PRIVACY POLICY

This Privacy Policy applies to https://sarahcrealbeauty.com/ (the “Website”) and describes how Creality Inc. (“we,” “us,” “our”) collects, maintains, and uses your Personal Information.

For purposes of this Privacy Policy, “Personal Information” means any information from or about a person that either identifies that person directly or that makes that person identifiable when it is combined with other information from or about that person from any source.

Where you are located in the United Kingdom, the provisions set out under the heading "UK Individuals" below shall apply to you in addition to, and to the extent of any conflict shall prevail over, the remainder of this Privacy Policy.

PERSONAL INFORMATION

Automatically Collected Personal Information:

When you visit the Website, we automatically collect certain information about you including information about your device, web browser, IP address, time zone, and cookies installed on your device. As you browse the Website, we may also collect information about the pages or products that you view, what websites or searches referred you to our Website, and information about your interactions with the Website (collectively referred to as “Device Information”).

We may collect Device Information using technologies such as the following:

  1. Cookies are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.

  2. Log files track actions occurring on our Website, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

  3. Web beacons, tags, and pixels are electronic files used to record information about how you browse the Website.

  4. Analytics such as Google Analytics.

  • Google Analytics is a web analytics service provided by Google, Inc. ("Google"). Google uses cookies to help us analyze how visitors use our Website. The information generated about your use of our Website is generally transmitted to and stored on a Google server in the U.S. Google will use this information for evaluating your use of our Website, compiling reports on Website activity, and providing us with other analytic services relating to our Website use. Google will not associate your IP address with any other data held by Google.

  • You may manage Google’s use of cookies by visiting Google’s Ads settings and selecting the appropriate settings in your browser. However, please note that if you do so, you may not be able to use the full functionality of our Website. For information regarding how Google uses your Personal Information, please visit www.google.com/policies/privacy/partners/.

Personal Information You Provide To Us Directly:

When you make, or attempt to make, a purchase through the Website, we collect certain information from you. Such information may include your name, billing and shipping addresses, payment information, email address, and phone number (collectively referred to as “Order Information”).

We may also collect Personal Information when you choose to communicate with us directly through an online form, by sending us an email, by requesting additional information, or by otherwise contacting us. We will collect whatever information that you choose to provide us with. We will combine that information with other information that we collect from and about you as described in this Privacy Policy.

Information that We Collect From Other Sources :

We may also obtain Personal Information from our business partners and service providers. This information includes, but is not limited to, information that we receive from direct marketing providers, product referrals, and lead generators. We also may combine information we receive from third parties with other information we collect from you as described in this Privacy Policy. In addition, we may review, collect, and use information that you post publicly about us or our activities on public-facing websites, social media platforms, blogs or that you otherwise present to the public.

USING YOUR PERSONAL INFORMATION

We use the Personal Information we collect from and about you for purposes including, but not limited to, the following:

  • To enable us to fulfill orders placed through the Website (including processing payment information, sending order confirmations and arranging for shipping);

  • To communicate with you and to screen our orders for potential risk of fraud;

  • To communicate with you in line with the preferences you have shared with us;

  • To provide you with information or advertising related to our products or services;

  • To improve our products or services; and

  • To protect our rights.

SHARING YOUR PERSONAL INFORMATION

We may disclose your Personal Information if we are required by law to do so or if you violate our Terms of Service. We also share your Personal Information with third parties to help us use your Personal Information for the purposes described above.We may share your Personal Information with the following categories of recipients:

  1. e-commerce platform providers (including Shopify), who host and operate our Website;

  2. payment processors and fraud prevention service providers, who process transactions and screen for fraudulent activity;

  3. shipping and logistics providers, who fulfil and deliver your orders;

  4. analytics providers (including Google), who assist us in understanding Website usage and improving our services;

  5. marketing and advertising service providers, who assist us in delivering relevant communications and advertisements;

  6. professional advisers, including lawyers, auditors, and insurers, who provide consultancy, legal, insurance, and accounting services; and

  7. regulatory bodies, tax authorities, and law enforcement agencies, where we are required to do so by law or to protect our rights.

Our store is powered by Shopify. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.

DATA RETENTION

When you place an order through our Website, we will maintain your Personal Information for our records unless and until you ask us to delete this information.

SECURITY

We employ reasonable administrative, technical, and physical safeguards designed to protect the data that we store. However, please note that no method of data transmission or storage is completely secure, and we cannot guarantee the absolute security of your Personal Information.

MINORS

We are a general audience site, and do not direct any of our content at children under 16 years of age. If we learn, or have reason to suspect, that a user of our Website is under age 16, we will promptly delete any personal information in that user’s account. By using this site, you represent that you are at least the age of majority in your country, state or province of residence.

CHANGES

This Privacy Policy may be updated from time to time in order to reflect changes to our practices or for any other operational, legal or regulatory reasons, so please review it frequently.

CONTACT

For more information about our privacy practices, if you would like to access, correct, amend or delete any personal information we have about you, or to register a complaint, please contact us at info@sarahcrealbeauty.com.

CALIFORNIA SHINE THE LIGHT

If you are a California resident and have an established business relationship with us, you can request a notice disclosing the categories of Personal Information we have shared with third parties, for the third parties’ direct marketing purposes, during the preceding calendar year. However, please note that we do not make such disclosures.

UK INDIVIDUALS

This section applies exclusively to individuals located in the United Kingdom ("UK Data Subjects"). The provisions of this section supplement, and to the extent of any inconsistency shall override, the other sections of this Privacy Policy.

The data controller in respect of your Personal Information is Creality Inc., contactable at info@sarahcrealbeauty.com.

Direct marketing

You will receive marketing communications from us if you have requested information from us or purchased goods or services from us and you have not opted out of receiving the marketing. We may also analyse your Personal Information to form a view which products, services and offers may be of interest to you so that we can then send you relevant marketing communications.

You can ask to stop sending you marketing communications at any time by following the opt-out links within any marketing communication sent to you or by contacting us. If you opt out of receiving marketing communications, you will still receive service-related communications.

Lawful Bases for Processing.

We process your Personal Information on the following lawful bases:

  1. Contract - where processing is necessary for the performance of a contract with you, including the fulfilment of orders and the provision of our services and/or products;

  2. Legitimate Interests - where processing is necessary for the purposes of our legitimate interests, provided that such interests are not overridden by your rights and freedoms;

  3. Legal Obligation - where processing is necessary for compliance with a legal obligation to which we are subject; and

  4. Consent - where you have given your explicit consent to the processing of your Personal Information. Where we rely on consent, you may withdraw that consent at any time by contacting us at the details set out below, without affecting the lawfulness of processing carried out prior to such withdrawal.

We have set out below a description of all the ways we plan to use the various categories of your personal data, and which of the legal bases we rely on to do so.

Purpose

Type of Personal Information

Lawful Basis

To process and fulfil orders placed through the Website, including processing payments, sending order confirmations, and arranging shipping

Name, billing and shipping addresses, email address, phone number, payment information (Order Information)

Performance of a contract with you

To communicate with you regarding your orders, respond to your enquiries, and provide customer support

Name, email address, phone number, and any information you provide in your communications

Performance of a contract with you; Legitimate Interests (to respond to enquiries and provide customer support)

To screen orders for potential risk of fraud, to protect against fraudulent transactions, and to protect our rights, privacy, safety, or property, including enforcement of our Terms of Service

Order Information, Device Information (including IP address and browsing behaviour), correspondence, and any other relevant Personal Information

Legitimate Interests (to prevent fraud and protect our business); Legal Obligation

To analyse how visitors use our Website, compile reports on Website activity, and improve our Website, products, and services

Device Information (including IP address, browser type, pages viewed, referring/exit pages, date/time stamps)

Legitimate Interests (to improve our Website, products, and services)

To send you marketing communications about our products, services, promotions, and offers (including beauty and skincare product recommendations), and to analyse your Personal Information to identify which products, services, and offers may be of interest to you and to personalise your experience on our Website

Name, email address, purchase history, browsing data, product preferences

Consent; Legitimate Interests (soft opt-in where you have previously purchased similar goods or services from us; to provide you with relevant content and improve your experience)

To place cookies and similar tracking technologies on your device for the purposes of website functionality, analytics, and advertising

Device Information (including cookies, web beacons, tags, pixels, and unique identifiers)

Consent (for non-essential cookies); Legitimate Interests (for strictly necessary cookies)

To comply with applicable legal and regulatory obligations, including tax, accounting, and reporting requirements

Order Information, payment records, correspondence

Legal Obligation

To share your Personal Information with third-party service providers (including Shopify) who assist us in operating our Website and fulfilling orders

Order Information, Device Information

Performance of a contract with you; Legitimate Interests (to operate our business efficiently)

To share your Personal Information in connection with any proposed or actual sale, transfer, merger, or acquisition of all or part of our business or assets

All categories of Personal Information described in this Privacy Policy

Legitimate Interests (to pursue a corporate transaction in the interests of our business)

To obtain and combine Personal Information from business partners, service providers, and other third-party sources to enhance our records

Information received from direct marketing providers, product referrals, lead generators, and publicly available information

Legitimate Interests (to maintain accurate records and improve our marketing and services)

To maintain the security and integrity of our Website, including monitoring for and preventing unauthorised access or cyber threats

Device Information (including IP address, log files, browser type)

Legitimate Interests (to ensure network and information security)

International Transfers

Your Personal Information may be transferred to, and processed in, countries outside the United Kingdom, including the United States. Where such transfers take place, we shall ensure that appropriate safeguards are in place in accordance with Chapter V of the UK GDPR, which may include the use of the International Data Transfer Agreement or the International Data Transfer Addendum to the EU Standard Contractual Clauses issued by the Information Commissioner's Office ("ICO"), or reliance on any other lawful transfer mechanism.

Your Personal Information may be transferred to, and processed in, countries outside the United Kingdom, including the United States. Where such transfers take place, we shall ensure that appropriate safeguards are in place in accordance with Chapter V of the UK GDPR, which may include the use of the International Data Transfer Agreement or the International Data Transfer Addendum to the EU Standard Contractual Clauses issued by the Information Commissioner's Office ("ICO"), or reliance on any other lawful transfer mechanism.

We share your personal data within Creality Inc. and may transfer your personal data to service providers that carry out certain functions on our behalf. This may involve transferring personal data outside the UK and the above appropriate safeguards shall be in place.

Retention

We will retain your Personal Information only for so long as is necessary for the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. In determining the appropriate retention period, we will have regard to the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the data, and whether we can achieve those purposes through other means.

Your Rights

Subject to applicable law, as a UK Data Subject you have the following rights in relation to your Personal Information:

  1. the right to request access to the Personal Information we hold about you;

  2. the right to request rectification of inaccurate or incomplete Personal Information, though we may need to verify the accuracy of the new data you provide to us;

  3. the right to request erasure of your Personal Information in certain circumstances;

  4. the right to request restriction of processing of your Personal Information;

  5. the right to data portability, being the right to receive your Personal Information in a structured, commonly used, and machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you;

  6. the right to object to processing of your Personal Information, where we are relying on a legitimate interest as the legal basis for that particular use. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your right to object;

  7. the right to withdraw consent where we are relying on consent to process your Personal Information. However, this will not affect the lawfulness of any prior processing carried out and if you withdraw your consent we may not be able to provide certain products or services to you;

  8. the right to object to the processing of your Personal Information for direct marketing purposes; and

  9. the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

To exercise any of the above rights, please contact us at [info@sarahcrealbeauty.com]. Please note that these rights are not absolute in every circumstance. If any limitation applies, we will explain this to you.

Complaints

You have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). However, before doing so please make sure you have first made your complaint to us or asked us for clarification if there is something you do not understand. The ICO will expect you to have done this before reviewing your complaint.

You can submit your complaint to us at [info@sarahcrealbeauty.com].