Last Modified: August 17, 2021
INTRODUCTION
CreamScan (“CreamScan”,” we”, “our”, or “us”) respects your privacy and are committed to protecting it through our compliance with this Privacy Policy (“Policy”).
This Policy describes our practices for collecting, using, maintaining, protecting, and disclosing your information through https://www.creamscan.com (our “Website”), and related applications and platforms (collectively with the Website, the “Service” or “Services”).
A core element of our mission is our commitment to protect your personal information and to be transparent about the data we collect about you, how it is used, and with whom it is shared.
Please read this Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our terms, your choice is not to use our Services. By accessing or using this Website, you agree to this Privacy Policy. This Policy may change from time to time (see{' '} Changes to Our Privacy Policy). Your continued access of our Website or use of our Services after we make changes is deemed to be acceptance of those changes, so please check the Last Modified Date at the top of this Policy, to ensure that you are viewing the most current version of this Policy.
CHILDREN’S PRIVACY
The Service is general audience and intended for users 18 and older. We do not knowingly collect Personal Information from anyone younger than age 18.
INFORMATION WE COLLECT ABOUT YOU AND HOW WE COLLECT IT
We collect several types of information from you and about users of our Services, such as basic contact information when you sign up for an account. Other types of information we collect is information related to how you use our platform, which helps us improve our Services.
Information You Provide to Us or Received by Us on Your Behalf
The categories of information we collect are:
When you provide us with information in connection with a particular activity or otherwise sign up for or order our products and Services or provide your contact information to us, including your email address, in connection with that activity, product or service, you agree that such action constitutes a purchase or inquiry establishing a business relationship with us. You expressly consent to receiving communications from CreamScan through the information you provided to us. For more information on how to access and control your communication preferences, please see{' '} YOUR RIGHTS AND CHOICES REGARDING YOUR INFORMATION, below.
Information Collected Automatically
As you navigate through and interact with our Website, We and our third-party service providers, including analytics and third-party content providers, may automatically collect certain information from you whenever you access or interact with the Service.
We may combine this automatically collected log information with other information we collect about you. We do this to deliver features of our Services to you, improve services we offer you, analytics, and site functionality.
Cookies and Other Automatic Data Collection Technologies
CreamScan and its partners use cookies or similar technologies, which store certain information on your computer and allows us to, among other things, analyze trends, administer the Website, and to gather demographic information about our user base as a whole. The technology used to collect information automatically from CreamScan users may include the following:
Information Received from Third Parties
We also may receive information about you from third parties. For example, we and our partners, affiliates and service providers may use a variety of other technologies (such as tags) that collect statistical data relating to your Website activity for security and fraud detection purposes.
Third-Party Services
When you connect with us through a third-party platform we may, depending on your privacy settings, receive some information from your third-party account, and what we collect depends on your privacy settings with that service.
You may register to join the Service directly via the Service or by logging into your account with a third-party service (“ TPS”) via our Service (e.g., Google, Facebook, and other third party services that let you sign in using your existing credentials with those services). If you choose to register via an TPS, or to later link your account with the Service to your account with an TPS, we will use the Personal Information you have provided to the TPS (such as your name, email address, and other information you make available via the TPS) to create your account. Note that the information we collect from and through a TPS may depend on the privacy settings you have set with the TPS and the permissions you grant to us in connection with linking your account with the Service to your account with an TPS. Other than what we may share with the TPS as described below, the Personal Information a TPS has about you is obtained by the TPS independent of our Service, and CreamScan is not responsible for it.
Do Not Track Signal
Do Not Track (DNT) is a privacy preference that users can set in some web browsers, allowing users to opt out of tracking by websites and online services. We do not honor browser requests not to be tracked online (known as “Do Not Track”), but our cookie policy below describes how you can opt out of receiving cookies.
HOW WE USE YOUR INFORMATION
We use information that we collect about you or that you provide to us, including any personal information:
Non-Personally Identifiable Information
We may also use aggregated information or information that otherwise cannot be used to identify an individual to further tailor the content on our Services. For example, we may use general age range and skincare concerns to promote suitable products to a particular demographic.
Legal Bases
To process your information as described above, we rely on the following legal bases:
Contractual Necessity: To provide you with the CreamScan Service and perform the contract that you have with us.
Legitimate Interests: It is in our legitimate interests to improve and analyze our Service, promote our products, prevent fraudulent transactions, maintain security of our Services, and provide functionality.
Consent: In instances where we ask for consent, you may withdraw your consent at any time by contacting us or accessing applicable settings within your profile or communications.
HOW WE DISCLOSE AND SHARE YOUR INFORMATION
We do not sell personal information and we generally only share personal information with our service providers to provide and maintain the Service. We may share information we receive about you as follows or as otherwise described in this Privacy Policy:
YOUR RIGHTS AND CHOICES REGARDING YOUR INFORMATION
You have several ways to exercise control over your information:
European Residents
Under the General Data Protection Regulation (GDPR), CreamScan is a data controller. European residents may access, rectify or delete their personal information via their online account settings as described above. Additionally, European residents may contact the Privacy Officer at info@creamscan.com to access, correct, update or delete your personal information; object to our processing of this information, ask us to restrict our processing of your personal information, or request portability of your personal information.
Upon request, CreamScan will provide you with information about whether we hold any of your personal information. You are responsible for maintaining the accuracy of the information you submit to us, such as your contact information. If you submit a request to access all personal information you’ve submitted, we will respond to your request to access within 30 days or as otherwise required by law.
We will use commercially reasonable efforts to honor your requests for deletion; however, certain residual information may actively persist on the Service even if you close your account. In addition, the rights described above may be limited, for example, if fulfilling your request would reveal personal information about another person, or if you ask us to delete information we are required by law to keep or have compelling legitimate interests in keeping (such as for fraud prevention purposes). Your Personal Information may remain in our archives and information you update or delete, or information within a closed account, may persist internally for our administrative purposes, to the extent permitted by law. It is not always possible to completely remove or delete information from our databases. In addition, we typically will not remove information you posted publicly through or on the Service. Bear in mind that neither you nor CreamScan can delete all copies of information that has been previously shared with others on the Service. If your information is deleted, then your account may become deactivated. If your account is deactivated or you ask to close your account, you will no longer be able to use the Services.
Please note that our Services require a minimum amount of Personal Information in order to function. European residents who do not provide Personal Information (e.g., by not filling out a profile) may not be able to access the full functionality of features found on CreamScan.
California Residents
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional privacy rights with respect to our collection, use and disclosure of your Personal Information, including:
INTERNATIONAL JURISDICTIONS
Our Services are hosted and offered in the United States of America (US), and are subject to US federal, state, and local law. If you are accessing the Services from another country, please be advised that you may be transferring your personal information to us in the US, and you consent to that transfer, processing and storage of your personal information in accordance with this Privacy Notice. You also agree to abide by the applicable laws of applicable US federal, state, and local laws concerning your use of the Services and your agreements with us. Any persons accessing our Services from any jurisdiction with laws or regulations governing the use of the Internet, including the collection, use, or disclosure of personal information, different from those of the jurisdictions mentioned above may only use the Services in a manner lawful in their jurisdiction. If your use of the Services would be unlawful in your jurisdiction, you may not use our Services.
SECURITY
We use physical, technical and organizational measures designed to protect your information against unauthorized access, theft and loss. We restrict access to your personal information to those employees who need to know that information to service your account or perform their job functions.
Although we take precautions intended to help protect information that we process, no system or electronic data transmission is completely secure. Any transmission of your personal data is at your own risk and we expect that you will use appropriate security measures to protect your personal information.
You are responsible for maintaining the security of your account and the information in your account. We may suspend your use of all or part of the Services without notice if we suspect or detect any breach of security. You understand and agree that we may deliver electronic notifications about breaches of security to the email address on record on your account.
DATA RETENTION
Unless you request that we delete certain information (see{' '} Your Rights and Choices Regarding Your Information), We will retain your personal information for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.
The criteria used to determine our retention periods include:
LINKS TO OTHER SITES
Our Website may include links to third-party websites and services that are not operated by us. When you click these links, you will be directed away from our Services. A link to a third-party website or service does not mean that we endorse it or the quality or accuracy of information presented on it. If you decide to visit a third-party website or service, you are subject to its privacy practices and policies, not ours. This Privacy Policy does not apply to any personal information that you provide to these other websites and services.
CHANGES TO THIS POLICY
CreamScan may update this Privacy Policy at any time and any changes will be effective upon posting. In the event that there are material changes to the way we treat your Personal Information, we will update the Last Modified date at the top of this Policy upon becoming effective. We may also notify you by email, in our discretion.
HOW TO CONTACT CREAMSCAN
If you have any questions about this Privacy Policy, please contact us at info@creamscan.com.