Promoting safety and security

CHARMELASH abide by the principles of legality, legitimacy, and transparency, use, and process the least data within a limited scope of purpose, and take technical and administrative measures to protect the security of the data. We use personal data to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is based on our legitimate interest in helping ensure the safety of our products and services.

Here is a description of the types of personal data we may collect and how we may use it:

Collecting that information?

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information”.

How your personal information is used

The order information we collect is generally used to fulfill any orders placed through the Site (including processing your payment information, arranging for shipment, and providing you with an invoice and/or order confirmation). In addition, we use this order information for the following purposes
– Communicate with you;
– To screen our orders for potential risk or fraud; and to provide you with information or advertisements related to our products or services based on the preferences you share with us.

We use the device information we collect to help us screen for potential risks and fraud (in particular, your IP address), and more broadly to improve and optimize our website.

Generally speaking, we use personal data to provide, improve, and develop our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our customers.

NOTE: For any of the uses of your data described above that require your prior express consent, note that you may withdraw your consent by contacting us.

SHARING YOUR PERSONAL INFORMATION

We do not sell, trade, or let out your personally identifiable information to other parties.Unless we get your permission. It also does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving you, so long as those parties agree to keep this information confidential.

RIGHTS OF THE DATA SUBJECT

a. Right of confirmation

Each data subject shall have the right granted by the European legislator to obtain from the controller the confirmation as to whether or not personal data concerning him or her are being processed. If a data subject wishes to avail himself of this right of confirmation, he or she may, at any time, contact any employee of the controller.

b. Right to rectification

Each data subject shall have the right granted by the European legislator to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

If a data subject wishes to exercise this right to rectification, he or she may, at any time, contact any employee of the controller.

c. Right of restriction of processing

Each data subject shall have the right granted by the European legislator to obtain from the controller restriction of processing where one of the following applies:

The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.The processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use instead.The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims.The data subject has objected to processing pursuant to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored us, he or she may at any time contact any employee of the controller. The employee will arrange the restriction of the processing.

Third-Party Websites and Services

When a customer operates a link to a third-party website that has a relationship with us, we do not assume any obligation or responsibility for such policy because of the third party’s privacy policy. Our website, products, and services may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to data collected by us through our products and services. We encourage you to read the privacy policies of any third party before proceeding to use their websites, products, or services.

DATA RETENTION

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.