Privacy Policy

Privacy Policy for Glowzone Beauty

Type of website: Ecommerce
Effective date: 2021 day of July, 19th
www.glowzonebeauty.ca (the “Site”) is owned and operated by Micah Bass. Micah Bass is the data
controller and can be contacted at:
glowzonebeautyto@gmail.com
(647) 926-5982

Purpose
The purpose of this privacy policy (this “Privacy Policy”) is to inform users of our Site of the
following:

  1. The personal data we will collect;
  2. Use of collected data;
  3. Who has access to the data collected;
  4. The rights of Site users; and
  5. The Site’s cookie policy.

This Privacy Policy applies in addition to the terms and conditions of our Site.

GDPR

For users in the European Union, we adhere to the Regulation (EU) 2016/679 of the European
Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulation (the
“GDPR”). For users in the United Kingdom, we adhere to the GDPR as enshrined in the Data
Protection Act 2018.

We have not appointed a Data Protection Officer as we do not fall within the categories of controllers
and processors required to appoint a Data Protection Officer under Article 37 of the GDPR.

Consent

By using our Site users agree that they consent to:
Page 1 of 91. The conditions set out in this Privacy Policy.
When the legal basis for us processing your personal data is that you have provided your consent to that
processing, you may withdraw your consent at any time. If you withdraw your consent, it will not make
processing which we completed before you withdrew your consent unlawful.
You can withdraw your consent by: Contacting us to delete or remove information for you.

Legal Basis for Processing

We collect and process personal data about users in the EU only when we have a legal basis for doing
so under Article 6 of the GDPR.

We rely on the following legal bases to collect and process the personal data of users in the EU:

  1. Users have provided their consent to the processing of their data for one or more specific
    purposes;
  2. Processing of user personal data is necessary for us or a third pary to pursue a legitimate interest.
    Our legitimate interest is not overriden by the interests or fundamenal rights and freedoms of
    users. Our legitimate interest(s) are: Information is collected and processed for the purpose of
    handling
    your request regarding our future cooperation. This includes fulfilling retail orders from the
    website, booking appointments through the website, receiving personalized/targeted newsletters
    or promotional emails, or receiving customer service.;
  3. Processing of user personal data is necessary for us to take, at the request of a user, steps before
    entering a contract or for the performance of a contract to which a user is a party. If a user does
    not provide the the personal data necessary to perform a contract the consequences are as
    follows: If the user does not provide personal data, Glow Zone Beauty cannot fulfill all requests
    of the contract including delivering personal/targeted newsletters or promotions via email, accept
    appointments booked through the website, offer customer service, or process and ship products
    purchased from the website.;
  4. Processing of user personal data is necessary for us to comply with a legal obligation. If a user
    does not provide the the personal data necessary for us to perform a legal obligation the
    consequences are as follows: An appointment cannot be booked or items cannot be bought or
    shipped from the retail section of the website, and customer service concerns cannot be
    resolved.; and

Website Privacy Policy Page 2 of 95. Processing of user personal data is necessary to a task carried out in the public interest or in the
exercise of our official authority.

Personal Data We Collect

We only collect data that helps us achieve the purpose set out in this Privacy Policy. We will not collect
any additional data beyond the data listed below without notifying you first.

Data Collected Automatically

When you visit and use our Site, we may automatically collect and store the following information:

  1. IP address;
  2. Location;
  3. Hardware and software details;
  4. Clicked links; and
  5. Content viewed.

Data Collected in a Non-Automatic Way

We may also collect the following data when you perform certain functions on our Site:

  1. First and last name;
  2. Age;
  3. Date of birth;
  4. Sex;
  5. Email address;
  6. Phone number;
  7. Address;
  8. Payment information; and
  9. Auto fill data.

This data may be collected using the following methods:

  1. Booking system;
  2. Waiver form;

Website Privacy Policy Page 3 of 93. Order processing form; and

  1. Subscriber form.

How We Use Personal Data

Data collected on our Site will only be used for the purposes specified in this Privacy Policy or
indicated on the relevant pages of our Site. We will not use your data beyond what we disclose in this
Privacy Policy.

The data we collect automatically is used for the following purposes:

  1. Analytics.
    The data we collect when the user performs certain functions may be used for the following purposes:
  2. Communication via email;
  3. Shipping of packages and goods purchased from website;
  4. Send birthday emails or promotions; and
  5. Contact to resolve customer service inquiries.

Who We Share Personal Data With

Employees

We may disclose user data to any member of our organization who reasonably needs access to user data
to achieve the purposes set out in this Privacy Policy.
Third Parties

We may share user data with the following third parties:

  1. Website Developer;
  2. Google Analytics;
  3. Square POS; and
  4. Google Adsense, Doubleclick Cookie.

We may share the following user data with third parties:

  1. Personal information such as first and last name, last appointment booked, email address, phone
    Website Privacy Policy Page 4 of 9number;
  2. Tracks and reports website traffic;
  3. Transactional information such as amount paid, payment method used, time, language, website
    browser, IP address, name of transacting parties; and
  4. Links clicked while using site, websites including ours that user may have searched.
    We may share user data with third parties for the following purposes:
  5. Website Developer may have access to your Personal Data only to perform these tasks on our
    behalf and are obligated not to disclose or use it for any other purpose.;
  6. To track and monitor the use of the Website. This data is shared with other Google Websites.
    Google may use the collected data to contextualise and personalise ads of its own ad network;
  7. Process payments, send emailed receipts, and to provide, maintain, and improve services; and
  8. Enables it and its partners to serve ads to our users based on their visit to our Website or other
    websites on the Internet..

Third parties will not be able to access user data beyond what is reasonably necessary to achieve the
given purpose.

Other Disclosures

We will not sell or share your data with other third parties, except in the following cases:

  1. If the law requires it;
  2. If it is required for any legal proceeding;
  3. To prove or protect our legal rights; and
  4. To buyers or potential buyers of this company in the event that we seek to sell the company.
    If you follow hyperlinks from our Site to another Site, please note that we are not responsible for and
    have no control over their privacy policies and practices.

How Long We Store Personal Data

User data will be stored for 2 years.
You will be notified if your data is kept for longer than this period.
Website Privacy Policy Page 5 of 9How We Protect Your Personal Data
strongest available SSL encryption, data is stored on secure servers in secure facilities. All data is only
accessible by the owner, Micah Bass. The security of your data is important to us but remember that no
method of transmission over the Internet or method of electronic storage is 100% secure. While we
strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its
absolute security.

While we take all reasonable precautions to ensure that user data is secure and that users are protected,
there always remains the risk of harm. The Internet as a whole can be insecure at times and therefore
we are unable to guarantee the security of user data beyond what is reasonably practical.

International Data Transfers

We transfer user personal data to the following countries:

  1. Canada.
    When we transfer user personal data we will protect that data as described in this Privacy Policy and
    comply with applicable legal requirements for transferring personal data internationally.
    If you are located in the United Kingdom or the European Union, we will only transfer your personal
    data if:
  2. The country your personal data is being transferred to has been deemed to have adequate data
    protection by the European Commission or, if you are in the United Kingdom, by the United
    Kingdom adequacy regulations; or
  3. We have implemented appropriate safeguards in respect of the transfer. For example, the
    recipient is a party to binding corporate rules, or we have entered into standard EU or United
    Kingdom data protection contractual clauses with the recipient..

Your Rights as a User

Under the GDPR, you have the following rights:

  1. Right to be informed;
  2. Right of access;

Website Privacy Policy Page 6 of 93. Right to rectification;

  1. Right to erasure;
  2. Right to restrict processing;
  3. Right to data portability; and
  4. Right to object.

Children

We do not knowingly collect or use personal data from children under 16 years of age. If we learn that
we have collected personal data from a child under 16 years of age, the personal data will be deleted as
soon as possible. If a child under 16 years of age has provided us with personal data their parent or
guardian may contact our privacy officer.

How to Access, Modify, Delete, or Challenge the Data Collected

If you would like to know if we have collected your personal data, how we have used your personal
data, if we have disclosed your personal data and to who we disclosed your personal data, if you would
like your data to be deleted or modified in any way, or if you would like to exercise any of your other
rights under the GDPR, please contact our privacy officer here:

Micah Bass
micahrbass@gmail.com
glowzonebeautyto@gmail.com
(647)-926-5982

Do Not Track Notice

Do Not Track (“DNT”) is a privacy preference that you can set in certain web browsers. We do not
respond to browser-initiated DNT signals. We are not responsible for and cannot guarantee how any
third parties who interact with our Site and your data will respond to DNT signals.
How to Opt-Out of Data Collection, Use or Disclosure
In addition to the method(s) described in the How to Access, Modify, Delete, or Challenge the Data
Collected section, we provide the following specific opt-out methods for the forms of collection, use, or
disclosure of your personal data specified below:

  1. Personal/targeted, Promotional emails. You can opt-out by clicking “unsubscribe” on the bottom
    of any marketing email.
    Website Privacy Policy Page 7 of 92. Google Analytics. You can opt-out by installing the Google Analytics opt-out browser add-on.
  2. Google Adsense & Doubleclick Cookie. You can opt-out by visiting the Google Ads Settings
    web page.
    Cookie Policy

A cookie is a small file, stored on a user’s hard drive by a website. Its purpose is to collect data relating
to the user’s browsing habits. You can choose to be notified each time a cookie is transmitted. You can
also choose to disable cookies entirely in your internet browser, but this may decrease the quality of
your user experience.

We use the following types of cookies on our Site:

  1. Functional cookies
    Functional cookies are used to remember the selections you make on our Site so that your
    selections are saved for your next visits;
  2. Analytical cookies
    Analytical cookies allow us to improve the design and functionality of our Site by collecting data
    on how you access our Site, for example data on the content you access, how long you stay on
    our Site, etc;
  3. Targeting cookies
    Targeting cookies collect data on how you use the Site and your preferences. This allows us to
    personalize the information you see on our Site for you; and
  4. Third-Party Cookies
    Third-party cookies are created by a website other than ours. We may use third-party cookies to
    achieve the following purposes:
    a. to serve ads to our users based on their visit to our or other websites.

Additional Clauses

Our Website may contain links to other sites that are not operated by us. If you click a third-party link,
you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of
every site you visit.
We have no control over and assume no responsibility for the content, privacy policies, or practices of
any third-party sites or Websites.

If you have any questions about this page, please contact us through the email:
Glozonebeauty@gmail.com.

Modifications

This Privacy Policy may be amended from time to time in order to maintain compliance with the law
and to reflect any changes to our data collection process. When we amend this Privacy Policy we will
update the “Effective Date” at the top of this Privacy Policy. We recommend that our users periodically
review our Privacy Policy to ensure that they are notified of any updates. If necessary, we may notify
users by email of changes to this Privacy Policy.

Complaints

If you have any complaints about how we process your personal data, please contact us through the
contact methods listed in the Contact Information section so that we can, where possible, resolve the
issue. If you feel we have not addressed your concern in a satisfactory manner you may contact a
supervisory authority. You also have the right to directly make a complaint to a supervisory authority.
You can lodge a complaint with a supervisory authority by contacting the Please contact your local data
protection authority in the European Economic Area (EEA)..

Contact Information

If you have any questions, concerns or complaints, you can contact our privacy officer, Micah Bass, at:

micahrbass@gmail.com
glowzonebeautyto@gmail.com
(647)-926-5982