For the purpose of the Data Protection Act 2018 (the Act) and the EU General Data Protection Regulation 2016/679 (the GDPR), the data controller is Arz Organic Beauty, (“Company/we/us”).

If you have any questions or you would like to make a request to exercise any of your legal rights, please contact info@arzorganicbeauty.com. Arz Organic Beauty is committed to protecting your privacy. This Privacy Policy sets out the privacy practices of the Company. Please take the time to review this Privacy Policy as it tells you how your personal information will be processed when you use the Arz Organic Beauty website (the “Site”) and our services. 
We may collect personal details from you such as:

Name, Address, phone, email, date of birth to help create an account for your shopping experience & to process & deliver your orders. We may also use these details to contact you for offers & discounts. Your IP address, will be collected to prevent fraud & for market research purposes. We may automatically collect information about you such as the type of internet browsers you use or the site from which you visited our Site. You cannot be identified from this information and it is only used to assist us in providing an effective service.

We may store some information (commonly known as a “cookie”) on your computer when you look at our Site. This information facilitates your use of our Site and helps us to understand how our Site is used. You can erase or block some cookies from your computer if you want to (your help screen or manual should tell you how to do this), but certain Arz Organic Beauty services may not work correctly or at all if you set your browser not to accept cookies.

If at any time you do not wish to receive emails from Arz Organic Beauty, please click the ‘unsubscribe’ link included in the footer of every marketing email we send. Please note that active customers will continue to receive order and account communications to facilitate getting your order processed successfully.

Other than the disclosures referred to in this policy, we will not disclose any personal information without your permission unless we are legally obliged to do so (for example, if required to do so by Court Order or for the purposes of prevention of fraud or other crime). Arz Organic Beauty may disclosure or transfer personal information as part of a reorganisation or a sale of the assets to a new company owner.

In order for you to receive your goods, Arz Organic Beauty works with a number of delivery and logistics partners. We only pass limited information to them in order to ensure successful delivery of your order.

Arz Organic Beauty works with trusted third party payment processing providers in order to securely take and manage payments.

We aim to keep our information about you as accurate as possible. If you would like to review or change the details you have supplied us with, or you would like to remove your published Submission from the Site you may do so at any time by using the Contact Us page on this Site.

We cannot be responsible for the privacy policies and practices of other third party sites (including but not limited to Facebook, YouTube, Twitter), or for advertisers on our site, even if you access them using links from our Site and we recommend that you check the policy of each site you visit. If you linked to our Site from a third party site, we cannot be responsible for the privacy policies and practices of the owners or operators of that third party site and we recommend that you check the policy of that third party site and contact its owner or operator if you have any concerns or questions. Unless expressly stated, we are not agents for these third party sites or for any third party advertisers on our Site, nor are we authorised to make representations on their behalf.

If you are using our Services on behalf of a business, that business accepts these terms. It will hold harmless and indemnify Arz Organic Beauty and its affiliates, officers, agents, and employees from any claim, suit or action arising from or related to the use of the Services or violation of these terms, including any liability or expense arising from claims, losses, damages, suits, judgments, litigation costs and attorneys’ fees.

If you wish to purchase any product or service made available through the Service (“Purchase”), you may be asked to supply certain information relevant to your Purchase including, without limitation, your credit card number, the expiration date of your credit card, your billing address, and your shipping information.

You represent and warrant that: (i) you have the legal right to use any credit card(s) or other payment method(s) in connection with any Purchase; and that (ii) the information you supply to us is true, correct and complete.

The service may employ the use of third party services for the purpose of facilitating payment and the completion of Purchases. By submitting your information, you grant us the right to provide the information to these third parties subject to our Privacy Policy.

We reserve the right to refuse or cancel your order at any time for reasons including but not limited to: product or service availability, errors in the description or price of the product or service, error in your order or other reasons.

We reserve the right to refuse or cancel your order if fraud or an unauthorized or illegal transaction is suspected.

accounts and other electronic media owned or controlled by us.

When you create an account with us, you guarantee that you are above the age of 18, and that the information you provide us is accurate, complete, and current at all times. Inaccurate, incomplete, or obsolete information may result in the immediate termination of your account on the Service.

You are responsible for maintaining the confidentiality of your account and password, including but not limited to the restriction of access to your computer and/or account. You agree to accept responsibility for all activities or actions that occur under your account and/or password, whether your password is with our Service or a third-party service. You must notify us immediately upon becoming aware of any breach of security or unauthorized use of your account.

We reserve the right to refuse service, terminate accounts, remove or edit content, or cancel orders in our sole discretion.

We respect the intellectual property rights of others. It is our policy to respond to any claim that Content posted on the Service infringes on the copyright or other intellectual property rights (“Infringement”) of any person or entity.

We strongly advise you to read the terms and conditions and privacy policies of any third party web sites or services that you visit.

Please familiarize yourself with our privacy practices and let us know if you have any questions. By using the Site, you signify your acceptance of this Privacy Policy. If you do not agree to this Privacy Policy, please do not use the Site.

Irrespective of which country you live in, you authorize us to transfer, store, and use your information in the UK, and any other country where we operate. In some of these countries, the privacy and data protection laws and rules regarding when government authorities may access data may vary from those in the country where you live. 

You may choose to provide us with Personal Data about yourself, including your name, organization name, title, address, phone number, and email address by completing forms on our website or emailing us, such as when you request information about our Services.

In some instances, you may elect to provide us with location and address information. You may also provide us with Personal Data about yourself when you report a problem or have a question about our services.

Certain information is required when creating an account to use our Services on the mobile application, such as your name, email address, birth date, User name and password. If you elect to create an account using Facebook, we will require your Facebook username and/or Facebook ID.

In addition, in order to use the Services, you may choose to provide additional information such as your personal characteristics, including skin tone and type, skin concerns, hair color and type, hair concerns, eye color, age range, photographs, videos and product reviews.

In connection with the use of the Services, your mobile device may collect certain data points like your IP address and mobile device ID.

When using our Services, we or our service provider may collect your unique device ID. We may use such information for internal purposes and to provide you a better experience, such as to troubleshoot application problems you may experience. We may associate device ID with personal information you provide to us. You may learn more about opt out of any anonymous device ID collection via the privacy settings available within your mobile device.

We and our partners use various technologies to collect and store information when you visit one of our services, and this may include using cookies or similar technologies to identify your browser or device. We also use these technologies to collect and store information when you interact with services from our partners, such as advertising services. Our third party advertising and analytics partners include Google, Parse Analytics, MixPanel and similar partners.

We use information collected from cookies and other technologies, to improve your User experience and the overall quality of our services. For example, by saving your language preferences, we’ll be able to have our services appear in the language you prefer. We may use your Personal Data to see which web pages you visit at our Site, which web site you visited before coming to our Site, and where you go after you leave our Site. We can then develop statistics that help us understand how our visitors use our Site and how to improve it. We may also use the information we obtain about you in other ways for which we provide specific notice at the time of collection.

We will ask for your consent before using information for a purpose other than those set out in this Privacy Policy.

We retain your Personal Data even after your business relationship with us ends if reasonably necessary to comply with our legal obligations (including law enforcement requests), meet regulatory requirements, resolve disputes, maintain security, prevent fraud and abuse, enforce our Terms of Use, or fulfill your request to “unsubscribe” from further messages from us. We will retain de-personalized information after your account has been closed.

Whenever you use our Services, we aim to provide you with choices about how we use your Personal Data. We also aim to provide you with access to your Personal Data. If that information is wrong, we strive to give you ways to update it quickly or to delete it – unless we have to keep the information for legitimate business or legal purposes. Subject to applicable law, you may obtain a copy of personal information we maintain about you or you may update or correct inaccuracies in that information by contacting us. To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to the information. In addition, if you believe that personal information we maintain about you is inaccurate, subject to applicable law, you may have the right to request that we correct or amend the information by contacting us as indicated in the How to Contact Us section below.

Some data protection laws, including the European Union’s General Data Protection Regulation (“GDPR”), corresponding legislation in Switzerland and in the United Kingdom, and some U.S. state laws, provide you with certain rights in connection with Personal Data you have shared with us. If you are resident in the European Economic Area, you may have the following rights:

1. The right to be informed. You are entitled to be informed of the use of your Personal Data. This Privacy Policy provides such information to you.
2. The right of access. You have the right to request a copy of your Personal Data which we hold about you.
3. The right of correction: You have the right to request correction or changes of your Personal Data if it is found to be inaccurate or out of date.
4. The right to be forgotten: You have the right to request us, at any time, to delete your Personal Data from our servers and to erase your Personal Data when it is no longer necessary for us to retain such data. Note, however, that deletion of your Personal Data will likely impact your ability to use our services.
5. The right to object (opt-out): You have the right to opt-out of certain uses of your Personal Data at any time.
6. The right to data portability: You have the right to a “portable” copy of your Personal Data that you have submitted to us. Generally, this means your right to request that we move, copy or transmit your Personal Data stored on our servers / IT environment to another service provider’s servers / IT environment.
7. The right to refuse to be subjected to automated decision making, including profiling: You have the right not to be subject to a decision and insist on human intervention if the decision is based on automated processing and produces a legal effect or a similarly significant effect on you.
8. 8. The right to lodge a complaint with a supervisory authority.

You may also have the right to make a GDPR complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here: http://ec.europa.eu/justice/data- protection/bodies/authorities/index_en.htm.

If you need further assistance regarding your rights, please contact us using the contact information provided below and we will consider your request in accordance with applicable law. To make these requests, you may contact us using the contact information below, and we will consider your request in accordance with applicable laws. For your protection, we may need to verify your identity before responding to your request, such as verifying that the email address from which you send the request matches your email address that we have on file. If we no longer need to process Personal Data about you in order to provide our Services or our Sites, we will not maintain, acquire or process additional information in order to identify you for the purpose of responding to your request.

In some cases our ability to uphold these rights for you may depend upon our obligations to process personal information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.

You may update or correct information about yourself by making changes to your profile in your account or by emailing us at info@arzorganicbeauty.com. If you completely delete all such information, then your account may become deactivated. We may retain an archived copy of your records as required by law, to comply with our legal obligations, to resolve disputes, to enforce our agreements or for other legitimate business purposes.

We may contact you to request that you update your Personal Data on a regular basis to ensure its integrity for the purposes of ongoing data management.

Arz Organic Beauty maintains administrative & technical safeguards designed to protect the User’s Personal Data and information against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account technological reality, cost, the scope, context and purposes of processing weighted against the severity and likelihood that the processing could threaten individual rights and freedoms. We use commercially reasonable security measures such as encryption, firewalls, and Secure Socket Layer software (SSL) or hypertext transfer protocol secure (HTTPS) to protect Personal Data.

The Site is not intended for use by children. We do not intentionally gather Personal Data about UK visitors who are under the age of 13 or about European Union, United Kingdom or Swiss visitors who are under the age of 16. If a child has provided us with Personal Data, a parent or guardian of that child may contact us to have the information deleted from our records.

Our Privacy Policy may change from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent. We will post any privacy policy changes on this page and, if the changes are significant, we will provide a more prominent notice (including, for certain services or programs, email notification or privacy policy changes). We will also keep prior versions of this Privacy Policy in an archive for your review. Any changes we may make to this Privacy Policy in the future will be posted on this page. Please check back frequently to see any updates or changes to this Privacy Policy.

We endeavour to process all personal information in line with your rights under GDPR. In particular, You have the rights to:

• Withdraw your consent to Our processing your personal Information at any time. You can do this at any time by changing your “Preferences” when you log in to your account or by contacting us at info@arzorganicbeauty.com. In certain circumstances, We can process your personal Information without your consent in line with the lawful processing requirements in GDPR. These include (amongst other reasons) where processing is necessary to comply with a legal obligation, or to protect your vital interests
• Ask us to rectify inaccurate or incomplete personal Information. We would seek to rectify the data as soon as possible and usually within one month unless the request is complex
• Ask us to erase your personal Information. This is commonly referred to as the right to be forgotten. This right is only applicable where there is no compelling reason for the continued processing of your personal Information. There are some circumstances where this right to erasure does not apply and in such cases We would notify You of the reason(s) why We need to retain your personal Information (unless prevented to do so by law)
• Restrict processing of your personal Information where, for example, the data is inaccurate, being processed unlawfully or where the data is no longer relevant to the specific purpose for processing. In such cases, We would retain the data but We would not process it further without your consent, or if processing your Information is for establishing, exercising or defending a legal claim, or for the protection of rights of other individuals, or for public interest reasons. In such circumstances, We would let You know that We intend to lift the restriction on processing your personal Information
• Request access to your personal Information via a subject access request. Your request should be made to us in writing and we may ask you for proof of your identity before providing You with the data. There is usually no fee for making such a request however, in limited circumstances, We can charge an administrative fee (which will be based on the administrative cost of providing the information)
• You have the right to ask us not to process your personal Information for marketing purposes (including profiling). We will usually inform You (before collecting your data) if We intend to use your data for such purposes or if We intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms We use to collect your data. You can also exercise the right at any time by contacting us at info@arzorganicbeauty.com
• Obtain and reuse your personal Information for your own purposes across different services (right to data portability). This right is only applicable to data that You have provided to us, where We are processing the data based on your consent or for the performance of a contract and when the processing is carried out by automated means. Where this right applies, the data will be provided to You in a structured, commonly used and machine-readable format

Please be aware that we will need to verify your identity before providing any personal information to you. We do this to protect your information. We may also ask you to provide us some additional voluntary information to help us process your request more efficiently.

If you have any complaints regarding our handling of your personal Information, we would appreciate the chance to deal with your concerns in the first instance. However, if you wish, you may make a complaint directly to the Information Commissioner’s Office, the UK supervisory authority for data protection issues (www.ico.org.uk or 0303 123 1113).