Privacy Policy

This Privacy Policy describes how Lash Ease (the ‘Site’, ‘we’, ‘us’ or ‘our’) collects, uses and discloses your personal information when you visit, use or make a purchase from our services at www.lash-ease.com (the ‘Site’) or otherwise communicate with us (collectively, the ‘Services’). For the purposes of this Privacy Policy, ‘you’ and ‘your’ means you as a user of the Services, whether you are a customer, website visitor or any other person whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you consent to the collection, use and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, do not use or access any of the Services.

Changes to this privacy policy

We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal or regulatory reasons. We will post the revised Privacy Policy on the Site, update the ‘Last Updated’ date and take any other steps required by applicable law.

Personal data collection information and contact details of and data controller

The data controller of this website, within the meaning of the General Data Protection Regulation (GDPR), is Lash Ease. The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or controller queries). You can recognize an encrypted connection by the string ‘https://’ and the lock symbol in the line of your browser.

How we collect and use your personal data

To provide the Services, we collect and have collected personal information about you from various sources over the past 12 months, as set out below. The information we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use the information we collect about you to communicate with you, provide the Services, comply with any applicable legal obligations, enforce applicable terms of service and to protect the Services, our rights, and the rights of our users or others.

What personal information we collect

The types of personal information we obtain about you depend on how you interact with our Site and use our Services. When we use the term ‘personal information’, we mean information that identifies, relates to, describes or can be associated with you. The following sections describe the categories and specific types of personal information we collect.

Information we collect directly from you

Information that you provide to us directly through our Services may include the following:

- Basic contact information, including your name, address, phone number, email address.
- Order information including your name, billing address, shipping address, payment confirmation, email address, phone number.
- Account information including your username, password and security questions.
- Shopping information, including the items you view, place in your shopping cart or add to your wish list.
- Customer support information, including the information you wish to include in communications with us, for example when you send a message through the Services.

Some features of the Services may require you to directly provide us with certain information about yourself. You may choose not to provide this information, but if you do, you may not be able to use or access these features.

Information we collect through cookies

To make visiting our website attractive and enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies used by us are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a certain period of time, which can vary depending on the cookie. In some cases, cookies are used to simplify the ordering process  by saving settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website).

We may cooperate with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we cooperate with the advertising partners mentioned above, the following sections inform you separately and distinctly about the use of such cookies and the scope of information collected in each case.

Please note that you can set your browser to inform you about the setting of cookies and decide individually whether you want to accept cookies or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in each browser's help menu, which explains how to change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/kb/ph21411?locale=de_DE&

Opera: https://help.opera.com/en/latest/web-preferences/#cookies

If you do not accept cookies, the functionality of our website may be limited.

Information we obtain from third parties

Finally, we may obtain information about you from third parties, including vendors and service providers who may collect information on our behalf, such as:

- Companies that support our site and services, such as Shopify.
- Our payment processors, who collect payment information (e.g. bank account, credit or debit card details, billing address) to process your payment, fulfill your orders and provide you with the products or services you have requested, to fulfill our payment obligations. contract with you.
- When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we, or third parties we work with, may automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries and cookies.

Any information we obtain from third parties will be treated in accordance with this privacy policy. We are not responsible or liable for the accuracy of information provided to us by third parties and are not responsible for the policies or practices of third parties. Please see the section below, Third Party Websites and Links, for more information.

How we use your personal data

- Providing products and services. We use your personal information to provide you with the Services to perform our contract with you, including to process your payments, fulfill your orders, send you notifications regarding your account, purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange shipping, facilitate any returns and exchanges and to enable you to post reviews.
- Marketing and advertising. We use your personal data for marketing and promotional purposes, such as sending you marketing, advertising and promotional communications by email, SMS or post, and to show you advertisements for products or services. This may include using your personal data to better tailor the Services and advertisements on our Site and other websites.
- Security and fraud prevention. We use your personal information to detect, investigate or take action regarding possible fraudulent, illegal or malicious activity. If you choose to use the Services and register an account, you are responsible for keeping your account information secure. We strongly recommend that you do not share your username, password or other access details with anyone else. If you believe your account has been hacked, please contact us immediately.
- Communicating with you. We use your personal data to provide you with customer support and to improve our Services. This is in our legitimate interest to respond to you, provide you with effective services and maintain our business relationship with you.

How we disclose personal information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes covered by this Privacy Policy. Such circumstances may include:

- With suppliers or other third parties performing services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
- With business and marketing partners, including Shopify, to provide services to you and advertise on your behalf. Our business and marketing partners will use your data in accordance with their own privacy notices.
- When you instruct us, request us or otherwise consent to the disclosure of certain information to third parties, for example to send you products or through your use of social media widgets or login integrations, with your consent.
- With our subsidiaries or otherwise within our business group, in our legitimate interests to run a successful business.
- In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including responding to subpoenas, search warrants and similar requests), to enforce applicable terms of service and to protect or defend the Services , our rights and the rights of our users or others.

We have disclosed the following categories of personal information and sensitive personal information (marked *) about users in the past 12 months for the purposes set out above in ‘How we collect and use your personal information’ and ‘How we disclose personal information’ ‘:

Category:

- Identification information such as basic contact details and certain order and account information
- Commercial information such as order information, shop information and customer support information
- Internet or other similar network activity, such as usage data

Categories of recipients:

- Suppliers and third parties providing services on our behalf (such as internet service providers, payment processors, fulfillment partners, customer support partners and data analytics providers)
- Business and marketing partners
- Associates

We do not use or disclose sensitive personal information for the purpose of inferring characteristics about you.

We have ‘sold’ and ‘shared’ personal information (as those terms are defined in applicable law) for the purpose of participating in advertising and marketing activities in the past 12 months, as follows.

Category of personal information

- Identification data such as basic contact details and certain order and account information
- Commercial information such as data on products or services purchased and shopping information
- Internet or other similar network activity, such as usage data

Categories of recipients

- Business and marketing partners

User-generated content

The Services allow you to post product reviews and other user-generated content. If you choose to submit user-generated content in a public area of the Services, this content is public and accessible to everyone.

We have no control over who has access to the information you make available to others, and cannot guarantee that parties with access to such information will respect your privacy or keep it secure. We are not responsible for the privacy or security of information you make publicly available, or for the accuracy, use or misuse of information you disclose or receive from third parties.

Email/SMS marketing

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. Providing other data is voluntary and used to address you personally. We use the so-called single opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter if you have explicitly confirmed to us that you consent to sending the newsletter.

By activating the confirmation link, you consent to us using your personal data in accordance with Art. 6(1) letter a GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP), as well as the date and time of registration, in order to trace any misuse of your e-mail address at a later date. The data we collect when you sign up for the newsletter is used exclusively for advertising through the newsletter. You can unsubscribe from the newsletter at any time via the link in the newsletter or by sending a corresponding message to the controller mentioned at the beginning. After you have cancelled your subscription, your e-mail address will be immediately removed from the mailing list of our newsletter, unless you have expressly consented to further use of your data or we reserve the right to use data further than permitted by law and about which we inform you in this statement.

If you have given us your e-mail address when purchasing goods or services, we reserve the right to send you regular e-mail offers for goods or services similar to those you have already purchased from our range. We do not require separate consent for this. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising in  accordance with Art. 6 para. 1 lit. f GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you e-mails. You have the right to object at any time to the use of your e-mail address for the above advertising purposes by sending a message to the controller mentioned at the beginning.

If you wish to unsubscribe from our email campaigns, click on the Unsubscribe link at the bottom of every marketing email you receive from us. If you no longer wish to receive text messages from us, reply STOP to every text message you receive from us. For more information, please see our Mobile Messaging Terms and Conditions available at https://lash-ease.com/policies/terms-of-service.

Use of payment providers

- PayPal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - ‘purchase on account’ or ‘payment by installments’ via PayPal, we transfer your payment details to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter ‘PayPal’), as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1lit. b GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - ‘purchase on account’ or ‘payment by installments’ via PayPal. For this purpose your payment data may be transferred to credit bureaus in accordance with Art. 6 para. 1 lit. f GDPR based on the legitimate interest of PayPal to establish your solvency. PayPal uses the result of the credit check regarding the statistical probability of non-payment to decide on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If the result of the credit report contains scoring values, these are based on a& scientifically recognized mathematical-statistical procedure. The calculation of score values includes, but is not limited to, address data. More information on data protection, including information on the credit bureaus used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be authorized to process your personal data if this is necessary to process payments in accordance with the contract.

- Klarna

If you select the payment method ‘Klarna’, the payment will be processed through the payment service provider Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden), to whom we transfer the information you provided during the order process, together with the information about your order in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Klarna and only to the extent necessary for this purpose. Further information on Klarna's data protection provisions can be found at the following Internet address: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/nl_nl/privacy

Retargeting/reference advertising

Facebook Custom Audience via the pixel method

This website uses the ‘Facebook pixel’ of META, 1 Hacker Way, Menlo Park, CA 94025, USA (‘META’). If explicitly authorized users' behavior can be tracked after they have seen or clicked on a Facebook ad. This process is used to evaluate the effectiveness of Facebook ads for statistical and  market research purposes and may help to optimize future advertising measures.

The data collected is anonymous to us, so no conclusions can be drawn about the identity of the user. However, the data is stored and processed by Meta so that a connection to the relevant user profile is possible and Meta can use the data for its own advertising purposes in accordance with the Meta Data Usage Policy (https://www.facebook.com/about/privacy/). You may enable Facebook and its partners to serve ads on and outside Facebook. For these purposes, a cookie may also be stored on your computer. These processing operations are only carried out with your express consent in accordance with Art. 6 par. 1 lit. a GDPR.

Consent for the use of the Facebook pixel may only be given by users over 13 years old. If you are younger, please ask your legal guardian for permission.

Facebook Inc, based in the US, is certified to the US-European data protection agreement ‘Privacy Shield’, which ensures compliance with the level of data protection applicable in the EU.

To disable the use of cookies on your computer, you can set your internet browser to prevent cookies from being stored on your computer in the future or to delete cookies already stored. However, disabling all cookies may mean that some functions on our website can no longer be performed. You can also disable the use of cookies by third-party providers such as Facebook on the following Digital Advertising Alliance website: https://www.aboutads.info/choices/

Third-party websites and links

Our site may contain links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or operated by us, you should read their privacy and security policies and other terms and conditions. We do not warrant and are not responsible for the privacy or security of such sites, including the accuracy, completeness or reliability of the information contained therein. Information you provide on public or semi-public sites, including information you share on third-party social networking platforms, may also be visible to other users of the Services and/or users of those third-party platforms, without limitation as to its use by us or a third party. The inclusion of such links does not by itself imply endorsement of the content on such platforms or of their owners or operators, except as stated on the Services.

Children's data

The Services are not intended for use by children, and we do not knowingly collect personal information about children. If you are the parent or guardian of a child who has provided us with personal information, you may contact us using the contact details below to request that it be deleted.

As of the effective date of this privacy policy, we have no actual knowledge that we ‘share’ or ‘sell’ (as those terms are defined in applicable law) personal information of persons under 16 years of age.

Security and retention of your data

Please note that no security measure is perfect or impenetrable and we cannot guarantee ‘perfect security’. Moreover, any information you send to us may not be secure in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

How long we keep your personal data depends on various factors, such as whether we need the data to maintain your account, provide the Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

Your rights and choices

Depending on where you live, you may have some or all of the rights below with respect to your personal data. However, these rights are not absolute, may apply only in certain circumstances and in certain cases we may reject your request as permitted by law.

- Right of access/knowledge. You may have the right to request access to the personal information we hold about you, including details of how we use and share your information.
- Right to delete. You may have the right to request that we delete the personal information we hold about you.
- Right to correct. You may have the right to request that we correct inaccurate personal information we hold about you.
- Right of portability. Under certain circumstances and with certain exceptions, you may have the right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party.

Complaints

If you have any complaints about the way we process your personal data, please contact us using the contact details below.

International users

Please note that we may transfer, store and process your personal data outside your country of residence, including the United States. Your personal data is also processed by staff and third-party service providers and partners in these countries. If we transfer your personal data outside Europe, we will rely on recognised transfer mechanisms such as the European Commission's standard contractual clauses, or equivalent contracts issued by the relevant UK competent authority, where relevant, unless the data transfer is to a country, which has been determined to provide an adequate level of protection.

Contact

If you have any questions about our privacy statement or this privacy policy, or if you wish to exercise any of the rights available to you, please email us at hey@lash-ease.com