|
SkinStoreSM - PRIVACY AND
SECURITY STATEMENT: Effective Date: March 6, 2005 |
This Privacy and Security Statement ("Privacy Statement") applies to information collected by SkinStore ("SkinStore"). SkinStore is committed to protecting the privacy of its Customers ("Customers"). We have created the following Privacy Statement to give you an overview of the type of information we collect, how the information is used and how the information is safeguarded. Information is collected from Customers by SkinStore through the use of the SkinStore site. This Privacy Statement applies only to information collected by SkinStore. By visiting SkinStore, you are accepting the practices described in this Privacy and Security Notice. A. TRUSTe CERTIFICATION SkinStore a wholly owned subsidiary of Salu, Inc., is a licensee of the TRUSTe Privacy Program. This Privacy Statement discloses the privacy practices for www.skinstore.com. If you have questions or concerns regarding this statement, you should first contact SkinStore by E-mail at ombuds@skinstore.com. If you do not receive acknowledgment of your inquiry or your inquiry has not been satisfactorily addressed, you should then contact TRUSTe http://truste.org/consumers/watchdog_complaint.php. TRUSTe will then serve as a liaison with the Web site to resolve your concerns. B. WHAT INFORMATION IS COLLECTED? In order to provide you with products of interest to you and to continually improve your shopping experience on SkinStore.com, we collect information about our Customers in a variety of ways. In some cases, SkinStore asks Customers directly for information in order for them to purchase products or use our services, and, in other cases, information is collected automatically as Customers are using our Web Site. You may choose not to provide certain information, but then you may not be able to purchase products or take advantage of the features we offer. The following is a summary of the kinds of information SkinStore collects: 1. Active Collection. SkinStore is the sole owner of information collected on SkinStore.com. SkinStore collects certain information either voluntarily or as required in order to register with SkinStore or use certain SkinStore Services. This type of information includes:
2. Passive Collection Some information is collected automatically while you are using SkinStore.com. It is important to note that SkinStore must store this information in order to ensure its Customers receive optimal service while using SkinStore services. This type of information includes: a. Log Files: Log files information, such as IP addresses, browser type, domain names, number of page views, login frequency, page or section accesses. Log files are used to track member usage and engagement and to gauge the effectiveness of our different services. We use your IP address to help diagnose problems with our server and to administer the Web site. b. Cookies: SkinStore uses cookies, which are electronic pieces of information stored on your computer, to allow us to recognize you when you return to our site and to provide you with customized services and information. If Customers reject a cookie placed by SkinStore, they will not be able to use the SkinStore service (e.g., purchase products or establish a Customer Account) other than view the SkinStore Web site. For example, upon login to a Customer Account requiring a Customer password, a cookie is set in the browser that links SkinStore software to the proper user's login session. If this cookie is disabled, that aspect of the site will not work. SkinStore also uses Third Parties to provide services to you on behalf of SkinStore, and in doing so they must set cookies on the site. For example, when you use the Live Chat customer service function on our site, The Third Party who allows us to bring this service to you sets a cookie so we can tell what pages of the site you have accessed in order to better respond to your question. If you reject this cookie, you cannot use Live Chat. Also, we use a Third Party to provide web analytic services which allows SkinStore to track website usage statistics and checkout information. Your use of the site is not affected if you reject this cookie. For information on how to have your browser disable cookies or provide a warning before accepting a cookie, please refer to the cookie options in your browser's Options or Preferences menu. Cookies are used to:
c. Clear Gifs (Web Beacons/Web Bugs). We employ a software technology called clear gifs (a.k.a. Web Beacons/Web Bugs), that helps us better manage content on our site by informing us what content is effective. Clear gifs are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of Web users. The main difference between the two is that clear gifs are invisible on the page and are much smaller, about the size of the period at the end of this sentence. Clear gifs are tied to Customers' personally identifiable information. We use clear gifs in our HTML-based e-mails to let us know which e-mails the recipients have opened. This allows us to gauge the effectiveness of certain communications and the effectiveness of our marketing campaigns. Also, clear gifs, which may be set by a third party, are used on pages to track sales, which may result from our Internet advertising campaigns and banner advertisements appearing on other web sites. In order to track the effectiveness of our marketing campaigns, aggregate data pertaining to the dollar amount spent, items purchased, and campaign the customer responded to, is sent to third party servers for the purpose of tracking which sales resulted from specific advertising campaigns and to track conversion sales coming from banner advertisements. No individually identifiable data is sent to third party servers, only data that reflects that a sale occurred. If Customers would like to opt-out of these e-mails, they should see the Opt-out section. C. HOW DOES SKINSTORE USE THE INFORMATION COLLECTED? SkinStore endeavors to strictly adhere to state, local and federal laws regarding the preservation and archiving of information collected. In addition to the uses described elsewhere in this Privacy Statement, SkinStore may use the information you provide in the following ways:
D. HOW DOES SKINSTORE COMMUNICATE WITH CUSTOMERS? SkinStore would like to communicate with its Customers when we have new products or services we feel are of special interest to you. Unless you opt-out of communications from SkinStore, you will receive the following types of communications:
E. WHAT INFORMATION IS SHARED WITH THIRD PARTIES? Information about our customers is an important part of our business. SkinStore discloses information you provide to us as described below.
F. SECURITY The following outlines different types of security procedures SkinStore has in place to protect the loss, misuse or alteration of the information collected. 1. Identification and Authentication Access to the data is assigned to specific individuals in order to maintain strict control over access. We do not grant general access to data within SkinStore and, except as set forth in this Privacy Statement, access to data is not granted to parties outside SkinStore. We also verify the identity of the persons accessing the data by using a login name and password. Passwords are required to be six characters and include a non-alphabetic character. In addition, login session times-out after a period of time to prevent unauthorized use. 2. Authorization and Access Control Only authorized personnel have access to restricted data. Access to sensitive data such as customer financial information and individually identifiable health information is revoked in a timely manner for employees who change function or resign. Nondisclosure Agreements are in place with contractors and third parties having access to sensitive data. 3. Data Confidentiality SkinStore uses 128-bit encryption and a security firewall to protect the confidentiality of customer information. 4. Data Integrity and Retention We implement full database backups by our certified Database Administrator to establish data consistency and integrity. We also grant Customers access to their information in order to verify that the data is still accurate and has not been modified or corrupted. Data are stored on our secure server and backed up to tape. Such data are stored to the extent required by state, federal and local laws. Our Web servers are located in a secure and environmentally controlled room/location. Backups are automated and scheduled using industry-standard net backup software and backup tapes are continuously stored in a secure location off-site. 5. Data Management and Monitoring All employees of SkinStore are informed of the company's security policies. SkinStore's new hires are briefed on security and privacy issues and the security policies are also covered in the employee manual. SkinStore departments review security measures at regular department meetings. Security and privacy threats, operational and technical vulnerabilities have been assessed and countermeasures have been taken to reduce these vulnerabilities. New threats are consistently evaluated and measures are taken to prevent them from occurring at SkinStore. In addition, a security firewall screens access events and non-valid attempts are denied and logged. More stringent countermeasures are being implemented by SkinStore's security administrator on a continuous basis. G. LINKING SkinStore may offer links to other Web sites. Please be aware that SkinStore is not responsible for the privacy practices of such linked sites, including sites of our partners. We encourage our Customers to be aware of this when they leave SkinStore.com and to read the privacy statements of each and every Web site that collects personally identifiable information. This privacy statement applies solely to information collected by SkinStore. H. SURVEYS AND CONTESTS From time to time, our site requests information from Customers via surveys or contests. Participation in these surveys or contests is completely voluntary and the user therefore has a choice whether or not to disclose this information. The requested information typically includes contact information (such as name and shipping address) and demographic information (zip code) or your name and e-mail address. Contact information will be used to notify the winners and award prizes. Anonymous survey information will be used for purposes of monitoring or improving the use and satisfaction of our Web site. I. CHILDREN SkinStore.com does not sell products for purchase by children. We may sell children's products for purchase by adults. If you are under 18, you may use SkinStore.com only with involvement of a parent or guardian. J. CHOICE/OPT OUT SkinStore gives Customers the ability to opt-out of receiving future communications from SkinStore by replying to Unsubscribe in the subject line via e-mail at info@skinstore.com. For example, Customers may wish to opt-out of having their information used for information directly related to SkinStore's products and services. K. ACCESSING AND CHANGING INFORMATION To assure that the information collected is accurate and up-to-date, SkinStore allows Customers to edit and update their information through the SkinStore.com Web site. The Web site allows Customers to access and correct any inaccuracies in the information submitted online. Customers may also e-mail SkinStore or call Customer Services at 888.586.SKIN (7546) or 916.475.1464 during regular business hours (Monday through Friday, 8AM - 11PM EST, Saturday 9AM - 5PM EST) if they have questions or concerns about the accuracy of their information. L. NOTIFICATION OF CHANGES SkinStore reserves the right to make changes to the Privacy Statement at any time. If we plan to make significant changes to any of our privacy policies or practices with respect to how we use personally identifiable information, we will post those changes to this Web site 30 days before they take effect. SkinStore will post those changes on our Web site so our Customers are always aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. Please review our Privacy Statement periodically to see recent changes. M. ADDRESSING PRIVACY & SECURITY CONCERNS If you have any questions about this Privacy Statement, the practices or your dealings with the Sites, or wish to receive a printed version of this Privacy Statement, please contact us: Privacy and Security |
