Privacy Policy
This Privacy Policy describes how Sugarpill ("we," "us," or "our") collects, uses, and shares your personal information when you visit or make a purchase from sugarpill.com (the "Site").
What Information Do We Collect?
When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address, and email address.
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as "Device Information."
We collect Device Information using the following technologies:
- Cookies are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
- Log files track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
- Web beacons, tags, and pixels are electronic files used to record information about how you browse the Site.
When you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. We refer to this information as "Order Information."
We may also request optional non-personally identifiable information, such as buying preferences or demographic data, to help us improve our site and tailor your experience.
When we talk about "Personal Information" in this Privacy Policy, we are talking about both Device Information and Order Information.
How We Collect Phone Numbers
We collect your phone number when you provide it during checkout, when you opt in to SMS/text message communications through a sign-up form on our Site, or when you otherwise voluntarily provide it to us. Providing your phone number for SMS communications is optional and separate from completing a purchase.
How We Use Your Personal Information
We use Order Information to fulfill orders placed through the Site — including processing payment, arranging shipping, and providing invoices and order confirmations. We also use this information to:
- Communicate with you about your order or account;
- Screen orders for potential risk or fraud; and
- When in line with your preferences, provide you with information or advertising relating to our products or services.
We use Device Information to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site — for example, by generating analytics about how customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns.
Email marketing: With your permission, we may send you emails about our store, new products, and other updates.
SMS/Text Messaging: If you have opted in to SMS communications, we use your phone number to send you text messages, which may include order updates, shipping notifications, and marketing messages about our products and promotions. By subscribing to text notifications you agree to receive recurring automated marketing messages at the phone number provided. Consent is not a condition of purchase. Reply STOP to unsubscribe, HELP for help. Message and data rates may apply. We store your phone number and SMS opt-in consent records securely and retain them for as long as you remain opted in or as required by law.
Consent
How do we get your consent? When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery, or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only. If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.
How do you withdraw your consent? If after you opt in you change your mind, you may withdraw your consent for us to contact you, and for the continued collection, use, or disclosure of your information, at any time, by contacting us at info@sugarpill.com or by mailing us at the address in the Contact Us section below.
SMS Opt-Out: You may opt out of marketing SMS messages at any time by replying STOP to any text message you receive from us. After texting STOP, you will receive one final confirmation message and will no longer receive marketing texts. You may re-subscribe at any time by texting START or opting in again on our Site.
Disclosure
We may disclose your personal information if we are required by law to do so, or if you violate our Terms of Service.
Shopify & Payment Security
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify's data storage, databases, and the general Shopify application, on a secure server behind a firewall.
If you choose a direct payment gateway to complete your purchase, Shopify stores your credit card data encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction, after which it is deleted. All direct payment gateways adhere to PCI-DSS standards as managed by the PCI Security Standards Council, a joint effort of brands like Visa, Mastercard, American Express, and Discover.
For more information, you may read Shopify's Terms of Service at https://www.shopify.com/legal/terms or Privacy Statement at https://www.shopify.com/legal/privacy.
Sharing Your Personal Information
We share your Personal Information with third parties to help us operate our business, as described above. Specifically:
- Shopify powers our online store, including SMS messaging through Shopify's messaging services. Learn more at https://www.shopify.com/legal/privacy.
- Google Analytics helps us understand how customers use the Site. Learn more at https://www.google.com/intl/en/policies/privacy/, and opt out at https://tools.google.com/dlpage/gaoptout.
- SMS Service Providers: Your phone number and related opt-in data may be shared with Shopify and its SMS infrastructure partners solely for the purpose of sending you text messages you have consented to receive.
In general, the third-party providers we use will only collect, use, and disclose your information to the extent necessary to perform the services they provide to us. However, certain third-party service providers — such as payment gateways — have their own privacy policies governing the information we are required to provide for purchase-related transactions. We recommend reading their privacy policies so you understand how your personal information will be handled.
Please note that certain providers may be located in, or have facilities in, a jurisdiction different from yours or ours. If you proceed with a transaction involving a third-party service provider, your information may become subject to the laws of that provider's jurisdiction.
Once you leave our Site or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our Terms of Service.
We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information, or to otherwise protect our rights.
We do not sell your phone number or personal information to third parties for their own marketing purposes.
Behavioural Advertising
We use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. You can opt out of targeted advertising by visiting:
- Facebook: https://www.facebook.com/settings/?tab=ads
- Google: https://www.google.com/settings/ads/anonymous
- Digital Advertising Alliance opt-out portal: http://optout.aboutads.info/
For more information about how targeted advertising works, visit the Network Advertising Initiative's educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
Do Not Track
We do not alter our Site's data collection and use practices when we see a Do Not Track signal from your browser.
Security
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered, or destroyed. If you provide us with your credit card information, it is encrypted using secure socket layer technology (SSL) and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
Cookies
We use cookies to keep track of your session and order, and to help us understand how visitors use our Site. Here is a list of cookies we use:
- _session_id — unique token, sessional. Allows Shopify to store information about your session (referrer, landing page, etc.).
- _shopify_visit — no data held, persistent for 30 minutes from last visit. Used by our website provider's internal stats tracker to record the number of visits.
- _shopify_uniq — no data held, expires midnight of the next day. Counts the number of visits to a store by a single customer.
- cart — unique token, persistent for 2 weeks. Stores information about the contents of your cart.
- _secure_session_id — unique token, sessional.
- storefront_digest — unique token, indefinite. If the shop has a password, this is used to determine if the current visitor has access.
- PREF — persistent for a short period. Set by Google; tracks who visits the store and from where.
You can choose to opt out of cookies by adjusting your browser settings. Note that disabling cookies may affect some functionality of the Site.
Age of Consent
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority and have given us your consent to allow any of your minor dependents to use this site.
Your Rights
You have the right to access, correct, update, or delete the personal information we hold about you. If you would like to exercise this right, please contact us at info@sugarpill.com.
If you are a European resident, you have additional rights under GDPR, including the right to access, correct, update, or delete your personal information. Please note that we process your information to fulfill contracts with you (such as processing an order) or to pursue legitimate business interests. Your information may be transferred outside of Europe, including to Canada and the United States.
Data Retention
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information. SMS opt-in records are retained for as long as you remain subscribed or as required by applicable law and carrier regulations.
Email Opt-Out
If you receive marketing emails from us that you did not expressly request, you may unsubscribe by clicking the unsubscribe link in any marketing email or by contacting us at info@sugarpill.com.
Changes to This Privacy Policy
We reserve the right to modify this Privacy Policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon posting to the website. If we make material changes to this policy, we will notify you here that it has been updated. If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
Contact Us
For more information about our privacy practices, if you have questions, or if you would like to access, correct, amend, or delete any personal information we have about you, please contact our Privacy Compliance Officer:
Email: info@sugarpill.com
Mail: Sugarpill Cosmetics [Re: Privacy Compliance Officer], 213 North Glendale Ave. #1099, Glendale, CA 91206, United States