Personal Data processed for the following purposes and using the following services:

• • Advertising

    • Meta ads conversion tracking (Meta pixel), Google Ads conversion tracking, Google Ads Similar audiences, Meta Lookalike Audience, Google Ad Manager, Hotjar Form Analysis & Conversion Funnels, Google Floodlight conversion tracking (Floodlight tag), Quora Conversion Pixel, X Ads conversion tracking and Yahoo Advertising conversion tracking

      Personal Data: Trackers; Usage Data

    • Meta Audience Network

      Personal Data: Trackers; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Usage Data

    • Microsoft Advertising Universal Event Tracking

      Personal Data: Trackers; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Universally unique identifier (UUID); Usage Data

    • Pinterest Conversion Tag

      Personal Data: device information; Trackers; Usage Data

    • TikTok conversion tracking

      Personal Data: device information; Trackers; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Usage Data

  • Analytics

    • Google Analytics (Universal Analytics), Google Analytics (Universal Analytics) with anonymized IP, Attribution, Analytics collected directly, Meta Events Manager and Quantcast Measure

      Personal Data: Trackers; Usage Data

    • Google Analytics Advertising Reporting Features

      Personal Data: Trackers; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); various types of Data as specified in the privacy policy of the service

    • Google Analytics 4

      Personal Data: browser information; city; device information; latitude (of city); longitude (of city); number of Users; session statistics; Trackers; Usage Data

    • Google Analytics Demographics and Interests reports

      Personal Data: Trackers; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example)

    • YouTube Analytics and Reporting API

      Personal Data: Data communicated in order to use the Service; Data communicated while using the service; device information; password; Trackers; Usage Data; User ID; username

  • Backup saving and management

    • Backup on Google Drive and Backup on Dropbox

      Personal Data: various types of Data as specified in the privacy policy of the service

  • Collection of privacy-related preferences

    • iubenda Consent Database

      Personal Data: Data communicated while using the service; Trackers

    • iubenda Privacy Controls and Cookie Solution

      Personal Data: Trackers

  • Connecting Data

    • Make

      Personal Data: browsing history; company name; country; Data communicated while using the service; date of birth; device information; email address; financial information; first name; gender; geographic position; interests; language; last name; marital status; password; payment info; phone number; physical address; picture; profession; state; Trackers; Universally unique identifier (UUID); Usage Data; User ID; username; ZIP/Postal code

    • Zapier

      Personal Data: city; company name; country; Data communicated while using the service; date of birth; device information; email address; first name; gender; geographic position; language; last name; phone number; picture; profession; screenshots; Usage Data; username; ZIP/Postal code

  • Contacting the User

    • Contact form

      Personal Data: city; company name; country; county; date of birth; email address; fax number; field of activity; first name; gender; last name; number of employees; phone number; physical address; profession; state; Trackers; Usage Data; User ID; various types of Data; website; ZIP/Postal code

    • Mailing list or newsletter

      Personal Data: city; company name; country; county; date of birth; email address; first name; gender; last name; phone number; physical address; profession; state; Trackers; Usage Data; website; ZIP/Postal code

    • Phone contact

      Personal Data: phone number

  • Content commenting

    • Facebook Comments

      Personal Data: Trackers; Usage Data

    • Comment system managed directly

      Personal Data: email address; first name; last name; phone number; Trackers; Usage Data; username; website

  • Content performance and features testing (A/B testing)

    • Optimizely and Visual Website Optimizer

      Personal Data: Trackers; Usage Data

  • Displaying content from external platforms

    • Google Fonts, Google Maps widget, Bing Maps, Vimeo video and YouTube video widget

      Personal Data: Trackers; Usage Data

    • Calendly widget

      Personal Data: calendar information; device information; email address; geographic position; name; phone number; Trackers

    • YouTube Data API

      Personal Data: Data communicated in order to use the Service; Data communicated while using the service; device information; Trackers; Usage Data; User ID; username

    • YouTube IFrame Player

      Personal Data: Data communicated in order to use the Service; Data communicated while using the service; device information; Trackers; Usage Data; User ID

    • YouTube video widget (Privacy Enhanced Mode)

      Personal Data: Trackers; Universally unique identifier (UUID); Usage Data

  • Handling payments

    • Apple Pay

      Personal Data: billing address; email address; first name; last name; payment info; phone number; purchase history; shipping address; Trackers; Usage Data; various types of Data as specified in the privacy policy of the service

  • Heat mapping and session recording

    • Hotjar Heat Maps & Recordings

      Personal Data: Trackers; Usage Data; various types of Data as specified in the privacy policy of the service

  • Hosting and backend infrastructure

    • Amazon Web Services (AWS)

      Personal Data: various types of Data as specified in the privacy policy of the service

  • Infrastructure monitoring

    • Uptime Robot

      Personal Data: various types of Data as specified in the privacy policy of the service

  • Interaction with data collection platforms and other third parties

    • Direct marketing via popups

      Personal Data: Email; gender; name; Trackers; various types of Data

  • Interaction with external social networks and platforms

    • YouTube button and social widgets

      Personal Data: Usage Data

    • Facebook Like button and social widgets and LinkedIn button and social widgets

      Personal Data: Trackers; Usage Data

  • Interaction with live chat platforms

    • LiveChat Widget

      Personal Data: Data communicated while using the service; Trackers; Usage Data

  • Interaction with online survey platforms

    • SurveyMonkey Widget

      Personal Data: Trackers; Usage Data

  • Location-based interactions

    • Geolocation and Non-continuous geolocation

      Personal Data: coarse location; geographic position; precise location

  • Managing contacts and sending messages

    • Klaviyo

      Personal Data: company name; country; date of birth; email address; first name; gender; last name; phone number; physical address; profession; purchase history; state; Trackers; Usage Data; username; various types of Data

    • Sendgrid

      Personal Data: company name; country; date of birth; email address; first name; gender; last name; phone number; physical address; Trackers; Usage Data; username

    • ConvertKit

      Personal Data: email address; first name; Trackers; Usage Data

    • Mailgun

      Personal Data: country; date of birth; email address; first name; gender; last name; phone number; physical address; profession; Trackers; Usage Data; various types of Data

    • MailerLite

      Personal Data: company name; country; date of birth; email address; first name; gender; last name; phone number; physical address; Trackers; Usage Data; username; various types of Data

    • Twilio

      Personal Data: phone number

  • Managing data collection and online surveys

    • Klaviyo Forms

      Personal Data: city; company name; country; Data communicated while using the service; date of birth; email address; first name; gender; last name; phone number; physical address; profession; purchase history; state; Trackers; Usage Data; username

    • Meta lead ads

      Personal Data: city; company name; country; Data communicated while using the service; date of birth; email address; first name; gender; last name; marital status; phone number; physical address; profession; state; Trackers; Usage Data; ZIP/Postal code

  • Managing landing and invitation pages

    • Unbounce

      Personal Data: email address; Trackers; Usage Data

  • Platform services and hosting

    • Webflow

      Personal Data: Trackers; Usage Data; various types of Data as specified in the privacy policy of the service

  • Remarketing and behavioral targeting

    • Klaviyo segmentation and social advertising

      Personal Data: device information; email address; purchase history; Trackers; Usage Data

    • Google Ads Remarketing, Google Signals, Google Ad Manager Audience Extension, Facebook Remarketing, LinkedIn Website Retargeting, Quora Website Traffic Audience and Twitter Remarketing

      Personal Data: Trackers; Usage Data

    • TikTok Remarketing

      Personal Data: device information; Trackers; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Usage Data

    • Meta Custom Audience

      Personal Data: email address; Trackers

  • Social features

    • Inviting and suggesting friends

      Personal Data: various types of Data

  • SPAM protection

    • Google reCAPTCHA

      Personal Data: answers to questions; clicks; keypress events; motion sensor events; mouse movements; scroll position; touch events; Trackers; Usage Data

  • Tag Management

    • Google Tag Manager

      Personal Data: Trackers; Usage Data

  • User database management

    • Klaviyo CRM

      Personal Data: city; company name; country; date of birth; email address; first name; gender; last name; phone number; physical address; profession; purchase history; state; Trackers; Usage Data; username; various types of Data

    • Close

      Personal Data: company name; email address; geographic position; language; last name; number of employees; phone number; Trackers; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Usage Data; website

Information on opting out of interest-based advertising

In addition to any opt-out feature provided by any of the services listed in this document, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section of the Cookie Policy.

Further information about the processing of Personal Data

• • Analysis and predictions based on the User’s Data (“profiling”)

    The Owner may use the Personal and Usage Data collected through this Website to create or update User profiles. This type of Data processing allows the Owner to evaluate User choices, preferences and behaviour for the purposes outlined in the respective section of this document.
    User profiles can also be created through the use of automated tools like algorithms, which can also be provided by third parties. To find out more about the profiling activities performed, Users can check the relevant sections of this document.
    The User always has a right to object to this kind of profiling activity. To find out more about the User's rights and how to exercise them, the User is invited to consult the section of this document outlining the rights of the User.

  • Automated decision-making

    Automated decision-making means that a decision which is likely to have legal effects or similarly significant effects on the User, is taken solely by technological means, without any human intervention. This Website may use the User's Personal Data to make decisions entirely or partially based on automated processes according to the purposes outlined in this document. This Website adopts automated decision-making processes as far as necessary to enter into or perform a contract between User and Owner, or on the basis of the User’s explicit consent, where such consent is required by the law.
    Automated decisions are made by technological means – mostly based on algorithms subject to predefined criteria – which may also be provided by third parties.
    The rationale behind the automated decision making is:

    • to enable or otherwise improve the decision-making process;
    • to grant Users fair and unbiased treatment based on consistent and uniform criteria;
    • to reduce the potential harm derived from human error, personal bias and the like which may potentially lead to discrimination or imbalance in the treatment of individuals etc.;
    • to reduce the risk of User's failure to meet their obligation under a contract. To find out more about the purposes, the third-party services, if any, and any specific rationale for automated decisions used within this Website, Users can check the relevant sections in this document.

    Consequences of automated decision-making processes for Users and rights of Users subjected to it

    As a consequence, Users subject to such processing, are entitled to exercise specific rights aimed at preventing or otherwise limiting the potential effects of the automated decisions taken.
    In particular, Users have the right to:

    • obtain an explanation about any decision taken as a result of automated decision-making and express their point of view regarding this decision;
    • challenge a decision by asking the Owner to reconsider it or take a new decision on a different basis;
    • request and obtain from the Owner human intervention on such processing.

    To learn more about the User’s rights and the means to exercise them, the User is invited to consult the section of this document relating to the rights of the User.

  • localStorage

    localStorage allows this Website to store and access data right in the User's browser with no expiration date.

  • Preference Cookies

    Preference Cookies store the User preferences detected on this Website in the local domain such as, for example, their timezone and region.

  • Rights for registered California Users under the age of 18

    California's "Online Eraser" law, part of California's Business and Professions Code Sections 22580-22582, requires operators of certain websites and online services targeting minors to allow registered Users who are under the age of 18 and residents of California to request removal of content they post.

    If a registered User fits that description and posted content on this Website, they may request removal of such content by contacting the Owner or its privacy policy coordinator at the contact details provided in this document.

    In response to this request, the Owner may make content posted by the registered User invisible to other registered Users and the public (rather than deleting it entirely), in which case the content may remain on the Owner's servers. It may also be publicly available elsewhere if a third party copied and reposted this content.

  • Selling goods and services online

    The Personal Data collected are used to provide the User with services or to sell goods, including payment and possible delivery.
    The Personal Data collected to complete the payment may include the credit card, the bank account used for the transfer, or any other means of payment envisaged. The kind of Data collected by this Website depends on the payment system used.

  • The Service is intended for adults

    Users declare themselves to be adult according to their applicable legislation. Minors may not use this Website.

  • Unique device identification

    This Website may track Users by storing a unique identifier of their device, for analytics purposes or for storing Users' preferences.

  • We do not collect personal data about Virginia consumers below the age of 13

    We do not knowingly collect personal data of Virginia consumers who are below the age of 13 nor do we sell their data or process them for targeted advertising purposes.

  • We do not collect personal information about California consumers below the age of 16

    We do not knowingly collect personal information of consumers who are below the age of 16 nor do we sell or share it.

Contact information

• • Owner and Data Controller

    iThrive Beauty
    9850 GENESEE AVE. SUITE 650
    LA JOLLA, CA 92037

    Owner contact email: info@ithrivebeauty.com