The following privacy notice outlines how Color Box collects, uses, protects and transfers your personal data:
At Color Box your privacy is extremely important to us. We are committed to protecting and respecting all personally identifiable information that you might provide us with whilst you visit our website. The following privacy statement will explain what personal data we collect from you and how we use that information.
PERSONAL DATA WE COLLECT
Color Box collects data to enable us to provide you with the best Color Box experience possible. Some of the data we collect is provided directly by you, for example, when you sign up to our newsletter, create a Color Box account or purchase one of our Spa memberships, Gift Cards or one of our Color Box products.
We also collect information about how you interact with our website and products. We get this information by recording interactions using technologies like cookies.
The data we collect from you depends on your interaction with us and your own preferences that you can update in your preference centre. The type of data we collect can include the following:
Name and contact details – We collect your first and last names, email address, postal address, phone number and any other relevant contact details
Demographic details – We collect information about your age, gender and country
Login information - We collect all password data that can be used for account access
Reason for visit and Interests – We collect information about why you choose to visit Color Box, and what you hope to gain from the experience
Relevant Medical information – We collect information regarding any medical information that is necessary for the safe administration of treatments
Guest information – We collect information about any guests that you might be visiting Color Box with
HOW WE USE PERSONAL DATA
Color Box uses the data we collect to operate our business and provide you with the products and services we offer. This includes using data to help personalise your experience. We may also use the data we collect to communicate with you. For example, keeping you informed about your booking. We use personal information we collect about you in the following ways:
To provide you with information, products and services that you request from us
To process any transactions you are completing with Color Box
To process any special offers or promotions that you enter
Providing you with information about any products you have previously purchased or informing you about any similar products that relate to products you have previously purchased
Measuring and understanding the effectiveness of any advertising we serve to you or others and to deliver any relevant advertising to you based upon your activity on our website or purchasing behaviour
To offer any suggestions and recommendations to you about products that may interest you, based on your previous purchase or website behaviour
REASONS WE SHARE PERSONAL DATA
Color Box will not sell or rent your information to third parties.
We will not share your information with third parties for marketing purposes.
We may pass your information to our third party service providers, agents, subcontractors and other associated organisations for the purposes of completing tasks and providing services to you on our behalf (for example, to send you mailings). When we work with a third party we only disclose information necessary to deliver the service and we have a signed contract in place that requires them to keep your information secure and not to use it for their own marketing purposes.
From time to time we may show you offers from trusted third parties. We would never supply them with your information, however, we may show you exclusive offers from these trusted third parties in email communications.
We will only show you offers on the basis you have provided us with consent to do so. Consent is typically provided via checking an opt in box presented to you on the Color Box website form or in some cases, it may be provided by you to us either verbally over the telephone or in person. Where your consent has been obtained verbally, we will always provide confirmation to you of the consent you have provided to us in the form on an email for your records.
YOUR RIGHTS AS THE INDIVIDUAL
If your personal data is held by Color Box, you hold particular rights over it. Where you have provided consent for us to contact you as part of our marketing services, you have the right to modify or withdraw your consent at any time by using the unsubscribe option accompanied with all of our direct marketing or by contacting Color box.
You also have the right to:
To be informed of how your personal data will be used before it is collected.
To access your personal data and gain information on how it is used after it has been gathered.
To have personal data corrected if it is incomplete, inaccurate or out of date.
To request the removal or deletion of personal data where there is no compelling reason for its continued processing.
To restrict processing of your personal data.
To data portability – having your data moved, copied or transferred from Color box to another organisation in an easily readable format.
To object to direct marketing from us.
Color Box does not collect the personal data of children under the age of ?? without parental or guardian consent. If you believe that we hold any information from or about a child under age ??, please contact Color Box and if we cannot immediately obtain parental or guardian consent, we will remove the personal data from storage.
Color Box use software provided by Phorest to manage the salon appointment scheduling, CRM and marketing.
HOW LONG DO WE KEEP YOUR DATA?
Color Box retains your data for as long as necessary to provide you with our services as a client. Color Box are required under tax laws to keep your personal data for a minimum of 7 years. Health and safety records will be retained for 10 years and where we have your consent for marketing purposes, we will retain the minimum required data until you notify us that you no longer wish to receive such information.
TRANSFERS OF PERSONAL INFORMATION
When your personal data is processed through Phorest software, all of it is held within the USA. Your information is processed by the Phorest software and stored in the Amazon web services cloud. During this process your data is encrypted in transit and at rest.
WHAT HAPPENS IF YOU DO NOT WANT TO PROVIDE INFORMATION?
In the event that you want to purchase a product or service from Color Box, certain personal information is required to enter into a contract with you. Color Box will not be able to enter into a contract with you if you do not provide your personal information.
As noted in this privacy statement, we are processing your personal data to comply with legal and statutory obligations and in the performance of a contract. You can always choose not to provide your personal information: however, we will be unable to provide certain products, services and treatments in these instances.
SAFEGUARDING YOUR PERSONAL DATA
Appropriate measures are taken to protect your personal data from access from unauthorised persons or inappropriate access, internal and external. Your connection to the Phorest system uses a HTTP Secure communication protocol and TLS security.
This means all information passed to the Phorest system is encrypted during data input and transfer to the cloud. Employees are only assigned specific access rights and can only access the studio/spa software with the pin number assigned to them by management.
In the occurrence that you want to make a complaint about how your personal data was gathered or processed by Color Box or you are not satisfied about how a complaint has been handled, you retain the right to lodge a complaint directly with the supervisory authority and Color Box Personel.