PRIVACY POLICY

Last updated and effective date: April 1st, 2023

This privacy policy describes how TIWA DESIGN collect, use, disclose, and protect our customers’ personal information. It also tells you about the rights and choices you have with respect to your personal information, and how you can reach us to get answers to your questions. Please note, our privacy practices are subject to the applicable laws of the places in which we operate. You will see additional region-specific terms that only apply to customers located in those geographic regions, or as required by applicable laws.

1. What Our Privacy Policy Covers

This privacy policy covers TIWA DESIGN’s customer facing operations in the United States, and applies to the personal information TIWA DESIGN’s obtains online when you access or use our websites, or any other applications or services that link to this privacy policy; engage with us on social media.

1. What Personal Information We Collect

The types of personal information we obtain about you depends on how you interact with us and our products and services. When we use the term “personal information,” we are referring to information that identifies, relates to, describes, or can be associated with you. The following are the categories and specific types of personal information that we collect:

1. Basic Identifying Information

Including your full name, alias, postal address, e-mail address, phone number, date of birth, account name, signature, username, social media handle, or other similar identifiers.

1. Government-Issued Identifiers

Including your driver’s license number or other similar government identifier.

1. Device Information and Other Unique Identifiers

Including device identifier, internet protocol (IP) address, cookies, beacons, pixel tags, mobile ad identifier, or similar unique identifiers.

1. Internet or Other Network Activity

Including browsing or search history and information regarding your interactions with our websites, mobile applications, emails, or advertisements.

1. Geolocation Data

Including information that permits us to determine your location, such as if you manually provide location information or enable your mobile device to send us precise location information.

1. Payment Information

Including credit or debit card numbers.

1. Commercial Information

Including products or services you have purchased, returned, exchanged, or considered; preferences; and rewards activity related to Beauty Insider membership.

1. Physical Characteristics

Including clothes, skin tone and type, hair color and type, eye color, and other beauty profile information you provide.

1. Health and Medical Information

Including information, you choose to provide regarding skin conditions or medications in connection with a beauty service, in-store digital experience, or product recommendation.

1. Demographic Data

Including age, gender, race, ethnicity, estimated income, and household information, some of which may include characteristics of protected classifications under state or federal law.

1. User Content

Including your communications with us and any other content you provide (such as social media profiles, photographs, images, videos, survey responses, comments, product reviews, testimonials, and other content).

1. Audio and Visual Information

Including photographs, images, videos.

1. Inferences

Inferences drawn from or created based on any of the information identified above.

1. Sensitive Personal Information

TIWA DESIGN only collects sensitive personal information, as defined in the applicable U.S. state privacy laws, with your consent. TIWA DESIGN also does not use sensitive personal information for inferring characteristics about you.

1. How We Collect Your Personal Information

We collect personal information about you from various sources. For example, we collect and obtain information:

1. Directly from You

We collect personal information you provide, such as when you make a purchase; register for an account or create a profile; other similar campaign or promotion; respond to a survey; or sign up to receive emails, text messages, and/or postal mailings.

1. From Social Media Platforms and Networks

If you interact with us on social media or use features, such as plugins, widgets, or other tools made available by social media platforms or networks (including Instagram, Facebook, TikTok and Pinterest) in connection with our websites, we collect information that you disclose to us, or that the social media platforms disclose to us. For more information about the privacy practices of those social media platforms, please review the privacy policies and settings of the social media platforms and networks that you use.

1. From Other Sources

For example, we may obtain information about you from other sources, such as data analytics providers, marketing or advertising service providers, fraud prevention service providers, vendors that provide services on our behalf, or publicly available sources. We also create information based on our analysis of the information we have collected from you.

1. Cookies and Similar Online Tracking Technologies

Cookies

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance, whether it’s their first time visiting or if they are a frequent visitor.

We use the following cookies to optimize your experience on our Site and to provide our services.

Cookies Necessary for the Functioning of the Store

Name	Function	Duration
_ab	Used in connection with access to admin.	2y
_secure_session_id	Used in connection with navigation through a storefront.	24h
_shopify_country	Used in connection with checkout.	session
_shopify_m	Used for managing customer privacy settings.	1y
_shopify_tm	Used for managing customer privacy settings.	30min
_shopify_tw	Used for managing customer privacy settings.	2w
_storefront_u	Used to facilitate updating customer account information.	1min
_tracking_consent	Tracking preferences.	1y
c	Used in connection with checkout.	1y
cart	Used in connection with shopping cart.	2w
cart_currency	Used in connection with shopping cart.	2w
cart_sig	Used in connection with checkout.	2w
cart_ts	Used in connection with checkout.	2w
cart_ver	Used in connection with shopping cart.	2w
checkout	Used in connection with checkout.	4w
checkout_token	Used in connection with checkout.	1y
dynamic_checkout_shown_on_cart	Used in connection with checkout.	30min
hide_shopify_pay_for_checkout	Used in connection with checkout.	session
keep_alive	Used in connection with buyer localization.	2w
master_device_id	Used in connection with merchant login.	2y
previous_step	Used in connection with checkout.	1y
remember_me	Used in connection with checkout.	1y
secure_customer_sig	Used in connection with customer login.	20y
shopify_pay	Used in connection with checkout.	1y
shopify_pay_redirect	Used in connection with checkout.	30 minutes, 3w or 1y depending on value
storefront_digest	Used in connection with customer login.	2y
tracked_start_checkout	Used in connection with checkout.	1y
checkout_one_experiment	Used in connection with checkout.	session
checkout_session_lookup	Used in connection with checkout.	3w
checkout_session_token_<<token>>	Used in connection with checkout.	3w
identity-state	Used in connection with customer authentication.	24h
identity-state-<<token>>	Used in connection with customer authentication.	24h
identity_customer_account_number	Used in connection with customer authentication.	12w

Reporting and Analytics

Name	Function	Duration
_landing_page	Track landing pages.	2w
_orig_referrer	Track landing pages.	2w
_s	Shopify analytics.	30min
_shopify_d	Shopify analytics.	session
_shopify_s	Shopify analytics.	30min
_shopify_sa_p	Shopify analytics relating to marketing & referrals.	30min
_shopify_sa_t	Shopify analytics relating to marketing & referrals.	30min
_shopify_y	Shopify analytics.	1y
_y	Shopify analytics.	1y
_shopify_ga	Shopify and Google Analytics.	session
customer_auth_provider	Shopify analytics.	session
customer_auth_session_created_at	Shopify analytics.	session

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.

You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.

Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as: www.allaboutcookies.org.

Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.

Do Not Track

Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

1. How We Use Your Personal Information

We collect and use personal information for various purposes, including:

Providing Products and Services

We use your personal information to provide products and services, such as to fulfill your orders and/or complete the transactions you request; to process your payments; to provide you receipts and order updates; to send notifications to you related to your account, purchases, returns, exchanges, subscriptions, and reservations; to create, maintain, and otherwise manage your account, profile, or program membership, including offering functionalities such as easy checkout and the ability to save user preferences and transaction history; and to provide a forum for discussion, asking questions, posting photos and reviews, and sharing experiences.

Depending on the products and/or services you request, the categories of information used for these purposes may include Basic Identifying Information, Payment Information, and Commercial Information. If you attempt a return, you may be asked to provide a Government-Issued Identifier.

Communicating With You

We use your personal information to communicate with you, such as to respond to and/or follow-up on your requests, inquiries, issues, or feedback, and to provide customer service.

Marketing and Promotional Purposes

We use personal information for marketing and promotional purposes, such as to send marketing, advertising, and promotional communications by email, text message, or postal mail (such as trend alerts, promotions, new product launches, and event invitations); to show you advertisements for products and/or services tailored to your interests on social media and other websites; and to administer our sweepstakes, contests, and other similar promotions.

Analytics and Personalization

We use personal information to conduct research and analytics, including to improve our services and product offerings; to understand how you interact with our websites, and communications with you; to determine which of our products or services are the most popular; to improve our websites, Sephora Mobile Apps, and marketing campaigns; to personalize your experience; to save you time when you visit our websites, better understand our customers’ needs; and to provide personalized recommendations about our products and services.

Security and Fraud Prevention

We use personal information to detect, investigate, prevent, or take action regarding possible malicious, deceptive, fraudulent, or illegal activity, including fraudulent transactions; attempts to manipulate or violate our policies, procedures, and terms and conditions; security incidents; and harm to the rights, property, or safety of TIWA DESIGN and our users, customers, employees, or others.

Legal Obligations

We use personal information to comply with our legal or regulatory obligations, to establish or exercise our rights, and to defend against a legal claim.

Core Business Functions

We use personal information to support core business functions, including to maintain records related to business process management, loss and fraud prevention; to collect amounts owing to us; and to provide and maintain the functionality of our website.

Applicant

To review the Applicant Privacy Policy, please visit: https://tiwadesign.com/policies/privacy-policy

1. How We Disclose Your Personal Information

In addition to the specific situations discussed elsewhere in this privacy policy, we disclose personal information in the following circumstances:

We may disclose personal information. Such corporate affiliates process personal information on our behalf as our service providers, where necessary to provide a product or service that you have requested, including to administer the Beauty Insider program, or in other circumstances with your consent as permitted or required by law.

Service Providers

We disclose certain personal information to service providers that perform services to support our core business functions and internal operations including: fulfilling orders; delivering packages; complying with your request for the shipment of products to or the provision of services by an intermediary; sending postal mail, e-mails, and text messages; analyzing customer data; providing marketing assistance; administering our Ratings & Reviews; supporting beacons; processing credit card and debit card payments; investigating fraudulent activity; conducting customer surveys; and providing customer service.

Social Media Platforms and Networks

Some of our websites have features such as, plugins, widgets, and/or other tools made available by social media platforms and networks that may result in information being collected or disclosed between us and such parties. Their use of your information is not governed by this privacy policy.

Legal Process

We may disclose personal information in response to subpoenas, warrants, court orders, government inquiries, or investigations; or to comply with relevant laws and regulations. We may also disclose information to establish, exercise, or protect the rights of our company, employees, agents, and affiliates; to defend against a legal claim; to protect the safety and security of our visitors; to detect and protect against fraud; and to take action regarding possible illegal activities or violations of our policies.

Other Instances

We may ask if you would like us to disclose your information with other third parties who are not described elsewhere in this privacy policy.

1. How We Protect Your Personal Information

Personal information is maintained on our website or those and is accessible by TIWA DESIGN as necessary for the purposes described in this privacy policy.

We realize that individuals trust us to protect their personal information. We maintain reasonable and appropriate physical, electronic, and procedural safeguards designed to help protect your personal information. While we attempt to protect your personal information in our possession, no method of transmission over the internet or security system is perfect, and we cannot promise that information about you will remain secure in all circumstances.

For your convenience, our website that allows you to remain logged in so that you do not have to re-enter your password each time you want to access your account. If you choose to remain logged in, you should be aware that anyone with access to your device will be able to access and make changes to your account and may be able to make purchases through your account. For that reason, if you choose to remain logged in, we strongly recommend that you take appropriate steps (such as enabling the “Passcode Lock” security feature on your mobile device) to protect against unauthorized access to, and use, of your account. Please also notify us as soon as possible if you suspect any unauthorized use of your account or password.

Your Rights

Consistent with applicable law, you may exercise the rights described in this section. Please note that some of the rights may vary depending on your country, province, or state of residence.

The Right to Opt Out of Cookies and Sale/Sharing Using Online Tracking Technologies

Our use of online tracking technologies may be considered a “sale” / “sharing” under applicable law. Visitors to our US website can opt out of being tracked by these third parties by clicking the “Your Privacy Choices” link at the bottom of our website and selecting their preferences, or by accessing “Contact Us, FAQ, Legal” on TIWA DESIGN Website.

If you are not logged into your our account, your request to opt out of “sale” / “sharing” will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us.

California and Colorado residents may opt out by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.

If you would like us to make the connection between your browser and your account when you send the opt-out of “sale” / “sharing” of your personal information request or GPC signal, and you have not yet opted out of “sale” / “sharing” your personal information, we recommend you submit the Do Not Sell or Share Personal Information form that is in Your Privacy Choices. As stated above, the Your Privacy Choices link is available at the bottom of the Sephora website and under “Contact Us, FAQ, Legal” on TIWA DESIGN Website.

Residents of Colorado, Connecticut, and Virginia can opt out of targeted advertising by clicking the “Your Privacy Choices” link at the bottom of our website and selecting the appropriate preferences, or under “Contact Us, FAQ, Legal” on TIWA DESIGN Website.

Categories of personal information disclosed that may be considered “sale” / “sharing”: Basic Identifying Information, Device Information and Other Unique Identifiers, Internet or Other Network Activity, Geolocation Data, and Commercial Data.

Categories of third parties to whom personal information was disclosed that may be considered “sale”/ “sharing” include advertisers and marketing partners, data analytics providers, and social media networks.

The Right to Limit the Use of Sensitive Personal Information

California residents have the right to limit the use of sensitive personal information. TIWA DESIGN Website only collects sensitive personal information, as defined by applicable California law, with your consent and only uses the sensitive personal information for the use disclosed at the time of collection.TIWA DESIGN Website does not use sensitive personal information for inferring characteristics about you.

The Right to Accessing, Correcting, and Deleting Personal Information

You may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. If you are a resident of California, Colorado, Connecticut, or Virginia you have the rights to access, correct, and delete personal information under the applicable law (when these laws become effective).

Access and Deletion
You can submit a request to access or delete your personal information, or withdraw consent, by

e-mail at info@tiwadesign.com

Typically, we retain your personal information for the period necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law. Please note that in many situations we must retain all, or a portion, of your personal information to comply with our legal obligations; resolve disputes; enforce our agreements; protect against fraudulent, deceptive, or illegal activity; or for another one of our business purposes.

Managing Communication Preferences

You can stop receiving promotional e-mails at any time by:

Clicking on the “unsubscribe” link at the bottom of any promotional e-mail that you receive from us;.

1. Children’s Privacy

Our website is not intended for or directed to children under the age of 18. We do not knowingly collect personal information directly from children under the age of 18 without parental consent. If we become aware that a child under the age of 18 has provided us with personal information, we will delete the information from our records.

1. Communicating With Us

If you have any questions about our privacy or security practices, you can contact TIWA DESIGN by mail, telephone, or e-mail:

TIWA DESIGN:

2450 W PECOS Rd, Apt 2158

85224, Chandler, ARIZONA

TEL: + 1 386 383 1089

e.mail: info@tiwadesign.com

If we need or are required, to contact you concerning any event that involves your personal information we may do so by e-mail, telephone, or mail.

1. Changes To This Policy

We may revise this privacy policy from time to time and will post the date it was last updated at the top of this privacy policy. We will provide additional notice to you if we make any changes that materially affect your privacy rights.

1. Additional Information for California Residents

California law requires us to disclose the following additional information with respect to our privacy practices. If you are a California resident, this section applies to you in addition to the rest of the privacy policy.

Categories of Personal Information We Collect and Our Purposes for Collection and Use

You can find a list of the categories of personal information that we collect in the “What Personal Information We Collect” section above. For details regarding the sources from which we obtain personal information, please see the “How We Collect Your Personal Information” section above. We collect and use personal information for the business or commercial purposes described in the “How We Use Your Personal Information” section above.

Categories of Personal Information Disclosed and Categories of Recipients

We disclose the following categories of personal information for business or commercial purposes to the categories of recipients listed below:

We disclose Basic Identifying Information with businesses, service providers, and third parties, such as advertising networks, analytics and social media networks.
We disclose Device Information and Other Unique Identifiers with businesses, service providers, and third parties, such as advertising networks, analytics, and social media networks.
We disclose Internet or Other Network Activity with businesses, service providers, and third parties, such as advertising networks, analytics, and social media networks.
We disclose Geolocation Data with businesses, service providers, and third parties such as advertising networks, analytics, and social media.
We disclose Payment Information with businesses and service providers who process payments.
We disclose Commercial Information with businesses, service providers, and third parties, such as advertising networks, analytics, and social media networks.
We disclose Physical Characteristics with business and service providers who help administer Community, Beauty Insider, or product recommendations.
We disclose Health and Medical Information you choose to provide regarding skin conditions or medications with businesses in connection with a beauty service and with service providers that help make product recommendations.
We disclose User Content with businesses and service providers who help administer our programs, such as Community, product reviews, and social media networks.
We disclose Audio and Visual Information with businesses and service providers who help administer customer service and fraud or loss prevention services.
We disclose Inferences with businesses and service providers who help administer marketing and personalization.
For more information on how your information is disclosed, please see the “How We Share Your Personal Information” section, which provides more detail on our business partners, service providers and third parties. We may also need to disclose any of the above categories of information pursuant to Legal Process or as a result of a “Transfer of Control” as described in the “How We Share Your Personal Information” section. As stated in the “Your Rights” section above, we typically retain your personal information for the period necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law.

1. Notice of Financial Incentive

if you would like to make a complaint, please contact us by e-mail or by mail using the details provided under “Contact Us” above.

If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority. You can contact your local data protection authority, or our supervisory authority here: info@tiwadesign.com

Right to Non-Discrimination

We do not discriminate against California residents who exercise any of their rights described in our privacy policy.