PRIVACY POLICY

1. Introduction

At theskinglo.com (“we,” “us,” “our”), we are committed to safeguarding your privacy and protecting your personal data. This Privacy Policy outlines the types of personal information we collect, how we process and safeguard such data, and your rights in relation to it. We act in accordance with applicable data protection legislation, including the General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act (“CCPA”), and other relevant laws. We are privacy-first in our operations and approach your data with the security and transparency it deserves.

2. Scope of Policy and Data Controller Role

This Privacy Policy governs the collection, use, and disclosure of personal information obtained through your interaction with theskinglo.com. We operate as the data controller for the purposes of the GDPR and determine the purposes and means of processing your personal data. By using our website or services, you acknowledge that you have read and understood the practices described in this policy.

3. Categories of Data Processed

We may collect and process the following categories of personal data:

a) Usage Data
This includes information about your interactions with theskinglo.com, such as your browser type, IP address, pages visited, date and time of access, referring website addresses, and session duration. This data helps us improve site functionality and user experience.

b) Account Data
When you create an account or engage in transactions, we may collect your full name, postal address, email address, and telephone number.

c) Profile Data
Information kept in your user profile may include preferences, purchase history, content viewed, and behavioral patterns while interacting with our site.

d) Communication Data
When you contact our customer support or reach out through forms or emails, we store correspondence including inquiries, requests, complaints, and our responses.

e) Technical Data
We may collect device-related information such as device type, operating system, screen resolution, browser configurations, and other system-specific identifiers.

f) Transaction Data
Includes payment details (excluding full credit card numbers, processed through secure third-party providers), delivery information, order history, and transaction status to facilitate purchases and fulfillment.

g) Preference Data
Data related to your stated or inferred interests, marketing communication preferences, opt-in consents, and product feedback.

4. Legal Bases for Processing

We process personal data only when legally justified. The applicable legal bases include:

– Legitimate Interests: Enhancing, securing, and optimizing theskinglo.com, conducting analytics, and preventing fraud.
– Contractual Necessity: Fulfilling obligations arising from a contract with you, including transaction processing and account management.
– Consent: When required under law, such as for marketing communications and optional cookies, we obtain your explicit consent.
– Legal Obligations: To comply with relevant laws, regulations, or enforceable governmental requests.

5. Your Rights

As a data subject, you have the following rights under applicable laws:

– Right of Access: To request confirmation and a copy of your personal data held by us.
– Right to Rectification: To correct or complete inaccurate or incomplete data.
– Right to Erasure: To request deletion of your personal data, subject to lawful exceptions.
– Right to Restrict Processing: To request limitation of the processing of your data under certain circumstances.
– Right to Data Portability: To receive a structured, commonly used, machine-readable format of your personal data and to transmit it to another controller.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

We implement industry-standard administrative, technical, and physical security measures to protect your personal data. These include, but are not limited to:

– Secure Socket Layer (SSL) encryption during data transmission,
– Role-based access controls and authentication procedures,
– Regular system audits and logging,
– Secure server environments with regular backups,
– Staff training on data protection obligations.

Although we strive to ensure complete security, no system is entirely foolproof. Unauthorized access, hardware or software failure, and other factors may compromise data security.

7. International Transfers

Your personal data may be transferred to, stored, or processed outside your country of residence, including to jurisdictions that may not provide an equivalent level of data protection. When such transfers occur, we rely on standard contractual clauses approved by the European Commission or other appropriate legal mechanisms to safeguard your data.

8. Data Retention

We retain your data only as long as necessary to fulfill the purposes for which it was collected and to comply with legal, tax, and regulatory obligations. The data retention periods include:

– Account and Transaction Data: retained for up to 7 years post-transaction to comply with accounting laws.
– Communication and Support Records: retained for up to 3 years from last contact.
– Preference and Marketing Data: retained until you withdraw your consent or opt out.
– Technical and Usage Data: retained for a maximum of 24 months for analytical and improvement purposes.

9. Cookie Policy

theskinglo.com uses cookies and similar technologies to enhance user experience, perform analytics, and deliver personalized content. Cookies are categorized as follows:

– Essential Cookies: Necessary for core site functionality, including user login, cart management, and secure transactions.
– Functional Cookies: Enable enhanced features like remembering preferences or language selections.
– Analytics Cookies: Help us understand website usage through anonymized data (e.g., Google Analytics).
– Performance Cookies: Track system performance and usage errors to improve site efficiency.

10. Cookie Management and Compliance

You have control over your cookie preferences. On your first visit, a consent banner enables you to manage approvals for specific categories of cookies, as per GDPR and CCPA standards. Registered users may update their preferences via account settings. You can also manage cookies through your browser settings, though this may impact site functionality.

For California residents, you may opt out of the sale or sharing of your personal information via applicable settings or by notifying us at [email protected].

11. Special Protections for Children Under 13

theskinglo.com does not knowingly collect or solicit personal information from individuals under the age of 13. If we become aware that such data has been inadvertently collected, we will promptly delete it. If you believe that a child has provided us with data, please contact us at [email protected].

12. Policy Updates and User Notifications

We may occasionally update this Privacy Policy to reflect changes in legal requirements, technological advancements, or our data handling practices. When we make material changes, we will notify users through appropriate channels, which may include notice on theskinglo.com or communications to your registered email address.

Please review this policy periodically to stay informed of how we protect your information.

13. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

[email protected]

We are committed to full compliance with applicable data protection laws and to addressing your privacy concerns in a timely and comprehensive manner.