Spa Botanica privacy notice
Last Updated June 1, 2021
Protecting your information is important to us. The following guidelines set forth our general privacy practices and principles that apply to information we collect through our website located at https://spabotanica.com/ (the “Website”), which is owned or operated by Spa Botanica, or companies related by common ownership or control (collectively, “we,” “us,” or “our”). We use this privacy notice to clearly disclose to you our privacy practices in a manner that is easy to understand. If there is something you do not understand about our privacy practices, please feel free to contact us at email@example.com.
This privacy notice does not apply to products or services provided, or information obtained, other than through the Website. We do not intentionally collect information from persons under the age of 18, so please do not use this Website if you are under the age of 18. We may change this notice from time to time so please check back often. If we significantly change our collection, use, or disclosure practices, we will try to send you a notice via email if you have provided us with an email address. Please keep in mind that some of the services mentioned specifically in this notice may not be available on the site at this time.
Our Website is used to provide you information about the custom event audio video technology services we provide to customers.
What information do we collect from you?
As part of providing services to you, we may collect personal information about you.
As part of providing services to you, we may collect information, including personal information, about you or your business. Personal information is data that can be used to identify you. The information includes but is not limited to:
We may also collect certain technical information from you (“Technical Information”).
How do we collect information from you?
We collect much of the information listed above directly from you when you submit it on our Website. This includes information you share on the Contact Us page of our Website.
Indirect Collection – Cookies and Other Technology
The types of technologies we use include:
Cookies. A cookie is a small amount of data that is sent to your browser from a Web server and stored on your computer’s hard drive. Cookies enable us to identify your browser as a unique user. Cookies may involve the transmission of information from us to you and from you to us. Cookies may also be used by another party on our behalf to transfer information to us in accordance with their privacy statement. Some cookies are “persistent cookies.” They are used by us each time you access our Website. Other cookies are called “session cookies.” Session cookies are used only during a specific browsing session. We may use a session cookie, for example, to remember that you have already navigated through a particular menu, or that you have entered in age information for a portion of a site that is restricted by age. We may also use “analytics cookies” that allow web analytics services to recognize your browser or device and, for example, identify whether you have visited our Website before, what you have previously viewed or clicked on, and how you found us. Analytics cookies may collect information about your location. This information is provided anonymously for statistical analysis only. Analytics cookies are usually persistent cookies. We collect analytics and tracking information through cookies from Google Analytics and WordPress (our Customer Relationship Management system). We collect location information through the Mapify Pro plugin.
Google Analytics. If you do not want your activity on this Website to be tracked by Google Analytics, you may opt out by using this link: http://tools.google.com/dlpage/gaoptout?hl=en
Web Beacons. We also employ a software technology called a clear GIF (Graphics Interchange Format), also known as a pixel tag or Web beacon. A clear GIF is a line of code that we place on our Websites or in e-mails which allows us to analyze our advertising and the general usage patterns of visitors to our Websites. These help us better manage content on our site by informing us what content or promotions are effective. Unless you consent, we do not collect personally identifiable information from you through the use of web beacons. You may not disable Web beacons.
Log Files. Like most standard website servers, we use log files. Log files track Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks. We utilize this information to analyze trends, administer the site, prevent fraud, track website navigation in the aggregate, and gather broad demographic information for aggregate use.
Social Networking. The Website permits you to use a third party social networking platform such as Facebook, YouTube, Twitter, LinkedIn, and Instagram. These plug-ins allow you to follow us on those services. When you use social networking platforms and plugins, you share your information with them and their privacy notice applies to their disclosure of such information. In addition, they may be able to collect information about you, including your activity or may notify your connections on the social networking platform about your use of our Website. Such services may allow your activity to be monitored across multiple websites for purposes of delivering more targeted advertising. Please note that their own privacy polices apply and we encourage you to read them. We may add new social networking plugins and buttons to our Website from time to time.
What choices do you have about the collection of information about you?
You can always choose not to submit information. You can disable cookies in your browser. You can choose not to use social networking plug-ins. You can opt-out of our marketing related emails.
Direct Collection. If you do not want to share your information, you can choose not to participate in a particular service or activity.
Cookies. You may disable browser cookies in your browser or set your browser to warn you when a cookie is being sent. You may lose some features or functionality when you disable cookies. Remember, also, that disabling cookies is browser specific. If you log on using Google Chrome, you must also disable cookies in Safari if you use that browser at a different time.
Web Beacons. It is not possible to disable Web beacons.
Log Files. It is not possible to disable log files.
Social Networking. If you do not want to share your information, you can choose not to use social networking plug-ins.
Marketing Emails. To ensure that you will not receive recurring marketing or other information from us unless you choose to, we will provide you with simple instructions on each marketing email from us for you to let us know that you have chosen to stop receiving such emails from us.
Do Not Track. Do Not Track (DNT) is a privacy preference that users can set in their web browsers. While the United States Federal Trade Commission has endorsed DNT, our Website does not support DNT codes.
How do we use your information?
Our main goal in collecting information is to improve the site and provide you with the best possible experience on the site. For example, by using the information we collect, we can provide you with an easy to use and readily available forum to ask questions about our products and services.
We may use your personal information and Technical Information to:
We use, and share location data only to provide and improve our service. We use analytics cookie information for analytics purposes but do not associate your personal information with them.
Who is collecting your information?
We collect your personal information and may use third party service providers to assist with that collection.
When you are on our site and are asked for personal information, you are sharing that information with us and our affiliates and service providers. Although we generally operate the Website and collect the information, we may engage third party service providers to assist us in that collection.
Other websites to which we link may collect personally identifiable information about you when you visit those sites. The information practices of other websites linked to our websites are not covered by this privacy notice.
With whom do we share your information?
We share your information with companies who assist us in providing services, when we need to protect our Website or information and when we sell our businesses. We do not sell your personal information to third parties.
We will not disclose any of your personally identifiable information except when we have your permission or under special circumstances, such as when we believe in good faith that the law requires it or under the circumstances described below. These are some of the ways that your information may be disclosed:
We occasionally hire other companies to provide limited services on our behalf, including packaging, delivering, or mailing, website development and operation, answering customer questions about products or services, sending postal mail or email, analyzing website use, processing payments, providing investor information and processing data. We will only provide those companies the information they need to deliver the service, and they are contractually prohibited from using that information for any other reason. We share your information with our e-commerce service provider, currently BLENND.
Data in the Aggregate
We may disclose “blinded” aggregated data and user statistics to prospective partners and other third parties. Blinded data is data that does not identify an individual person.
As we continue to develop our business, we may buy or sell businesses or assets. In such transactions, confidential customer information generally is one of the transferred business assets. In the event of a transaction involving the sale of some or all of our businesses, customer and site visitor information may be one of the transferred assets and may be disclosed in connection with negotiations relating to a proposed transaction. In such case, the transferred information may become subject to a different privacy notice.
How can I control my personal information?
We offer our customers choices for the collection, use and sharing of personal information.
You may contact us at firstname.lastname@example.org if you wish to view, edit, or delete your personal information from our database, and we will use commercially reasonable efforts to accommodate your request.
If you believe that any inaccurate or inappropriate information has been obtained or provided to others through your use of this Website, you should contact a representative at email@example.com.
How do we protect your information?
We use commercially reasonable efforts to protect your information. The Website does not use encryption except where noted.
We do not currently collect financial information on the Website.
Because information sent through the Internet travels from computer to computer throughout the world, when you give us information, that information may be sent electronically to servers outside of the country where you originally entered the information. Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. Except as specifically stated, this site does not use security encryption measures. Information that you disclose by use of this site (as with any site that is non-secure), by posting a message or using e-mail, potentially could be collected and used by others. This may result in unsolicited messages from third parties or use of such information by third parties for their own purposes, legal or illegal. As a result, while we strive to protect your personal information, we cannot ensure or warrant the security of any information you transmit to us or from our services, and you do so at your own risk. Once we receive your transmission, we use commercially reasonable efforts to ensure its security on our systems.
Your California Privacy Rights.
California residents are entitled to additional protections under California Law including the right to request information about third parties to whom we disclose information for marketing purposes.
Requests for Information Under Current Law
California Civil Code Section 1798.83 permits our visitors who are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email or written request at the address below.
Make sure to state that you are a California Resident.
In addition, a business subject to California Business and Professions Code Section 22581 must allow California residents under age 18 who are registered users of online sites, services, or applications to request and obtain removal of content or information they have publicly posted. Your request should include a detailed description of the specific content or information to be removed. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances. As stated above, persons under the age of 18 are not permitted to use the Website.
Do Not Track
As stated above, our Website does not support Do Not Track (DNT) codes.
California Consumer Privacy Act
The California Consumer Privacy Act (“CCPA”) grants State of California residents the following rights, to:
Categories of Personal Information We Collect
We collect, or may collect, information that identifies you, your household or your device or is reasonably capable of being connected with or linked to you, your household, or your device (“Personal Information”). Personal information does not include public information available from government records, de-identified or aggregated information or information that is protected by certain laws such as HIPAA for health related information and the Gramm-Leach Bliley Act (GLBA) for certain financial information.
We collect the following categories of Personal Information:
Categories of Sources of Personal Information
We collect information from the following categories of sources:
How We Share Your Personal Information
We share information in each of the above categories as follows:
How We Use Your Information
See “How Do We Use Your Information” above to learn how we use your information. We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
How We Retain and Store Your Personal Information
We retain your personal information for as long as necessary to fulfill the purpose(s) for which we collected it and to comply with applicable laws. We use reasonable security precautions to protect your information while in storage.
Requests to Know
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:
•The categories of personal information we collected about you.
•The categories of sources for the personal information we collected about you.
•Our business or commercial purpose for collecting or selling that personal information.
•The categories of third parties with whom we share that personal information.
•The specific pieces of personal information we collected about you (also called a data portability request).
•If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
•sales, identifying the personal information categories that each category of recipient purchased; and
•disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.
Requests to Delete
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.
We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:
1. Complete the transaction for which we collected the personal information, provide a service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise performing our contract with you.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Debug online services to identify and repair errors that impair existing intended functionality.
4. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
5. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
6. Comply with a legal obligation.
7. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
How To Submit a Request to Know or a Request to Delete
To request this information please submit a verifiable consumer request to us by either:
•Mailing us at the address below and asking for a Consumer Request Form
•Emailing us at firstname.lastname@example.org and asking for a Consumer Request Form
•Completing a CCPA Consumer Request Form through your Company account
Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. To designate an authorized agent, email us at email@example.com and we will provide you with a form to make a designated agent request.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period. To make a request, you must:
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
We will try to respond to your request within forty-five (45) days of when we receive it. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance, specifically by electronic mail communication.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
An amendment to the CCPA provides an exemption to the Right to Know and Right to Delete for personal information between a business and a person who is acting as an employee, director, officer, or contractor of a company, partnership, sole proprietorship, nonprofit, or government where the information is used in the context of a business transaction. This exemption is currently set to expire on January 1, 2021. Until that date, we will not respond to requests to know or delete that meet this exemption.
How To Submit an Opt-Out Request
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.
Address for California Privacy Requests
Attn: Your California Privacy Rights
12735 Morris Rd Ext Suite 400
Alpharetta, GA 30004
Please include your name, street address, city, state, and zip code (your street address is optional if you wish to receive a response to your request via email). We will not accept requests via the telephone or by fax. We are not responsible for notices that are not labeled or sent properly, or do not have complete information.
Your Nevada Privacy Rights
We do not sell your personal information.
Nevada law (SB 220), permits customers in Nevada to opt-out of the sale of certain kinds of personal information. A sale under Nevada law is the transfer of this personal information to third parties for monetary consideration so these third parties can then re-sell or license the sold information. We do not sell your personal information to third parties as defined in Nevada law.
For Our Friends in the EU.
We do not market our products or services to persons located in the European Union. However, for those located in the EU, we do use reasonable efforts to abide by the privacy rights contained in the EU’s General Data Protection Regulation (“GDPR”) . Accordingly, if you are located in the EU, you may have certain privacy rights as described in the GDPR. For example, you may request to have your information deleted, although we may retain information for backups, prevention of fraud and abuse, satisfaction of legal obligations or other ongoing legitimate interests. You may decline to share certain personal data, in which case we may not be able to provide you with some features and benefits.
Legal Basis for Processing
We process your personal information for the purposes of facilitating transactions with you and the legitimate interest of providing you with information about our company and services.
Right of Access
If you wish to access your personal information, please contact us at the address or number below.
Right to Correction
If the personal information we hold about you is inaccurate or incomplete, you may request to have it corrected. If you are entitled to have information corrected and if we have shared your personal information with others, we will let them know about the rectification where possible. You may also ask us with whom we have shared your information. We will let you know, where possible and lawful, so that you can contact them directly.
Right to Erasure
You may ask us to delete or remove your personal information in some circumstances, such as where we no longer need it or if you withdraw your consent (where applicable). If you are entitled to have your information deleted and if we have shared your personal information with others, we will let them know about the deletion where possible. You may also ask us with whom we have shared your information. We will let you know, where possible and lawful, so that you can contact them directly about erasure.
Right to Object
If you are located in the EU, this privacy notice gives you the right to object to our processing that is based on legitimate interests by contacting us at the address or number below. If you are entitled to restriction and if we have shared your personal information with others, we will let them know about the restriction where it is possible for us to do so.
Right to Data Portability
If you are located in the EU, this privacy notice gives you the right, in certain circumstances, to receive a copy of personal information we’ve obtain from you in a structured, commonly used and machine readable format, and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.
Rights in Relation to Automated Decision-Making and Profiling
Right to Withdraw Consent
If you provide your consent to the processing of your personal information and that consent forms our legal basis for processing, this privacy notice gives you the right to withdraw your consent at any time by contacting us at the number below.
Right to Lodge a Complaint
If you are located in the EU and you believe that we have infringed your rights under this privacy notice, please contact us by sending an email to firstname.lastname@example.org or calling us at: (678) 762-0005.
Who do you contact with questions or concerns about our Privacy Notice?
If you need further assistance, please send an e-mail with your questions or comments to email@example.com or write us at:
12735 Morris Rd Ext Suite 400
Alpharetta, GA 30004