Privacy policy
-----
SECTION 1 - PERSONAL INFORMATION COLLECTED
When you make a purchase from our shop, as part of our buying and selling process, we collect the personal information you provide to us, such as your name, address and email address.
When you browse our shop, we also automatically receive your computer's Internet Protocol (IP) address, which allows us to obtain further details about the browser and operating system you are using.
Email marketing (if applicable): With your permission, we may send you emails about our shop, new products and other updates.
SECTION 2 - CONSENT
How do you obtain my consent?
When you provide us with your personal information to complete a transaction, verify your credit card, place an order, schedule a delivery or return a purchase, we assume that you consent to our collection and use of your information for that purpose only.
If we ask you to provide your personal information for any other reason, such as for marketing purposes, we will either ask you directly for your express consent, or give you the opportunity to refuse it.
How can I withdraw my consent?
If, after you have given us your consent, you change your mind and no longer consent to us contacting you, collecting your data or disclosing your data, you can notify us by contacting us at info@naxyskin.com.
SECTION 3 - DISCLOSURE
We may disclose your personal information if we are required to do so by law or if you breach our Terms and Conditions.
SECTION 4 - SHOPIFY
Our shop is hosted by Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our services and products to you.
Your data is stored in Shopify's data storage system and databases, and in Shopify's general Shopify application. Your data is stored on a secure server protected by a firewall.
Payment:
If you make your purchase via a direct payment gateway, in this case Shopify will store your credit card details. This information is encrypted in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction information is retained for as long as necessary to complete your order. Once the order is complete, the purchase transaction information is deleted.
All direct payment gateways are PCI-DSS compliant, managed by the PCI Security Standards Council, which is a joint effort of companies such as Visa, MasterCard, American Express and Discover.
PCI-DSS requirements ensure the secure processing of credit card data by our shop and its service providers.
For more information, please see Shopify's Terms of Service here or Privacy Policy here.
SECTION 5 - SERVICES PROVIDED BY THIRD PARTIES
Generally, the third party providers we use will only collect, use and disclose your information to the extent necessary to perform the services they provide to us.
However, some third party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies regarding the information we are required to provide to them for your purchase transactions.
With respect to these providers, we encourage you to read their privacy policies carefully so that you can understand how they will treat your personal information.
Please note that some suppliers may be located or have facilities located in a different jurisdiction from you or us. Therefore, if you choose to enter into a transaction that requires the services of a third party provider, your information may be governed by the laws of the jurisdiction in which that provider is located or the jurisdiction in which its facilities are located.
For example, if you are located in Canada and your transaction is processed through a payment gateway located in the United States, your information used to complete the transaction may be disclosed under United States law, including the Patriot Act.
Once you leave our shop site or are redirected to a third party website or application, you are no longer governed by this Privacy Policy or our website's Terms of Sale and Use.
Links to
You may leave our website by clicking on certain links on our website. We assume no responsibility for the privacy practices of these other sites and encourage you to read their privacy policies carefully.
ARTICLE 6 - SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to ensure that it is not inappropriately lost, misappropriated, accessed, disclosed, altered or destroyed.
If you provide us with your credit card information, it will be encrypted using SSL security and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and apply other generally accepted industry standards.
SECTION 7 - AGE OF CONSENT
By using this site, you represent that you are of the age of majority in your state or province of residence, and that you have given us your consent to allow any minor dependent of yours to use this website.
SECTION 8 - CHANGES TO THIS PRIVACY POLICY
We reserve the right to change this privacy policy at any time, so please check back frequently. Modifications and clarifications will be effective immediately upon posting on the website. If we make changes to the content of this policy, we will notify you here that it has been updated, so that you will know what information we collect, how we use it, and under what circumstances, if any, we disclose it.
If our shop is acquired by or merged with another company, your information may be transferred to the new owners so that we can continue to sell products to you.
QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we hold about you, file a complaint, or if you would simply like more information, please contact our privacy officer at info@brand-less.com.