PRIVACY POLICY

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from lightlash.co.uk (the “Site”).

Personal information we collect

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information”. 

We collect Device Information using the following technologies: 
- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org. 
- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps. 
- “Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Site.

We may collect the following information about you:

  • your name, age/date of birth, gender and other relevant demographic information;
  • your contact details: postal address including billing and delivery addresses, telephone numbers (including mobile numbers) and email address;
  • your social media handles;
  • purchases and orders made by you;
  • your online browsing activities on any of our websites including which items you store in your shopping cart;
  • information about the device you use to browse our websites including the IP address and device type;
  • your communication and marketing preferences;
  • your interests, preferences, feedback, competition and survey responses;
  • your location;
  • your correspondence and communications with us; and
  • other publicly available personal data, including any which you have shared via a public platform (such as Instagram, YouTube, Twitter or public Facebook page).

We may anonymise and aggregate personal data for insight and research but this will not identify anyone.

Our website is not intended for children and we do not knowingly collect data relating to children.

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

How do we use your personal information?

Light Lash (and trusted partners acting on our behalf) use your personal data to generally fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:

  • Communicate with you;
  • Screen our orders for potential risk or fraud; and
  • When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
  • with your agreement, to contact you about promotional offers, events, products and services which we think may interest you;
  • where we have a legal right or duty to use or disclose your information (for example in relation to an investigation by a public authority or in a legal dispute).

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns). 

We use personal data for marketing purposes and may send you postal mail, texts and/or emails to update you on the latest offers and events. We may also show you online media communications through external social media platforms such as Facebook and Instagram and external digital advertisers such as Google.

Text Marketing and notifications (if applicable): By entering your phone number in the checkout and initialising a purchase, you agree that we may send you text notifications (for your order, including abandoned cart reminders) and text marketing offers. You can unsubscribe from further text messages by replying STOP. Message and data rates may apply.


You have the right to opt-out of receiving promotional communications at any time, by:

  1. Informing us that you wish to change your marketing preferences by contacting our customer support team at support@lightlash.co.uk;
  2. Making use of the simple “unsubscribe” link in emails or the “STOP” number for texts; and/or
  3. Contacting our Data Protection Officer via email at info@lightlash.co.uk or by post to the Data Protection Officer, Light Lash, 27 Charleville Rd, W14 9JJ, United Kingdom

*This may not stop service messages such as order updates.

Sharing you personal Information

We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Shopify to power our online store--you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site -- you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout. 

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful requests for information we receive, or to otherwise protect our rights.

Text Marketing

We are using a text messaging platform, which is subject to the following terms and conditions. By opting-in for our text marketing and notifications in, you agree to these terms and conditions.
By entering your phone number in the checkout and initializing a purchase, subscribing via our subscription form or a keyword, you agree that we may send you text notifications (for your order, including abandoned cart reminders) and text marketing offers. You acknowledge that consent is not a condition for any purchase.
Your phone number, name and purchase information will be shared with our SMS platform "SMSBump Inc, an European Union company with office at Sofia, Bulgaria, EU. This data will be used for sending you targeted marketing messages and notifications. Upon sending the text messages, your phone number will be passed to a text messages operator to fulfill their delivery.
If you wish to unsubscribe from receiving text marketing messages and notifications reply with STOP to any mobile message sent from us or use the unsubscribe link we provided you with in any of our messages. You understand and agree that alternative methods of opting out, such as using alternative words or requests will not be accounted as a reasonable means of opting out. Message and data rates may apply.
For any questions please text "HELP" to the number you received the messages from. You can also contact us for more information. If you wish to opt out please follow the procedures above.

Behavioural advertising

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work. 

You can opt-out of targeted advertising by using the links below: 
- Facebook: https://www.facebook.com/settings/?tab=ads 
- Google: https://www.google.com/settings/ads/anonymous 
- Snapchat: https://support.snapchat.com/en-US/a/privacy-settings2
- TikTok: https://www.tiktok.com/legal/privacy-policy?lang=en

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

Do not track

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

Your rights

If you are a resident in the United Kingdom or Europe, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below. 

Additionally, if you are a resident in the United Kingdom or Europe we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States. If we transfer your personal information outside the EEA, we will ensure that the transfer will be compliant with data protection law and all personal data will be secure. Our standard practice is to assess the laws and practices of the destination country and relevant service provider and the security measures that are to be taken as regards the data in the overseas location; alternatively, we use standard data protection clauses.

Data retention

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

Legal basis for using data

We collect and use customers’ personal data:

  1. as necessary to perform our contract with you:
    • for the purposes of complying with our duties and exercising our rights under a contract for the sale of goods or services to a customer; 
      or
  2. as necessary for the pursuit of our legitimate interestsincluding:
    • selling and supplying goods and services to our customers;
    • promoting, marketing and advertising our products and services;
    • sending promotional communications which are relevant and tailored to individual customers (including administering loyalty schemes);
    • to identify and contact competition winners;
    • understanding our customers’ behaviour, activities, preferences, and needs;
    • improving existing products and services and developing new products and services;
    • protecting customers, employees and other individuals and maintaining their safety, health and welfare;
    • good governance, accounting and managing and auditing our operations and complying with our legal and regulatory obligations;
    • preventing, investigating and detecting crime, fraud or anti-social behaviour and prosecuting offenders, including working with law enforcement agencies;
    • handling customer contacts, queries, complaints or disputes;
    • protecting our company, its employees and customers, by taking appropriate legal action against third parties who have committed criminal acts or are in breach of legal obligations to us;
    • handling any legal claims or regulatory enforcement actions taken against us; and
    • fulfilling our duties to our customers, colleagues, shareholders and other stakeholders;
      or
  3. as necessary for complying with our legal obligations including:
    • where you exercise your rights under data protection laws
    • for compliance with legal and regulatory requirements;
    • to establish or defend legal rights;
      or
  4. based on your consent for example in relation to sending direct marketing communications via email or text message.

You have the right to withdraw consent at any time. Where consent is the only legal basis for processing, we will cease to process data after consent is withdrawn.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

Contact us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e‑mail at support@lightlash.co.uk or by mail using the details provided below: 

LightLash 
[Re: Privacy Compliance Officer] 
Light Lash, 27 Charleville Rd, London, W14 9JJ, United Kingdom