Disclosure and additional uses of your information
This section sets out the circumstances in which will disclose information about you to third parties and any additional purposes for which we use your information.
Disclosure of your information to service providers
We use a number of third parties to provide us with services which are necessary to run our business or to assist us with running our business and who process your information for us on our behalf. These include the following:
- Email provider(s), including Klaviyo Inc. Their privacy policy is available here: http://www.klaviyo.com/privacy
- Customer Service System Provider: Zendesk Inc. Their privacy policy is available here:
- IT service provider(s), including Shipping Easy and Microsoft Azure. Their privacy policies are available here: https://support.shippingeasy.com/hc/en-us/articles/115003637406-Privacy-Policy, https://privacy.microsoft.com/en-us/privacystatement
- Hosting provider(s), including Shopify Inc. Their privacy policy is available here: http://www.shopify.com/privacy
Our third party service providers are located in the United State and Canada.
Your information will be shared with these service providers where necessary to provide you with the service you have requested, whether that is accessing our website or ordering goods and services from us.
We do not display all the identities of all of our service providers publicly by name for security and competitive reasons. If you would like further information about the identities of our service providers, however, please contact us directly via our contact form or by email at privacy@Luxzones.com and we will provide you with such information where you have a legitimate reason for requesting it (where we have shared your information with such service providers, for example).
Legal basis for processing
Legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest relied on
Where we share your information with these third parties in a context other than where is necessary to perform a contract (or take steps at your request to do so), we will share your information with such third parties in order to allow us to run and manage our business efficiently.
Legal basis for processing
Necessary to perform a contract and/or to take steps at your request prior to entering into a contract (Article 6(1)(b) of the General Data Protection Regulation).
Reason why necessary to perform a contract
We may need to share information with our service providers to enable us to perform our obligations under that contract or to take the steps you have requested before we enter into a contract with you.
Disclosure of your information to other third parties
We disclose your information to other third parties in specific circumstances, as set out below.
Providing information to third parties such as Google Inc. Google collects information through our use of Google Analytics on our website. Google uses this information, including IP addresses and information from cookies, for a number of purposes, such as improving its Google Analytics service. Information is shared with Google on an aggregated and anonymized basis. To find out more about what information Google collects, how it uses this information and how to control the information sent to Google, please see the following page: https://www.google.com/policies/privacy/partners/
Legal basis for processing
Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest(s)
Meeting our contractual obligations to Google under our Google Analytics Terms of Service (https://www.google.com/analytics/terms/us.html)
You can opt out of Google Analytics by installing the browser plugin here: https://tools.google.com/dlpage/gaoptout
Transfer and storage of your information
Information collected by Google Analytics is stored outside the European Economic Area on Google’s servers in the United States of America.
For further information about the safeguards used when your information is transferred outside the European Economic Area, see the section of this privacy policy below entitled Transfers of your information outside the European Economic Area.
Sharing your information within our business’ group of companies, including Seed Beauty for internal administrative purposes, including client, customer and employee information.
Legal basis for processing
Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest
Running and managing our business effectively.
Legal basis for processing
Necessary to perform a contract [or to take steps at your request prior to entering into a contract] (Article 6(1)(b) of the General Data Protection Regulation).
Reason why necessary to perform a contract
We need to share your information with other companies in order to be able to meet our contractual obligations to you or to take steps at your request prior to entering a contract., for example because of the services or information you have requested.
Sharing your information with a prospective or actual purchaser or seller in the context of a business or asset sale or acquisition by us, a merger or similar business combination event, whether actual or potential.
Legal basis for processing
Legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest(s)
Sharing your information with a prospective purchaser, seller or similar person in order to allow such a transaction to take place.
Disclosure and use of your information for legal reasons
Indicating possible criminal acts or threats to public security to a competent authority
If we suspect that criminal or potential criminal conduct has been occurred, we will in certain circumstances need to contact an appropriate authority, such as the police. This could be the case, for instance, if we suspect that we fraud or a cyber crime has been committed or if we receive threats or malicious communications towards us or third parties.
Legal basis for processing
Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interests
Preventing crime or suspected criminal activity (such as fraud).
In connection with the enforcement or potential enforcement our legal rights
We will use your information in connection with the enforcement or potential enforcement of our legal rights, including, for example, sharing information with debt collection agencies if you do not pay amounts owed to us when you are contractually obliged to do so. Our legal rights may be contractual (where we have entered into a contract with you) or non-contractual (such as legal rights that we have under copyright law or tort law).
Legal basis for processing
Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest
Enforcing our legal rights and taking steps to enforce our legal rights.
In connection with a legal or potential legal dispute or proceedings
We may need to use your information if we are involved in a dispute with you or a third party for example, either to resolve the dispute or as part of any mediation, arbitration or court resolution or similar process.
Legal basis for processing
Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest(s)
Resolving disputes and potential disputes.
For ongoing compliance with laws, regulations and other legal requirements
We will use and process your information in order to comply with legal obligations to which we are subject. For example, we may need to disclose your information pursuant to a court order or subpoena if we receive one.
Legal basis for processing
Compliance with a legal obligation (Article 6(1)(c) of the General Data Protection Regulation).
Legal obligation(s)
Legal obligations to disclose information which are part of the laws of the United States of America.
Legal basis for processing
Our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest
Where the legal obligations are part of the laws of another country and have not been integrated into the United States’ legal framework, we have a legitimate interest in complying with these obligations.