Last Updated: January 1, 2020
1.1 We collect the following general categories of personal information:
1.2 Information you give us. You may give us information by filling in forms on our site www.kevynaucoinbeauty.com or by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you:
This information may include your name, address, telephone number, email address and debit or credit card information (if you wish to place an order on our website). When you register with us, you can view your personal information in 'My Account'. You can access 'My Account' directly to change any personal details, for example if you move and want to change your address. If you forget your password, simply click on the 'forgotten password' link on the register or login page and an email containing your decrypted password will be sent to the email address you originally provided.
1.3 Information we collect about you With regard to each of your visits to our site we use the following various technologies to automatically collect information about you:
1.4 Information we receive from other sources. We may receive information about you if you use any of the other websites we (or any member or brand within our group) operate or other services we provide. In this case we will have informed you when we collected that data that it may be shared internally and combined with data collected on this site. We are also working closing with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them.
1.5 Children under age 13. We do not knowingly or intentionally collect any personal information from children under the age of 13. If you are under the age of 13 you can look at our Site, but you may not make a purchase, register, or submit any personal information to us. If we become aware that we have inadvertently received personal information from a visitor under the age of thirteen on the site, we will delete the information from our records.
2. What we do with the information
We use information collected from you in the following ways:
2.1 Information you give to us. We will use this information in relation to:
(a) Administration of our Site: The information you give us is necessary to enable us to (i) fulfil your order (including acknowledging your order and communicating with you if there is any issue regarding the fulfilment of your order), (ii) to make sure your order is delivered correctly and (iii) to maintain your account.
(b) Customer service: We ask for your contact details, such as your email address and telephone number, to enable us to answer any questions you have about using our Site and to notify you about the status of your orders.
(c) Direct Marketing: We want to keep you up to date on our latest products, promotional offers and events.
Electronic Marketing. If you are an existing customer, we will only contact you by electronic means (email or text) about goods and services similar to those which were the subject of a previous sale or negotiations for a sale. If you are a new customer, and where we permit selected third parties to use your personal information, we (or they) will contact you by electronic means only if you have expressly consented to this.
Other Marketing. We will only contact you by mail or telephone if you have expressly consented to these contacts.
(d) Our service: To notify you about changes to our service.
(e) Our Site: To ensure that content from our Site is presented in the most effective manner for you and for your computer, and so that we can enhance your experience of using our site.
2.2 Information we collect about you. We will use this information in relation to:
2.3 Information we receive from other sources. We may combine this information with information you give to us and information we collect about you. We may use this information and the combined information for the purposes set out above (depending on the types of information we receive).
3. Disclosure of your information
3.1 We disclose for business purposes the following general categories of personal information:
3.2 We may share your personal information with any member or brand within our Group. Please visit www.manzanitacapital.com for more information about the members and brands which constitute our Group. They may use the information in accordance with their privacy policies for purposes such as: financial reporting and analysis; strategic planning; the development of customer segmentation and metrics to provide a consistent view of our customer base; the creation of inspiring content and editorial features, and the development and sale of new products and collaborations to enhance your experience as a customer of Space NK or other brands in the Group.
3.3 From time to time we retain the services of third party companies and individuals to perform functions on our behalf in connection with the successful operation and continuous improvement of this Site. We may share your information with selected third parties including:
(a) Business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you (e.g. in order to process your order and maintain your account, including the authorisation and validation of credit or debit card transactions, the provision of delivery services, the analysis of data, etc. These companies or individuals may be provided with access to your personal details in order to fulfil their function but may not use such information for any other purpose).
(b) Advertisers and advertising networks that require the data to select and serve relevant advertisements to you and others.
(c) Analytics and search engine providers that assist us in the improvement and optimisation of our site.
3.4 Other than as set forth above with respect to our parent company and any member or brand within our group, we do not rent, sell or otherwise provide your personal details to third party companies or individuals for their marketing purposes.
3.5 We have not sold your personal information with the past 12 months.
3.6 We may disclose your personal information to third parties:
(a) In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
(b) If Space NK (or its ultimate parent company) or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
4. Where we store your personal data
4.2 We use the latest encryption technology to ensure that all transactional information you provide to us is protected to the highest standard. Transactional information includes any credit or debit card details, your personal contact information, together with any other names and addresses you provide when you place an order for delivery to another address, and your purchasing history. If you have given your consent prior to entering the details required for the ordering process, our web site will retain your Space NK account details such as your name, address, email address and purchasing history. Each time you log into your Space NK account to create a new order you must re-enter your credit card details. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
4.3 Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
4.4 We will retain the information we collect from you until you elect to no longer receive communications from us.
5. Third party websites
Our Site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
6. Email and SMS Opt-Out
You can at any time tell us not to send you marketing communications (i) by mail by following the instructions that are included in a particular promotion, (ii) by email by clicking on the unsubscribe link within the marketing emails you receive from us or (iii) by SMS by following the "STOP" instructions provided with the message. If you have registered with us, you also may opt out of receiving marketing materials (by mail, email and/or SMS) by logging into your account and changing your preferences.
7. Notices for California Residents
7.1 California Do Not Track Notice.
(a) Under California law, website and online service operators are required to disclose how they respond to web browser "do not track" signals or other similar mechanisms that provide consumers the ability to exercise choice regarding the collection of personal information about a consumer's online activities over time and across third party websites, to the extent the operator engages in that collection. At this time, we do not track our customers' personal information over time and across third-party websites and therefore this requirement does not apply to us.
(b) California law also requires website and online service operators to disclose whether third parties may collect personal information about their users' online activities over time and across different sites when the users use the operator's website or service. Third parties that have content or services on our site such as a social feature, analytics service, or an advertising network partner, may obtain information about your browsing or usage habits but this information does not include personal information. We do not knowingly permit such third parties to collect any personal information from our Site unless you directly provide it to us and we provide it to them with your consent.
7.2 Notice for Minors. We may offer interactive services which allow you to post content to share publicly or with friends. At any time you can delete or remove content you have posted using the deletion or removal options within our services. If you have questions about how to remove content in a specific service or if you would like additional assistance with deletion you can contact our customer support team at firstname.lastname@example.org. Although we offer deletion capability, you should be aware that the removal of content may not ensure complete or comprehensive removal of that content or information posted through the services.
7.3 Under California law, you have the right to request and receive information from us concerning any third parties who have received personal information about you from us for the third parties' direct marketing purposes. Any such requests for information from us can be made by sending an email to email@example.com.
7.4 California Consumer Privacy Act (CCPA) Consumer Rights
(a) If you are a resident of California, the CCPA grants you the following specific rights regarding your personal information. In order to exercise the rights, you must submit a verified consumer request.
(b) Right of Access and Transparency
(i) You have the right to submit a verifiable consumer request that we disclose the following to you in a readily useable format covering the 12 month period preceding the verifiable consumer request:
Kevyn Aucoin Customer Service
330 Broadway New York, NY 10001
UK Data Protection Representative:
Representative of controllers or processors not established in the United Kingdom (Article 27 UK GDPR):
UK Representative Service for GDPR Ltd.
7 Savoy Court
London WC2R 0EX
EU Data Protection Representative:
Representative of controllers or processors not established in the European Union (Article 27 GDPR):
Große Bleichen 21