relevant content across the web, such as banner ads including products you may have shown interest in, or sales offers for our site.

• We may share your Personal Information with our Email Service Provider(s) that help us to send you our marketing and/or transactional email communication.

• We may share your Personal Information with our SMS Service Provider(s) that help us to send you our marketing and/or transactional text messages.

• We may disclose your Personal Information or any information you submitted via our Sites if we have a good faith belief that disclosure of such information is helpful or reasonably necessary to: (a) comply with any applicable law, regulation, legal process, subpoena, court order, or governmental request; (b) enforce our Terms, including investigations of potential violations thereof; (c) detect, prevent, or otherwise address fraud or security issues; and (d) protect against harm to our rights, property or safety, and with respect to our users, yourself or the public.

• We use third party service providers to host our Sites which means they will host your Personal Information on their servers at various international locations, see the section on “Hosting of our Sites” below for more details.

• We may share Personal Information or any information you submitted via our Sites where we are the subject of bankruptcy proceedings, in connection with, during negotiations of, or as a part of the closing of, any merger, sale of company assets, or acquisition of all or a portion of our business to another company in which Personal Information about our Sites users is among the assets transferred; provided, however, that if we are involved in a bankruptcy proceeding, merger, acquisition or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on the Sites of any change in ownership or uses of your Personal Information, as well as any choices that you may have regarding your Personal Information.

Personal Information you provide will not be sold, rented, or traded to anyone. We will not disclose your information to third parties except as otherwise specified under this Privacy Policy, unless you have given us your separate, express, permission to do so.

4. HOW WE COLLECT AND USE NON-PERSONALLY IDENTIFIABLE INFORMATION

Non-personally identifiable information refers to information that is not and cannot be used to identify a specific individual. While this information may define how you fit into a particular group of people, it is not unique to you, and it cannot be used (without being combined with other information) to specifically identify you.

The following describes how we collect and use non-personally identifiable information through the Sites.

1. Log Files.

• We may (directly or through third parties) make use of log files. The information inside the log files includes internet protocol (IP) addresses, type of browser, internet service provider (ISP), date/time stamp, referring/exit pages, clicked pages, and any other information that your browser may send to us. We may (directly or through third parties) use such information to analyze trends, administer our Sites and/or Site Offerings, track users’ movement around our Sites, and gather information.

2. Cookies and Other Tracking Technologies.

• Our Sites utilize “cookies,” anonymous identifiers and other tracking technologies which enable us to provide you with information that is customized for you. For more information, see the “Cookie Policy” section of this Privacy Policy.

3. Analytics Services.

• Our Sites may use the tools described below (the “Analytics Services”) to collect information about the use of our Sites, such as how often users visit our Sites, what pages they visit when they do so, and what other sites they used prior to visiting our Sites. We use the information we collect from the Analytics Services to maintain and improve our Sites and our products and services.

The Analytics Services we use include:

1. Google® Analytics. Our Sites may use a tool called “Google Analytics®.” We may combine the information collected through the use of Google Analytics® with Personal Information. Google’s® ability to use and share information collected by Google Analytics® about your visits to and use of our Sites is restricted by the Google Analytics® Terms of Service, available here, and the Google® Privacy Policy, available here. You may learn more about how Google® collects and processes Information specifically in connection with Google Analytics® here. You may prevent your Information from being used by Google Analytics® by downloading and installing the Google® Analytics Opt-out Browser Add-on, available here.

2. Our Sites may use an analytics tool called “FullStory®.” FullStory’s® use of information collected through its analytics tools is set forth in the FullStory® privacy policy available here. You may also opt-out of FullStory® analytics tracking by following the instructions in FullStory’s privacy policy. To opt out, please visit the FullStory® Opt-Out Page, available here.

3. Our Sites may use an analytics tool called “Hotjar®.” Hotjar’s® use of information collected through its analytics tools is set forth in the Hotjar® privacy policy available here. You may also opt-out of Hotjar® analytics tracking by visiting the Hotjar® Opt-Out Page, available here.

4. Our Sites may use a marketing cloud and affiliate program tool called “Impact”. Impact’s use of information and privacy policy can be found here.

5. Google Optimize. Our Sites may use an A/B Testing tool called Google Optimize. Google Optimize’s use of information and privacy policy can be found here.

6. Facebook Analytics. Our Sites may use a web analysis tool called Facebook Analytics. Facebook Analytics use of information and privacy policy can be found here.

Facebook® is a registered trademark of Facebook, Inc. (“Facebook”). FullStory® is a registered trademark of FullStory, Inc. (“FullStory”). Google® and Google Analytics® are registered trademarks of Google, Inc. (“Google”). Please be advised that IL MAKIAGE® is not in any way affiliated with Facebook, FullStory or Google, nor are the Site Offerings endorsed, administered or sponsored by Facebook, FullStory or Google

5. ANONYMOUS INFORMATION

“Anonymous Information” refers to information that does not enable identification of an individual user, such as aggregated or demographic information about users of our Sites. This therefore does not constitute Personal Information. We may use Anonymous Information or disclose it to third party service providers in order to improve our Sites and enhance your experience with our Sites. We may also disclose Anonymous Information (with or without compensation) to third parties, including advertisers and partners.

6. COOKIE POLICY

As noted above, our Sites use and allow certain third parties to use cookies. By using our Sites, you consent to the use of cookies as described in this cookie policy.

1. What are cookies?

1. Cookies are small amounts of data that are stored on your browser, device, or the page you are viewing when you visit a website. Some cookies are deleted once you close your browser or application (session cookies), while other cookies are retained even after you exit so that you can be recognized when you return (persistent cookies).

2. Cookies used on our Sites are generally divided into the following categories:

• Essential cookies: These are cookies that are required for the operation of our Sites, such as cookies that enable you to log into secure areas.

• Analytics cookies: These are cookies that automatically collect information about your use of the Sites. These help us understand how our visitors are using our Sites and how they navigate through the Sites. These cookies record only anonymous statistical data, not Personal Information. As mentioned above, we use Google® Analytics and FullStory® to analyze user behavior, so these third parties will place these types of cookies on our Sites.

• Functional cookies: These are cookies that remember choices that you make when you visit our Sites, such as language options. They help us to personalize your visit to the Sites.

• Targeting cookies: These are cookies that record your visit to our Sites, the pages of the Sites that you visit, and the links you followed. They will recognize you as a previous visitor to the Sites and track your activity on our Sites and other websites that you visit after you leave the Site. To opt out of our use of targeting cookies in connection with your visit(s) to the Sites, please send us an email to: [email protected]
  

2. How do we use cookies?

• We use cookies to make our Sites work more efficiently, to analyze how our Sites are used so that we can improve the Sites, Site Offerings and the other products and services we offer, and to personalize your visit to the Sites, such as by remembering your IP address when you return to the Sites and by setting language preferences.

3. What are your choices regarding cookies?

• Most web browsers automatically accept cookies, but you can usually change your settings to prevent that, such as by having your device warn you each time a cookie is being sent or choosing to turn off all cookies. This can be done through your web browser settings, and because each browser is different, you should look at your browser’s “Help” menu to learn how to modify your cookie settings. You can also learn more about how to opt out of targeted behavioural advertising from many major third party network advertisers by reviewing the information here and here. To opt out of cookie usage on our Sites, please send us an email to: [email protected]
  

• If you do disable cookies from your browser you may not be able to access certain sections of the Sites that use essential cookies, and this may make your experiences on the Sites less efficient.

7. YOUR RIGHTS REGARDING YOUR INFORMATION

1. Direct Marketing

• Generally, we will provide direct marketing and personalised communications to you where you have requested or consented to receiving such information. You can opt out of receiving direct marketing communications from us by sending us an email to: [email protected], or selecting an unsubscribe link at the bottom of each email that we send. In the case of online advertising, you may opt out by managing your preferences in digital platforms such as Google or Facebook. Please note that even if you opt out of receiving the foregoing emails, we may still send you a response to any “Contact Us” request as well as administrative emails (for example, in connection with a password reset request) that are necessary to facilitate your use of our Sites and notifications regarding your orders. To stop receiving text messages from IL MAKIAGE®, please reply “STOP” to the text message that you received from us. Please note this preference will only apply to the phone number that received the text message. Please reply “HELP” to receive help information.

2. Right to Access your Information.

• You have right to request copies, including in a machine readable or other reasonable format, of those portions of your Personal Information that we have collected. However, we may need to verify your identity prior to allow you access to your information.

3. Correcting and Updating Information.

• If you are a registered user of our Sites, you can access and edit your Account Information online by clicking the “My Account” button on the Sites. You may also have any Personal Information you have provided revised by sending us an email to [email protected]
  

4. Removing Information.

• As noted above, we have standard retention practices with respect to the Personal Information we collect.

• We take the protection of your Personal Information seriously and endeavor to ensure that our user engagement is effective and efficient. With regard to Erasure Requests, which is one of the rights of the Data Subject as set out in many of the applicable privacy laws, including the GDPR (Article 17 ‘right to be forgotten’) and UK GDPR, we have a secure and effective process for such a request.

The process is as follows:

• The Data Subject shall submit their email address to the deletion request web page (https://www.ilmakiage.com/forgotten_request)

• An email that contains a secure link will be sent to that email address.

• Upon clicking on that link, the Data Subject’s Personal Information will be erased from our database (subject to the exceptions set out in paragraph 3, below).

• In the event that we do not receive the response e-mail within five (5) days, we will issue a reminder e-mail with the link.

• If there is still no response from the Data Subject, we will not progress the Erasure Request, and the request will be considered void.

The above process sets out the most efficient way of exercising an Erasure Request, however you can also send an email to [email protected] clearly stating your wish for your Personal Information to be deleted if preferred or contacting us in any other way using the information given in the “Contact Us” section, below.

• Please note that we may not be able to completely remove Personal Information from our systems in certain circumstances. This will be true if the data is not in searchable format, if it is retained in backup systems or cached or archived pages, if we need it in order to prevent fraud or future abuse, or if we are required by law to keep it. During the period of retention, we will ensure that such data continues to be stored securely.

• The only record of the deletion requests would be a table that holds email addresses & timestamp of the data deletion. This data will be held in a secure manner, and its retention is for us to be able to demonstrate its compliance with the GDPR.

• If you have any queries regarding this process, you may contact us by e-mailing [email protected] or [email protected]
  

8. HOSTING OF OUR SITES

We do not ourselves host any of our Sites – all hosting is done by third party service providers that we engage. This means that Information you provide us or that we collect from you (including any Personal Information) is hosted with such third party service providers on servers that they own or control. Regardless of where such third party service providers are located, their servers may be located anywhere in the world. Your Information may even be replicated across multiple servers located in multiple countries. So please be aware that by providing us with your Personal Information you are consenting to that Information being transferred to various third party service providers around the world.

9. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION

Some of our service providers, including for data storage, may be located or use locations outside of Australia.
Where we share personal information overseas, we take steps to ensure that our service providers are obliged to protect this personal information in accordance with Australian legal requirements and that they are only permitted to use personal information for the purpose for which it is shared.
If you are visiting our Sites from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States and/or Israel.

If you are from the EU, UK or are located in the European Economic Area (EEA), we are required to give you information about the transfer of your information outside the EEA. If this applies to you, whenever you voluntarily give us your Personal Information, you should understand that your information will be sent by you to the United States, a jurisdiction that does not provide the same framework for the protection of Personal Information as the EEA or UK. By sending us your Personal Information, you are expressly consenting to the transfer of information from your location within the EEA or UK to our servers in the United States and/or Israel.

In addition, if we send any of your Personal Information to servers located within the EEA or UK, if we then transfer your Personal Information from those servers to areas located outside of the EEA or UK, we will adopt adequate measures as required by the GDPR (for example, the adoption of standard, European Commission or United Kingdom (as applicable) approved contractual clauses between us and the recipient). You may request a copy of the safeguards we have employed to protect your Personal Information though note that we will redact any commercially sensitive provisions from applicable contracts.

10. OUR SECURITY MEASURES.

We endeavour to safeguard and protect our users’ Personal Information. When users make Personal Information available to us, their Personal Information is protected both online and offline (to the extent that we maintain any Personal Information offline).

Access to your Personal Information is strictly limited, and we take reasonable measures to ensure that your Personal Information is not accessible to the public. All of our users’ Personal Information is restricted in our offices, as well as the offices of our third-party service providers. Only employees or third-party agents who need user Personal Information to perform a specific job are granted access to user Personal Information. Our employees are dedicated to ensuring the security and privacy of all user Personal Information. Employees not adhering to our firm policies are subject to disciplinary action. The servers that we store user Personal Information on are kept in a secure physical environment. We also have security measures in place to protect the loss, misuse and alteration of Personal Information under our control.

Please be advised, however, that while we take every reasonable precaution available to protect your information, no storage facility, technology, software, security protocols or data transmission over the Internet or via wireless networks can be guaranteed to be 100% secure. Computer hackers that circumvent our security measures may gain access to certain portions of your Personal Information, and technological bugs, errors and glitches may cause inadvertent disclosures of your Personal Information; provided, however, that any attempt to breach the security of the network, our servers, databases or other hardware or software may constitute a crime punishable by law. For the reasons mentioned above, we cannot warrant that your Personal Information will be absolutely secure. Any transmission of data at or through the Sites, other Site Offerings or otherwise via the Internet or wireless networks, is done at your own risk.

In compliance with applicable laws, we shall notify you and any applicable regulatory agencies in the event that we learn of an information security breach with respect to your Personal Information. Please be advised that notice may be delayed in order to address the needs of law enforcement, determine the scope of network damage, and to engage in remedial measures.

11. LINKS TO AND INTERACTION WITH THIRD PARTY PRODUCTS.

Our Sites may enable you to interact with or contain links to a Third Party Account and other third party websites that are not owned or controlled by us but could include our partners, referred to herein as “Third Party Services.” We are not responsible for the privacy practices or the content of such Third Party Services. Please be aware that Third Party Services may collect Personal Information from you. Accordingly, we encourage you to read the terms and conditions and privacy policy of any Third Party Services that you choose to use or interact with.

12. CHILDREN’S PRIVACY

Our Sites are not structured to attract children under thirteen (15) years of age. Accordingly, we do not intend to collect Personal Information from anyone we know to be under thirteen (15) years of age. If we learn that we have collected Personal Information from a child under thirteen (15) years of age, we will delete that information as quickly as possible. If you believe that we might have any such information, please contact us at [email protected]

13. MODIFICATIONS OF THIS PRIVACY POLICY

IL MAKIAGE® reserves the right to change or update this Privacy Policy at any time by posting a notice on the Sites that we are changing our Privacy Policy. If the manner in which we use Personal Information changes, IL MAKIAGE® will notify users by: (a) sending the modified policy to our users via email; and/or (b) by any other reasonable means acceptable under applicable law. You will have a choice as to whether or not we use your information in this different manner, and we will only use your information in this different manner where you affirmatively consent to such use.

14. QUESTIONS REGARDING OUR PRIVACY PRACTICES

If you have any comments or questions regarding our Privacy Policy, or how we may be storing and/or using your Personal Information, please contact us via e-mail at: [email protected], or by mail at: IM Pro Makeup NY LP, 110 Greene St., Suite 305, New York, NY USA 10012.

FILING A COMPLAINT - If you are located in Australia and would like to complain about a breach of the Australian Privacy Principles, you may contact us at [email protected]
We will respond to you within a reasonable period of time (usually within 30 days) and will attempt to resolve that complaint.
If you are not satisfied with our proposed resolution, you may contact the Office of the Australian Information Commissioner (OAIC). Contact details at: https://www.oaic.gov.au/contact-us

15. YOUR CALIFORNIA PRIVACY RIGHTS/DISCLOSURES

Shine the Light. California Civil Code Section 1798.83 permits our customers who are California State residents to request certain information regarding our disclosure of Personal Data to third parties for their direct marketing purposes. IL MAKIAGE® will never share, sell, rent, exchange or barter your Personal Data to or with any third-party for financial gain or marketing purposes. Nevertheless, we may, in certain limited instances, share your Personal Data with third parties who perform administrative functions on our behalf. California State residents may request the following information regarding our disclosure of your Personal Data to third parties: (a) how your Personal Data was disclosed to third parties; (b) a list of certain categories of Personal Data that we have disclosed to certain third parties during the immediately preceding calendar year; and (c) a list of certain categories of third parties that received Personal Data from us during that calendar year. To make such a request, please send an email to [email protected]. Please note that we are only required to respond to one request per customer each year.

California Consumer Privacy Act of 2018 (“CCPA”). In addition to the foregoing, if you are a resident of the State of California certain other privacy-related rights may apply to you in accordance with the CCPA, including the right to opt-out of our sale of your personal information, as well as the right to know what personal information about you we have collected, whether your personal information was shared with third-parties in the preceding year and, if so, what categories of personal information were shared, as well as the categories of third parties with whom we shared that personal information. Please see our “Provisions for California Residents” for a more complete description of your rights under the CCPA as a California State resident.

Privacy Rights for California Minors in the Digital World. In addition, if you are a California State resident under the age of eighteen (18) and a registered user, California Business and Professions Code Section 22581 permits you to remove content or Personal Data that you have publicly posted. If you wish to remove such content or Personal Data and you specify which content or Personal Data you wish to be removed, we will do so in accordance with applicable law. Please be aware that after removal, you will not be able to restore removed content. In addition, such removal does not ensure complete or comprehensive removal of the content or Personal Data you have posted and, as such, there may be circumstances in which the law does not require us to enable removal of content.

These Privacy Provisions for California Residents (“Privacy Provisions”) supplement the information contained in the Privacy Policy set forth above. These Privacy Provisions apply solely to residents of the State of California (“CA Users”). We adopt these Privacy Provisions in compliance with the California Consumer Privacy Act of 2018 (“CCPA”). Any terms defined in the CCPA (such as “personal information”) have the same meaning when used in these Privacy Provisions.

Categories of Information We Collect

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular CA User or device (“personal information”).

Personal information does not include:

• Publicly available information from government records.

• De-identified or aggregated CA User information.

Information excluded from the CCPA's scope, such as:

• health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data; and

• personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.

We obtain the categories of personal information listed above from the following categories of sources (with the specific categories of personal information indicated in parenthesis):

• Directly from our CA Users. For example, from online registration forms that our CA Users submit to us in connection with the products and/or services that we offer by and through the Sites. (Category A, B, C and D)

• Indirectly from our CA Users. For example, through information we collect from our CA Users in the course of providing our products and/or services to them. (Category A, B, C, D and F)

• Directly and indirectly from activity on the Sites. This includes the type of browser that you use (e.g., Safari, Chrome, Internet Explorer), your IP address, the type of operating system that you use (e.g., Windows or iOS) and the domain name of your Internet Service Provider. In addition, we obtain certain Sites-related usage details and analytics as same are collected automatically by us and our third party partners. (Category F)

• When our CA Users interact with us on our social media accounts, including commenting on and/or liking our posts. (Category F)

• From third-parties that interact with us in connection with the products and/or services that we offer to our CA Users. For example, third party entities that assist us in sending direct and electronic mail, removing duplicate information from CA User lists, analyzing data and providing marketing analysis. (Category A, B, C and D)

Use of Personal Information

We may use or disclose the personal information that we collect for one or more of the following business purposes (with the specific categories of personal information indicated in parenthesis):

• To fulfil or meet the reason for which the information is provided. For example, if you provide us with personal information in connection with your purchase of products and/or services, we will use that information to process your order. (Category A, B, C and D).

• To provide you with information, products or services that you request from us. (Category A, B, C and D).

• To create, maintain, customize and secure your account with us. (Category A, B, C, D and F).

• To provide you with e-mail, direct mail and telemarketing messages concerning certain IL MAKIAGE® products and/or services, as well as third-party products and/or services, that we believe may be of interest to you. (Category A, B, C, D and F).

• To deliver relevant Sites-related content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you. (Category A, B, C, D and F).

• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including the Sites’ respective Terms and Conditions. (Category A, B, C, D and F).

• To improve the Sites and better present their respective contents to you. (Category A, B, C, D and F).

• For customer service purposes and to respond to inquiries from you. (Category A, B, C and D).

• For testing, research, analysis and product development. (Category A, B, C, D and F).

• As necessary or appropriate to protect our rights, property or safety, and that of our clients or others. (Category A, B, C, D and F).

• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations. (Category A, B, C, D and F).

• As described to you when collecting your personal information or as otherwise set forth in the CCPA. (Category A, B, C, D and F).

• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which personal information held by us is among the assets transferred. (Category A, B, C, D and F).

We will not collect additional categories of personal information or use the personal information that we collected for materially different, unrelated or incompatible purposes without providing you with notice.

Sharing Personal Information

We do not rent and/or sell your personal information to third parties for marketing purposes; provided, however, that we do share your personal information for the business purposes set forth above.

When we disclose personal information to a third party service provider or other entity, we enter into a contractual relationship that describes the purpose for which such third party may use the personal information and requires that third party to both keep the personal information confidential and not use it for any purpose other than the performance of its services under the applicable contract. Please note, we have not shared or sold the personal information of CA Users that we actually know are less than sixteen (16) years of age in the preceding twelve (12) months.

In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose:

Category A    Identifiers.

Category B    California Customer Records personal information categories.

Category C    Protected classification characteristics under California or federal law.

Category D    Commercial Information.

Category F    Internet or other similar network activity.

We disclose your personal information for a business purpose to the following categories of third parties (with the specific categories of personal information indicated in parenthesis):

• Our affiliates (Category A, B, C, D and F).

• Service providers (Category A, B, C, D and F).

• Third parties who provide certain of the products and/or services featured on the Sites (Category A, B, C, D and F).

• Third parties to whom you authorize us to disclose your personal information in connection with the products and/or services that we provide to you (Category A, B, C, D and F).

In the preceding twelve (12) months, we have not sold any personal information to third parties; provided, however, that we may provide your personal information from Categories A, B, C, D and F to third parties who provide certain of the products and/or services featured on the Sites for financial gain.

Your Rights and Choices

The CCPA provides CA Users (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

Access to Specific Information and Data Portability Rights
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past twelve (12) months. Once we receive and confirm your verifiable CA User request, we will disclose to you:

• The categories of personal information we collected about you.

• The categories of sources for the personal information we collected about you.

• Our business or commercial purpose for collecting or selling that personal information.

• The categories of third parties with whom we have shared that personal information.

• The specific pieces of personal information we collected about you (also called a data portability request).

If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:

• sales, identifying the personal information categories that each category of recipient purchased; and

• disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

Deletion Request Rights

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable CA User request, in accordance with the “Erasure Requests" process specified above under “Removing Information” clause, we will delete (and direct our service providers to delete) your personal information from our (their) records, unless an exception applies; provided, however, that in some cases, strictly for regulatory compliance purposes and to better evidence/honor opt-out/unsubscribe requests (and for no other purposes), we may retain certain items of your personal information on a de-identified and aggregated basis in such a manner that the data no longer identifies you.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

• Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our obligations in connection with our contract with you.

• Detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity, or prosecute those responsible for such activities.

• Debug products to identify and repair errors that impair existing intended functionality.

• Exercise free speech rights, ensure the right of another CA User to exercise her/his free speech rights or exercise another right provided for by law.

• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).

• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, but only if you previously provided informed consent.

• Enable solely internal uses that are reasonably aligned with CA User expectations based on your relationship with us.

• Comply with a legal obligation.

• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Exercising Access, Data Portability and Deletion Rights

To exercise your access and/or data portability rights described above, please submit a verifiable CA User request to us by either:

• Clicking here

• Emailing us at: [email protected] or

• Sending us U.S. mail to: IM Pro Makeup NY LP, 110 Greene St., Suite 305, New York, NY 10012.

With regards to your deletion rights described above, kindly follow the “Erasure Requests" process specified above under “Removing Information” clause.

Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable CA User request related to your personal information.

You may only make a verifiable CA User request for access or data portability twice within a 12-month period. The verifiable CA User request must:

• Provide sufficient information that allows us to reasonably verify that you are: (1) the person about whom we collected personal information; or (2) an authorized representative.

• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm that the personal information relates to you. Making a verifiable CA User request does not require you to create an account with us. We will only use personal information provided in a verifiable CA User request to verify the requestor's identity or authority to make the request.

Response Timing and Format

We endeavor to respond to all verifiable CA User requests within forty-five (45) days of the receipt thereof. If we require more time (up to ninety (90) days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the twelve (12) month period preceding the receipt of your verifiable request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable CA User request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

No Sale of Personal Data
IL MAKIAGE does not and will not sell personal data as the term “sell” is defined by the CCPA.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services;

• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;

• Provide you a different level or quality of goods or services; and/or

• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Changes to these Privacy Provisions

We reserve the right to amend these Privacy Provisions in our discretion and at any time. When we make changes to these Privacy Provisions, we will notify you by email or through a notice on the Sites’ respective homepages.

Contact Information

If you have any questions or comments about these Privacy Provisions, our Privacy Policy, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under California State law, please do not hesitate to contact us by either:

• Clicking here

• Emailing us at: [email protected] or

• Sending us U.S. mail to: IM Pro Makeup NY LP, 110 Greene St., Suite 305, New York, NY 10012.

16. YOUR NEVADA PRIVACY RIGHTS

If you are a resident of the State of Nevada and would like to opt-out from the sale of your personal information to any third party data broker, please e-mail us at: [email protected]

17. YOUR RIGHTS IN CANADA

We are committed to providing transparency to outside parties (which we may electronically communicate with) with respect to our compliance practices associated with Canada’s Anti-Spam Legislation, and its implementing rules and regulations (“CASL”). The types of commercial electronic messages (“CEM”) that we may send from time to time could include email and/or text messages sent to our current or potential end-users, as well as messages sent to our users’ social media profiles, including CEM sent in connection with your use of the Site Offerings and/or IL MAKIAGE® products and/or services that we think might be of interest to you.

If you have received a CEM from us, it is because: (a) you have previously provided your express consent, as required by CASL; (b) we have your implied consent, strictly as permitted under CASL; or (c) the type of CEM sent is exempt under CASL. Without limiting the foregoing, a CEM sent by us would be exempt if the CEM or the relationship between you and IL MAKIAGE® includes any of the following: (i) you have a personal relationship or a family relationship with the IL MAKIAGE® employee who contacted you; (ii) the CEM was sent by IL MAKIAGE® to you in order to respond to your request or inquiry (including, without limitation, your request for Site Offerings and/or other IL MAKIAGE® products and/or services); (iii) the CEM was sent by IL MAKIAGE® to you, in order to enforce a legal right or obligation (for instance, if you have an outstanding debt, breached the Terms, etc.); (iv) the CEM only facilitates or confirms a transaction; (v) the CEM only provides IL MAKIAGE® data security information; and/or (vi) the CEM only provides information about your ongoing use of the Site Offerings if you have made a purchase during the prior two (2) year period.

If you have received a CEM, and you believe that you should not have, please contact us immediately at: [email protected] in order to unsubscribe and we will remove your electronic address from our list within ten (10) business days.

18. ADDITIONAL RIGHTS APPLICABLE TO RESIDENTS OF THE EUROPEAN UNION AND UNITED KINGDOM

For our users in the European Union (“EU”) or United Kingdom (“UK”), this Privacy Policy is intended to comply with the EU’s or UK’s General Data Protection Regulation (“GDPR” and “UK GDPR” respectively).

Data Subject Rights: If you are an EU or UK resident, you have the following rights, subject to certain limitations and exceptions imposed by the GDPR or UK GDPR:

1. Right to Access – this is the right to request copies, including in a machine readable or other reasonable format, of those portions of your Personal Data that we have collected.
2. Right to Correct – this is the right to have Personal Data in our possession or control corrected if it is accurate or incomplete.
3. Right to Erasure – this is the right to ask us to delete or remove your Personal Data from our systems, though note that this right is not absolute, for example where processing is necessary to comply with a legal obligation or for the establishment, exercise or defence of legal claims.
4. Right to Restrict Use – this is your right to block us from using, or to limit the ways we can use, your Personal Data, though note that this right is not absolute where an exemption to this right applies.
5. Right to Data Portability – this is your right to request that certain of your Personal Data be transferred to a different provider.
6. Right to Object – this is your right to object to our use of your Personal Data, including when we use it for our legitimate interests, including for marketing purposes.
7. Right to withdraw consent – where processing is based on consent, you have the right to withdraw that consent at any time, however this will not affect the lawfulness of processing based on consent before its withdrawal.

Automated decision making: We do not process your personal data using any automated decision-making processes, including profiling.

International Transfers: If you want to know more about international transfers of your Personal Data, please review the section on: INTERNATIONAL TRANSFERS OF PERSONAL DATA

Special Category Data: Note that where you provide information to us, this might be construed as Special Category Personal Data as set out in the GDPR/UK GDPR. We do not intend to collect these categories of Personal Data but information might be inferred about some of the information or answers you provide to us. For example, the data you give us including in the PowerMatch Quiz might reveal data about your health (such as allergies) or about your racial or ethnic origin. We require your express consent to process this Special Category Personal Data, so the provision of this information is always voluntary. We also ensure that our technical and organisational security measures take into account the nature and types of Personal Data being processed.

Questions: If you have questions relating to the above rights, you can contact us at: [email protected]

Complaints: If you are not satisfied with how we have responded to any request or complaint that you submit to us or if you are not satisfied more generally with the way in which we have handled your personal data, you may be able to raise your complaint with the Data Protection Authority in your jurisdiction. You can find your national Data Protection Authority here.

Representatives: For purposes of the GDPR or UK GDPR, if you are located in the EU or UK respectively, the Data Controller of the information you provide is IM Pro Makeup NY LP, 110 Greene St., Suite 305, New York, NY USA 10012. Our Data Protection Officer may be contacted at [email protected]

If you are located in the UK or the EU, you may contact Achieved Compliance Advocacy, our appointed representative in the UK and the EU, at the following addresses:

EU

By email: [email protected]

By mail: Achieved Compliance Advocacy, Ltd. C/o Renata Kloss, Singel 250, 1016 AB Amsterdam, Netherlands.

UK

By email: [email protected]

By mail: Achieved Compliance Advocacy, Ltd. C/o Robert Cain 40 Oxford Road, High Wycombe, Buckinghamshire, UK HP11 2EE.