Privacy Policy for Lushfills.com
This Privacy Policy outlines how lushfills.com (referred to as the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit the Site or make a purchase from it.
Collecting Personal Information
When you visit the Site, we collect specific information about your device, your interactions with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. Personal Information refers to any information that can uniquely identify an individual, as outlined below:
Device information
• Examples of Personal Information collected: web browser version, IP address, time zone, cookie information, viewed sites or products, search terms, and how you interact with the Site.
• Purpose of collection: to load the Site accurately for you and perform analytics on Site usage to optimize our services.
• Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.
• Disclosure for a business purpose: shared with our processor Shopify or Obelo.
Order information
• Examples of Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers, bank deposits, email address, and phone number).
• Purpose of collection: to provide products or services, fulfill our contract with you, process payment information, arrange shipping, provide invoices and order confirmations, communicate with you, screen orders for potential risk or fraud, and provide information or advertising relating to our products or services based on your preferences.
• Source of collection: collected directly from you.
• Disclosure for a business purpose: shared with our processor Stripe, shipping companies, other partner companies, or Obelo.
Customer support information
• Examples of Personal Information collected: information provided during customer support interactions.
• Purpose of collection: to provide customer support.
• Source of collection: collected directly from you.
• Disclosure for a business purpose: shared with our processor Shopify, shipping companies, and other partner companies.
Minors
The Site is not intended for individuals under the age of 17, and we do not intentionally collect Personal Information from children. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us to request deletion.
Sharing Personal Information
We share your Personal Information with service providers to assist us in providing our services and fulfilling our contracts with you, as described above. For example:
• We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information in their privacy policy. Please kindly note that in order to comply with Namecheap policies regarding the processing of customer data, WE DO NOT PROVIDE OUR PRODUCTS TO END CUSTOMERS/PATIENTS. OUR PRODUCTS ARE MEANT STRICTLY FOR PROFESSIONAL AESTHETICIANS AND BUSINESSES IN THE HEALTH SECTOR. ORDERS PLACED BY END USERS/PATIENTS WILL BE CANCELLED IMMEDIATELY.
• We may share your Personal Information to comply with applicable laws and regulations, respond to legal requests for information, or protect our rights.
Behavioural Advertising
We use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:
• We use Google Analytics to understand how our customers use the Site. You can read more about how Google uses your Personal Information in their privacy policy. You can also opt-out of Google Analytics here.
• We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners and through the use of cookies or similar technologies, based on your location and consent.
For more information on how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page.
You can opt-out of targeted advertising by visiting the following links (if applicable to your location and the services being used):
• Facebook Ad Settings
• Google Ad Settings
• Bing Ad Personalized Ads
You can also opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal.
Using Personal Information
We use your Personal Information to provide our services to you, which includes offering products for sale, processing payments, shipping and fulfilling your orders, and keeping you informed about new products, services, and offers.
Lawful Basis
According to the General Data Protection Regulation (“GDPR”), if you are an EEA resident, we process your Personal Information under the following lawful bases:
• Your consent
• The performance of the contract between you and the Site
• Compliance with legal obligations
• To protect your vital interests
• To perform tasks carried out in the public interest
• For our legitimate interests, which do not override your fundamental rights and freedoms
Retention
We will retain your Personal Information for our records when you place an order through the Site, unless you request us to erase this information. For more information on your right of erasure, please see the ‘Your Rights’ section below.
Automatic Decision-Making
If you are an EEA resident, you have the right to object to processing based solely on automated decision-making that significantly affects you. We do [DO NOT] engage in fully automated decision-making that has a legal or significant effect using customer data. Our processor, Shopify, uses limited automated decision-making to prevent fraud, which does not have a significant legal effect on you.
Services that include elements of automated decision-making include:
• Temporary denylist of IP addresses associated with repeated failed transactions, which persists for a limited number of hours.
• Temporary denylist of credit cards associated with denylisted IP addresses, which persists for a limited number of days.
GDPR
If you are an EEA resident, you have the right to access the Personal Information we hold about you, to port it to a new service, and to request corrections, updates, or erasure of your Personal Information. To exercise these rights, please contact us using the information provided below or follow alternative instructions for sending access, erasure, correction, and portability requests.
Cookies
A cookie is a small piece of information that is downloaded to your computer or device when you visit our Site. We use different types of cookies to enhance your browsing experience, including functional, performance, advertising, and social media or content cookies.
Cookies help us remember your actions and preferences (such as login and region selection), eliminating the need to re-enter this information each time you visit the Site or navigate between pages. Cookies also provide insights into how people use the website, such as whether it’s their first visit or if they are frequent visitors.
We use cookies for various purposes to optimize your experience on our Site and provide our services. They may be persistent or session cookies, expiring between 30 minutes and two years from the date they are downloaded to your device.
You can manage cookies in various ways, but please note that blocking or removing cookies may impact your user experience, potentially making parts of our website inaccessible.
Most browsers accept cookies by default, but you can control cookie preferences through browser settings. Instructions on how to modify browser settings or block, manage, or filter cookies are typically found in the browser’s help file or on websites like www.allaboutcookies.org.
Please be aware that blocking cookies may not fully prevent us from sharing information with third parties, such as advertising partners. To exercise your rights or opt out of certain information uses by third parties, refer to the “Behavioural Advertising” section above.
Do Not Track
Please note that we do not alter our data collection and usage practices when we detect a “Do Not Track” signal from your browser, as there is no consistent industry understanding of how to respond to such signals.
Changes
We may update this Privacy Policy periodically to reflect changes in our practices, operational procedures, legal requirements, or other reasons. The “Last updated” date at the end of the Privacy Policy indicates when it was last revised.
Contact
If you have questions, concerns, or would like to make a complaint about our privacy practices, please contact us via email or by mail at the following address:
Store address: Sakala tn 7-2, 10141 Tallinn, Estonia.
Last updated: [01/01/2024]
If you are dissatisfied with our response to your complaint, you have the right to file a complaint with the relevant data protection authority. You can contact your local data protection authority or our supervisory authority at [https://ico.org.uk/make-a-complaint/].
