Privacy Policy

Effective Date: 01/09/2024

Notice Version: 1.0

Data Controller Contact Information

Izabysof

contact@izabysof.com

This document governs the privacy notice of our website www.izabysof.com.

Our privacy notice informs you about the personal data (PD) and non-personal data (NPD) we collect from you, how we collect it, how we protect it, how we disclose it, how you can access and modify it, and how you can limit our disclosure of this data. Our privacy notice also explains certain legal rights you have regarding your personal data. Any capitalized terms not defined herein will have the same meaning as defined elsewhere on our website.

The terms "we," "our," and "us" refer to the owner of this website.

"Non-Personal Data" (NPD) refers to any information that is not in any way personally identifiable.

"Personal Data" (PD) means any information relating to an identified or identifiable natural person (the "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. PD is in many ways the same as Personally Identifiable Information (PII). However, PD has a broader scope and covers more data.

"Sensitive Personal Data" (SPD) includes a consumer's social security number, driver's license number, national identification card number, or passport number; a consumer's account log-in, financial account, debit card, or credit card number in combination with any required security code, access code, password, or credentials allowing access to an account; a consumer's precise geolocation; a consumer's racial or ethnic origin, religious or philosophical beliefs, or union membership; the contents of a consumer's mail, SMS, and email communications, unless the business is the intended recipient of the communication; a consumer's genetic data; the processing of biometric data for the purpose of uniquely identifying a consumer; personal information collected and analyzed concerning a consumer's health; sex life or sexual orientation. Sensitive personal information that is "publicly available" is still considered sensitive personal information or personal information

Contact us using the information provided at the top of this privacy statement to exercise any of your legal rights contained in this privacy statement. We will respond to your request within 30 days of receiving it.

When you use our website and submit personal data to us, you are entitled to certain rights under various privacy laws, including the European Union's General Data Protection Regulation (EU GDPR), the United Kingdom's General Data Protection Regulation (UK GDPR), the California Consumer Privacy Act (CaCPA), the California Privacy Rights Act (CPRA), the UK Data Protection Act 2018, the German Federal Data Protection Act (BDSG), the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), the Australian Privacy Act 1988, and other global privacy laws. Even if not mentioned here, we will make reasonable efforts to honor access requests from data subjects, even if we have no legal obligation to do so. However, we reserve the right to deny any access request from a data subject that we are not legally obligated to comply with. Your rights may include, but are not limited to, the following:

1. The right to equal service, price, and not to be discriminated against even if you exercise your privacy rights.
2. The right to one or more means by which you can submit requests under this privacy statement, including (at a minimum) if the business operates an Internet website, a website address, and an email address.
3. The right to know if your personal data is sold, shared, or disclosed, and to whom.
4. The right to request that we do not sell or share any of your personal data.
5. The right to request that we disclose the following personal information to you: the categories of personal information we have collected about you; the categories of sources from which your personal information is collected; the business or commercial purpose for collecting, selling, or sharing your personal information; the categories of third parties to whom we disclose your personal information; the specific pieces of personal information we have collected about you.
6. The right to be informed about the personal data we collect from you and how we process it.
7. The right to obtain confirmation that your personal data is being processed and to access your personal data.
8. The right to have your personal data corrected if it is inaccurate or incomplete.
9. The right to request the deletion or erasure of your personal data if there is no compelling reason for us to continue processing it. However, the right to erasure is not absolute and can be overridden in certain cases where we have a legal or overriding legitimate interest to continue processing your data.
10. The right to "block" or restrict the processing of your personal data. When your personal data is restricted, we are permitted to store it but not further process it.
11. The right to request the personal data you have provided to us and to use it for your own purposes. Upon express request, we will provide your data to you or to another service or product provider within 30 days of your request, subject to compliance with trade secrets and industrial confidentiality.
12. The right to object to the processing of your personal data for the following reasons:

a. The processing was based on legitimate interests or the performance of a task carried out in the public interest/exercise of official authority (including profiling);

b. Direct marketing and targeted advertising (including profiling);

c. Processing for scientific/historical research and statistical purposes.

13. The right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.
14. The right to have us limit the collection of your personal data to what is "adequate, relevant, and reasonably necessary" in relation to the purposes for which the data is processed.
15. The right to have us not process your personal data for purposes that are neither reasonably necessary nor compatible with the disclosed purposes for which that personal data is processed, unless the data controller obtains your consent.
16. The right to designate an authorized agent to make a request on your behalf. When you designate an authorized agent, you must provide a valid power of attorney, a valid government-issued ID of the requester, and a valid government-issued ID of the authorized agent.

The right to lodge a complaint with supervisory authorities if your information has not been processed in accordance with your rights under privacy laws.

Generally, you control the amount and type of information you provide to us when using our website.

Our Legal Basis for Collecting and Processing Personal Data

Our legal basis for collecting and processing your personal data when you purchase our products and services or fill out any of the contact forms on our website is based on the necessity to perform a contract or to take steps to enter into a contract. Our legal basis for collecting and processing your personal data when you sign up for our newsletter, download free information, and access free audio, video, and other technologies via our website is based on consent.

Automatic Information

We automatically receive information from your web browser or mobile device. This information may include the IP address of your computer/proxy server that you use to access the Internet, your Internet provider's name, your web browser type, your mobile device type, your computer operating system, and data about your browsing activity when using our website. We use all this information to improve our website.

When Entering and Using Our Website

When you enter and use our website and accept cookies, some of these cookies may contain your personal data.

Our Use of Cookies

Our website uses cookies. A cookie is a small data piece or text file downloaded to your computer or mobile device when you access certain websites. Cookies may contain text that can be read by the web server that delivered the cookie to you. The text contained in the cookie generally consists of a string of letters and numbers that uniquely identifies your computer or mobile device; it may also contain other information.

By agreeing to our use of cookies, you are granting us and the third parties we work with permission to place, store, and access some or all of the cookies described below on your computer and/or mobile device.

• Strictly Necessary Cookies - These cookies are necessary for the proper functioning of the website, such as displaying content, logging in, validating your session, responding to your request for services, and other functions.
• Performance Cookies - These cookies collect information about the use of the website, such as pages visited, traffic sources, user interests, content management, and other website measurements.
• Functional Cookies - These cookies allow the website to remember user choices, such as their language, usernames, and other choices while using the website.
• Media Cookies - These cookies may be used to enhance website performance and provide special features and content. They may be placed by us or by third parties who provide services to us.
• Advertising or Targeting Cookies - These cookies are usually placed and used by advertising companies to develop a profile of your browsing interests and deliver advertisements on other websites related to your interests.
• Session Cookies - These cookies allow websites to link the actions of a user during a browser session. They can be used to remember what a user has placed in their shopping cart as they browse a website. Session cookies also allow users to be recognized as they navigate a website so that any item or page changes they make are remembered from page to page. Session cookies expire after a browsing session.
• Persistent Cookies - These cookies are stored on a user's device between browser sessions, allowing user preferences or actions on a website (or across different websites) to be remembered. Persistent cookies may be used to remember user preferences and choices when using a website or to target advertising to them.
• We may also use cookies to:

a) identify the areas of our website that you have visited;

b) personalize content that you see on our website;

c) perform website analytics;

d) remarket our products or services to you;

e) remember your preferences, settings, and login details;

f) facilitate targeted advertising and serve ads tailored to your interests;

g) allow you to share content on social networks.

Most web browsers can be set to disable the use of cookies. However, if you disable cookies, you may not be able to access the functionality on our website correctly or at all.

Web Beacons

We may use a technology called web beacons to gather general information about your use of our website and your use of special promotions or newsletters. The information we collect through web beacons allows us to statistically monitor the number of people who open our emails and to provide additional information about your interaction with our services.

When Registering as a User or Purchasing Products or Services

Based on our current practices when you provide us with information (including our practices over the last 12 months), we collect some or all of the following categories of information about you when you register as a user or when you purchase our products or services: your first and last name, email address, physical address, credit card or other payment information, phone number, and other information listed or voluntarily provided by you.

Google APIs

By using our website, you are subject to the Google Privacy Policy and Terms of Service.

When collecting and processing user data, including personal data from Google APIs, we will adhere to the Google API Services User Data Policy. We also require our employees, contractors, and agents to comply with the Google API Services User Data Policy.

Google Analytics

Our website uses Google Analytics to collect information about the use of our website. Google Analytics collects information from users such as age, gender, interests, demographics, how often they visit our website, the pages they visit, and the other websites they used before coming to our website. We use the information we get from Google Analytics to analyze traffic, improve our marketing, advertising, and website. We do not combine the information collected using Google Analytics with personal data. You can prevent Google Analytics from using your information by opting out at this link: https://tools.google.com/dlpage/gaoptout.

What Happens If You Don’t Give Us Your PD

If you do not provide us with enough personal data, we may not be able to provide you with all of our products and services. However, you can access and use some parts of our website without providing us with your personal data.

We use the information we receive from you to:

• Provide our products and services that you have requested or purchased from us;
• Personalize and tailor our content;
• Make improvements to our website;
• Contact you with updates to our website, products, and services;
• Resolve problems and disputes;
• Contact you with products and services that we believe may be of interest to you;
• Process the minimum amount of personal data necessary to provide the website's functionalities;
• Inform merchants of the personal data we process and the reasons for processing it;
• Limit the processing of personal data to the stated purposes for which it was collected;
• Respect and enforce decisions made in agreement with the customer;
• Respect and enforce customer decisions to opt-out of any data sharing such as a "data sale" or similar concept under applicable laws or regulations;
• Enter into confidentiality and data protection agreements with our merchants and contractors;
• Enforce data retention periods to ensure data is not kept longer than necessary;
• Ensure that data at rest and in transit is encrypted;
• Implement a data loss prevention strategy;
• Maintain a log of access to protected customer data.

Communications and Emails

When we communicate with you about our website, we use the email address you provided when registering as a user or customer. We may also send you emails with promotional information about our website or offers from us or our affiliates, unless you have opted out of receiving such information. You can change your contact preferences at any time through your account or by contacting us using the information provided at the top of this privacy statement.

Disclosure of Your Personal Data to Service Providers and/or Contractors

We may occasionally disclose your personal data to service providers and/or contractors that we engage to provide services to us. This disclosure of personal data may be considered a sale under certain privacy laws. These service providers and/or contractors may include, but are not limited to, payment processors, call centers, data management services, support providers, accountants, law firms, auditors, shopping cart and email service providers, shipping companies, and event sponsors when you attend an event or webinar organized by our company or among a group of companies to provide support and other services in line with our privacy notice.

Disclosures Required by Law

We may disclose your personal data if such disclosure is (a) required by a subpoena, law, or other legal process; (b) necessary to assist law enforcement officials or government enforcement agencies; (c) necessary to protect us against legal action or claims from third parties, including you and/or other users; or (d) necessary to protect the legal rights, personal/real property, or personal safety of our company, users, employees, and business partners.

Disclosures to Successors

If our business is sold or merges in whole or in part with another business that would become responsible for providing the website to you, we reserve the right to transfer your personal data to the new business. The new business would retain the right to use your personal data according to the terms of this privacy statement as well as any changes to this privacy statement as instituted by the new business. We also reserve the right to transfer your personal data if our company files for bankruptcy and some or all of our assets are sold to another person or business.

We will retain your personal data in a form that identifies you only for as long as it serves the purposes for which it was initially collected, as stated in this privacy statement, or for legal, business, or tax purposes. We will attempt to delete or permanently anonymize your personal data once it reaches the end of its retention period or if we receive a valid request from you to do so. However, some of your data may still exist in our systems, for example, if it is awaiting overwriting. This data has been decommissioned, meaning that while it still exists in our archival system, it is not readily accessible by any of our operating systems or by any of our employees or contractors.

Our website may contain links to other websites. These websites are not under our control and are not subject to our privacy notice. We are not responsible for these websites, and we provide links to these websites only for your convenience. You acknowledge that your use and access to these websites are at your own risk.

You may always opt out of receiving email from us or our affiliates. We will not sell, rent, or trade your email address to any unaffiliated third party without your permission, except in the case of a sale or transfer of our company, or if our company files for bankruptcy as described in the section Disclosures to Successors

We have designed our website and services using industry-standard security measures and authentication tools to protect the security of your personal data. We and the third parties who provide services to us also maintain technical and physical safeguards to protect your personal data. Unfortunately, we cannot guarantee the prevention of loss or misuse of your personal data or secure data transmission over the Internet due to its nature. We strongly recommend that you protect any password you may have for our website and not share it with anyone.

You may be required to provide a credit or debit card to purchase products and services on our website. We use third-party billing services and have no control over them. We make commercially reasonable efforts to ensure that your credit card number is kept strictly confidential by using only third-party billing services that use standard encryption technology to protect your credit card number from unauthorized use. However, you understand and agree that we are not in any way responsible for any misuse of your credit card number.

Personal data we collect from you may be stored, processed, and transferred between any of the countries in which we operate. The European Union has not deemed the United States and some other countries to have an adequate level of personal data protection under Article 45 of the GDPR. Our company relies on derogations for specific situations as defined in Article 49 of the GDPR. If you are a user from the European Union or another country, with your consent, your personal data may be transferred to the United States or other countries when you request information from us. When you purchase goods or services, we will use your personal data to perform a contract with you. Regardless of where we transfer, process, or store your personal data, we will attempt to apply reasonable safeguards to protect it. We will use the information we collect from you following the practices outlined in our privacy notice. Additionally, we enter into data processing agreements and/or standard contractual clauses when appropriate. By using our website, you consent to the transfers of your personal data described in this section.

We reserve the right to modify this privacy policy at any time. If our company decides to change this privacy policy, we will post those changes on our website so that our users and customers are always aware of what information we collect, use, and disclose. If, at any time, we decide to disclose or use your personal data in a different manner than specified at the time it was collected, we will notify you in advance by email sent to the email address registered in your account. Otherwise, we will use and disclose our users' and customers' personal data in accordance with the privacy policy that was in effect when the information was collected. In all cases, your continued use of our website, services, and products after any modification to this privacy policy will constitute your acceptance of such modification. If you have any questions about our privacy policy, please contact us using the information provided at the top of this privacy policy.