At The Spa Warehouse, accessible from www.thespawarehouse.co.za one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by The Spa Warehouse and how we use it. If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us. This Privacy Policy applies to our online activities and is valid for visitors to our website with regards to the information that they shared and/or collect in The Spa Warehouse. This Privacy Notice also applies to The Spa Warehouse’s marketing content, including offers and advertisements for The Spa Warehouse products, which we (or a service provider acting on our behalf) send to you on third party websites, platforms and applications based on your site usage information. These third-party websites generally have their own Privacy Notice and Terms and Conditions. We encourage you to read them before using those websites.

Consent

By using our website, you hereby consent to our Privacy Policy and agree to its terms.

Information We Collect

Personal data means any information that can be used to identify directly or indirectly a specific individual. You are not required to provide The Spa Warehouse the personal data that we request, but if you choose not to do so, we may not be able to provide you with our products or services, or with a high quality of service or respond to any queries you may have. We may collect personal data from a variety of sources. This includes:

• Personal data you give us directly,
• Personal data we collect automatically, and
• Personal data we collect from other sources.

Personal data means any information that can be used to identify directly or indirectly a specific individual. This definition includes personal data collected offline through our sales team, direct marketing campaigns, sweepstakes and competitions and online through our websites, applications and branded pages. You may be asked to provide your personal data when you are in contact with us. The Spa Warehouse as a company may share this personal data with each other(employees) and use it in a manner consistent with this Privacy Notice. We may also combine it with other information to improve our products, services, content, and advertising.

Ways In Which We Collect Your Personal Data

We may collect personal data from a variety of sources. This includes:

• Personal data you give us directly. We collect data about how you use our products, such as the types of content you view or engage with, or the frequency and duration of your activities. We also collect personal data you provide us when you sign up for a marketing newsletter, complete a survey or enquire about our products. In so doing, we may ask for personal data, such as your name, date of birth, address, email address, or telephone number. The Spa Warehouse may collect “special categories of personal data” about you with your explicit consent. For more information on the special categories of data we collect and how we use it, please refer to the relevant section below.
• Personal data we collect automatically. We also receive and store certain types of personal data whenever you interact with us online. For example, we use cookies and tracking technologies to obtain personal data when your web browser accesses our websites or advertisements and other content served by or on behalf of The Spa Warehouse on other websites. Your personal data is also collected when you search, buy, post, participate in a contest or questionnaire or communicate with our sales team. Examples of the types of personal data we collect include; IP address, device ID, location data, computer and connection information such as browser type and version, time zone setting, browser plug-in types and versions, and operating system – which The Spa Warehouse sometimes aggregates with similar information from other consumers. During some of your internet browsing on The Spa Warehouse’s website we may also use software tools to measure and collect session information, including page response times, download errors, length of visits to certain pages, page interaction information, and methods used to browse away from the page. We may also collect technical information to help us identify your device for fraud prevention and diagnostic purposes.
• Personal data we collect from other sources. We collect personal data from other sources including our trusted partnerships with third-parties and where we operate The Spa Warehouse accounts on third-party platforms: For example, when you use the “like” functionality on Facebook or the ‘follow’ on Instagram. Additionally, we receive information about you and other visitors’ interactions with our advertising to measure whether our advertising is relevant and successful. We also collect information about you and your activities from a third-party when we jointly offer services, or from third-party data enrichment providers who may deliver insights to The Spa Warehouse about the personal data we hold.

How We Use Your Information

We use the information we collect in various ways, including:

• Provide, operate, and maintain our website
• Improve, personalise, and expand our website
• Understand and analyse how you use our website
• Develop new products, services, features, and functionality
• Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes
• Send you emails
• Find and prevent fraud

How Do We Protect Your Personal Data?

The Spa Warehouse takes the security of your personal data very seriously. We take every effort to protect your personal data from misuse, interference, loss, unauthorised access, modification or disclosure. Our measures include implementing appropriate access controls, investing in the latest Information Security Capabilities to protect the IT environments we leverage, and ensuring we encrypt, pseudonymise and anonymise personal data wherever possible.
Access to your personal data is only permitted among our employees on a need-to-know basis and subject to strict contractual confidentiality obligations when processed by third-parties.

How Long Do We Keep Your Personal Data For?

We will keep your personal data for as long as we need it for the purpose it is being processed for. For example, where you make a purchase online with us we will keep the data related to your purchase, and we will keep the personal data for a period which enables us to handle or respond to any complaints, queries or concerns relating to the purchase. Your data may also be retained so that we can continue to improve your experience with us and to ensure that you receive any discounts or loyalty rewards which you are eligible for. We retain the identifiable data we collect directly for targeting purposes for as little time as possible, after which we employ measures to permanently delete it. We will actively review the personal data we hold and delete it securely, or in some cases anonymise it, when there is no longer a legal, business or consumer need for it to be retained.

Advertising Partners Privacy Policies

Third-party ad servers or ad networks uses technologies like cookies, JavaScript, or Web Beacons that are used in their respective advertisements and links that appear on The Spa Warehouse, which are sent directly to users’ browser. They automatically receive your IP address when this occurs. These technologies are used to measure the effectiveness of their advertising campaigns and/or to
personalise the advertising content that you see on websites that you visit. Note that The Spa Warehouse has no access to or control over these cookies that are used by third-party advertisers.

Third-Party Privacy Policies

The Spa Warehouse’s Privacy Policy does not apply to other advertisers or websites. Thus, we are advising you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. It may include their practices and instructions about how to opt-out of certain options.
You can choose to disable cookies through your individual browser options. To know more detailed information about cookie management with specific web browsers, it can be found at the browsers’ respective websites.

• CCPA Privacy Rights (Do Not Sell My Personal Information)
• Under the CCPA, among other rights, Gauteng consumers have the right to:
• Request that a business that collects a consumer’s personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.
• Request that a business deletes any personal data about the consumer that a business has collected.
• Request that a business that sells a consumer’s personal data, not sell the consumer’s personal data.
• If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

GDPR Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

• The right to access – You have the right to request copies of your personal data.
• The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
• The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing – You have the right to request that we restrict the
  processing of your personal data, under certain conditions.
• The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability – You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

Children’s Information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity. The Spa Warehouse does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.