Privacy and SPAM

Beauty Trend South Africa (Pty) Ltd trading as “GlossyBox” (“GlossyBox”) is committed to protecting and respecting the privacy of your personal information. This policy together with our Terms and Conditions set out how we collect, use or disclose your personal information when you visit our website (www.glossybox.co.za) or any other site, services, software, applications or media managed or controlled by us.

This policy may be revised from time to time. It is recommended that you carefully read this policy each time you visit the website.

What type of personal information do we collect from you?
Generally, the personal information that we collect from you includes your name, mailing address, telephone and facsimile number and email address.

If you wish to purchase samples of cosmetics and beauty products or other goods or services that we offer, then we will need to collect your credit card or PayPal information and the information about the specific goods or services that you wish to purchase from us.

If we have supplied you with goods or services, then we will need to collect and store your personal information relating to that good or service. This will enable us to assist you with any further information or questions and to manage the provision of that good or service.

If you do not provide us with the personal information we (or other relevant third parties) request, we or they may not be able to provide you with the goods or services you have ordered.

Why do we collect personal information about you?
We primarily collect personal information from you to provide you with a box of samples of cosmetics and beauty products you order from us. We also collect personal information from you to:

• • provide you with the other goods and services we offer from time to time;
• • develop and identify goods and services that may be of interest to you;
• • conduct market or customer satisfaction research;
• • keep you informed about offers or promotions that we think you might be interested in; and
• • develop, establish and administer commercial arrangements with our suppliers in relation to the promotion, administration and use of our respective products and services.

How do we collect your personal information?
We collect personal information from you when you:

• • visit our website or contact us;
• • create a user account on our website;
• • subscribe to our mailing list;
• • submit website feedback; or
• • apply for a job with us.

Do we collect sensitive information about you?
No. We will not collect, use or disclose sensitive information (such as information about your racial or ethnic origins or political or religious beliefs), except with your specific consent or in the circumstances permitted by law.

How does our website collect information about you?
Clickstream data

Each time you visit our website our server collects some anonymous information, known as click stream data, including the type of browser and system that you are using, the address of the site you have come from and move to after your visit, the date and time of your visit, and your server’s IP address.

We may collect this information for statistical purposes to find out how the website is used and navigated, including the number of hits, the frequency and duration of visits, most popular session times. We may use this information to evaluate and improve our website.

We will not attempt to identify users or their browsing activities except, in the unlikely event of an investigation, where a law enforcement agency may exercise a warrant to inspect the service provider's logs.

Cookies

A cookie is a piece of information that our web server may send to your computer when you visit our website. A cookie helps us to recognise when you visit our website and to co- ordinate your access to different pages on the sites.

You can erase, block or receive a warning about cookies on most internet browsers. If you want to do this, you should refer to your browser instructions or help screen to learn more. If you disable all cookies, you may not be able to take advantage of all the features of our website.

Please note that third-party advertisers or ad servers may place or recognise a unique cookie on your browser in the course of placing advertisements on our website. The use of cookies by such third party advertisers or ad servers is not subject to this Policy, but is subject to their own respective privacy policies.

When will we disclose your personal information to another person? We only disclose personal information to third parties in South Africa or overseas who we believe are necessary to assist us in providing our goods and services. We may disclose your personal information to:

• • our suppliers (for example, our shipping agents and electronic payments gateway);
• • our external advisers (for example, our attorneys, accountants, and auditors);
• • persons or entities with whom we have formed joint ventures or other commercial relationships to supply our goods or services to you;
• • to a purchaser of GlossyBox or its business; or
• • anyone to whom we are required to disclose information by law.

We may transfer personal information to third parties by electronic means, including via the internet.

Except where you have consented, we limit the use and disclosure of any personal information provided by us to third parties to the purpose for which we supplied it and related purposes. By submitting personal information to us, you acknowledge that we cannot be held responsible for any use of your data by third parties who receive and process your data if we have used your data in the ways set out in this policy.

What if you want to give us information about another person? If you wish to provide us with personal information about another person, then we ask that you obtain that person’s consent to do so and make them aware of this policy when seeking their consent. If you wish to give us sensitive information about another person (such as information about their racial or ethnic origins or political or religious beliefs), then you must obtain that person’s consent before disclosing that information to us. We are relying upon you to obtain those consents.

If you have not obtained their consent, then you must tell us before you provide us with the relevant information.

What if we give you another person’s personal information?
If we provide you with personal information about another person, then you and your representatives must only use it for the purposes for which we give it to you. You must ensure that you comply with all the relevant legislation when collecting, using and storing that information. You must also ensure that your employees, agents and contractors comply with those requirements.

How do we keep your personal information secure?
We have implemented a variety of security measures to maintain the safety of the personal information that is collected.

Personal information is stored securely at all times and will never be provided to any unauthorised third parties. While being transmitted over the internet, all credit card details are protected using SSL (Secure Socket Layer) encryption.

The personal information which we hold will be held securely within our systems in accordance with our internal security policy and relevant legislation.

While we take reasonable precautions to safeguard personal information, we may be unable to prevent unauthorised access to such information by third parties or inadvertent disclosure of such information during transit. You acknowledge this risk when communicating with us through the website.

How can you access your personal information?
We will, on request, provide you with access to personal information we hold about you (including so that you can request correction of that information) subject to exceptions permitted by law. For example, we will not provide access to personal information if we have a duty of confidentiality in relation to that information.

If we do not provide you with access to personal information or refuse to make any changes to the information that you request, we will inform you of our reasons for doing so and of any exceptions we have relied upon. We will also, on request, record the fact that you have made a request for access to personal information and the reasons for our refusal to provide access to it.

Your request for us to provide access to and/or correct personal information will be dealt with within a reasonable time and we may recover from you the reasonable cost of retrieving and supplying the information to you.

How to contact us?

If you wish to:

• • obtain access to your personal information;
• • lodge a complaint about a breach of your privacy;
• • query how your personal information is collected or used; or
• • ask questions about our privacy policy, then you may send us an email to info@glossybox.co.za or 021 200 0490. Alternatively, you may write to us at GlossyBox, Studio C16, Mainstream Centre, Main Road, Hout Bay, 7806, South Africa.

SPAM POLICY

We are also committed to complying with the Electronics Communication and Transactions Act 25 of 2002 (the “ECT Act”).

We will only send you electronic messages with your consent, including consent inferred from our existing relationship. For example, we might send you an email in relation to your membership or an inquiry which you have made.

How to unsubscribe from a mailing list?
You are able to unsubscribe from our mailing list by clicking on the link provided in the email. If that link does not work or is not provided, then may also send us an email to info@glossybox.co.za or call 021 200 0490 or write to us at GlossyBox, Studio C16, Mainstream Centre, Main Road, Hout Bay, 7806, South Africa.

At that time you should provide us with details of the communication that you no wish to receive and request to be removed from that mailing list.