Privacy Policy

This privacy policy is effective as of February 22, 2023.

Personalized Beauty Discovery, Inc., dba IPSY Industries (collectively, “IPSY”, “we”, “us” or “our”) understands and respects your desire to keep your personal data safe. This Privacy Policy is intended to empower you with the information you need to understand how we collect, use and safeguard the personal data that you share with us when you visit ipsyindustries.com (the “Site). This Privacy Policy also explains how you can control how your personal data is used and shared.

IPSY is located in the United States. Any personal data you submit to us is processed and maintained in the United States.

By visiting our Site, you accept the terms of this Privacy Policy. You're not authorized to use this Site unless you agree with this Privacy Policy. We're not responsible for the practices employed by any third-party sites including ones to which we link or that link to us. Those sites will have rules and practices of their own and we encourage you to review their privacy policies.

If you have any questions or concerns about this Privacy Policy or our privacy practices, please email us at legal@ipsy.com.    ‍

INFORMATION WE COLLECT

1. Information you share with us. We collect information that you provide when you contact us for information. Such information may include your name, mailing address and email address (“Personal Information").
2. Information you share with third parties. We may receive information about you if you interact with one of our marketing partners or Affiliated companies. Marketing partners are third-party companies that we do business with. Affiliated companies are companies that are related to IPSY such as the Madeby Collective brands, IPSY, BoxyCharm or Refreshments.
3. Other information we receive about you. As you might expect, we usually collect or receive information through our Site or social media channels. But we also may collect information offline, and it's important to us that we preserve the privacy of your personal information both online and off. For example, if you contact us through a job fair or conference, we may ask for your email or mailing address to send information that you request. There are other ways we could learn of personal information offline, but this Privacy Policy doesn't try to predict all those methods. We just want you to know that we try to treat offline information collection, uses, and disclosures consistently with our online privacy practices.

‍

HOW WE USE, SHARE AND DISCLOSE YOUR PERSONAL INFORMATION

Information we collect from you may be either personal or aggregate. Personal Information, as described above, is identifiable to you, like your name, email address and mailing addresses. Aggregate information is summary data of the behaviors and interests of groups or categories, that does not specifically identify you.

1. Aggregate Information. We may use aggregate information for the purposes of internal business research and business development. This information may include the number of daily visitors to our Site. We do not link aggregated data with your personal information.
2. Personal Information. Except as described above, we do not sell, rent, trade, license, or otherwise disclose your personal information to third parties, except in these limited circumstances described in this Privacy Policy.
3. Disclosures Required by Law or Otherwise. We may disclose your personal information if we believe, in good faith, that it's necessary to: (1) comply with a legal obligation such as in response to a court order or subpoena; (2) protect the safety of other customers or the public; (3) protect against legal liability; or (4) protect and defend IPSY’s rights or property.
4. ‍Disclosures for a Business Transaction or Insolvency. We also may disclose your personal information in connection with an actual or proposed corporate transaction or insolvency proceeding involving all or part of IPSY’s business or assets. For example, if we merge with another company, we may disclose your personal information to that company, but the disclosure would be subject to our Privacy Policy.

‍

MANAGING YOUR PERSONAL INFORMATION

You are in control of how your Personal Information is used or shared. IPSY does not sell your Personal Information to third parties. If you submitted your Personal Information to IPSY, you may request that we delete it.

HOW WE PROTECT YOUR PERSONAL INFORMATION

Your Personal Information is invaluable to you. That’s why we take data security seriously. We use industry standard technical, physical and administrative safeguards to secure our customers’ data. Online, we encrypt your Personal Information using Transport Layer Security (“TLS”). TLS allows for a private, reliable Site connection where your identity is authenticated with cryptography. Offline, we restrict access to your Personal Information to only those IPSY employees who need it to perform a specific job function. We require all IPSY employees with access to your personal information to follow specific security protocols concerning its proper handling. We also hold our vendors who need access to your Personal Information to strict confidentiality and security requirements. Third-party service providers assist us with the physical security of some of our computer hardware. When you visit our Site, you access servers that we backup constantly. Our servers are hosted at locations which are private and secure data center facilities, behind physical and virtual firewalls.

Please remember, however, that while we use industry-standard security measures to safeguard your Personal Information, we can't guarantee absolute security. We wish we could, but 100% security just doesn't exist anywhere online or off. We recommend that you do your part by keeping your passwords secure, changing them often and not using the same password across multiple accounts.

COOKIES & TRACKING TECHNOLOGIES

We may receive information about our users from third party social platforms, such as Facebook, Instagram, TikTok or Twitter. When you access or use our Site through a third-party platform, you allow us to access or collect information made available by the third-party site in accordance with its privacy policy. This information may be available from your profile or account with the third-party site or from cookies placed on your device by the third-party site. Depending on your privacy settings this information may include, as an example: email address and location data.

A NOTE ABOUT CHILDREN

Our Site is not directed to children and children are not permitted to use or navigate our Site without the supervision of or written permission from a parent or guardian. We do not knowingly collect, maintain, or use personal information from children under age 16. If a parent or guardian becomes aware that his or her child has provided us personal information without their consent, he or she should contact us at privacy@ipsy.com. If we confirm we collected such information, we will take all reasonable measures to delete that information from our system as soon as possible.

‍

YOUR RIGHTS

The laws of your jurisdiction (including Colorado, Virginia, Connecticut, and Utah) may provide you with certain rights as to your personal information. Applicable law may permit you to request that we:

• Confirm whether or not we are processing your personal information and provide you with access such personal information;
• Correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information;
• Delete your personal information;
• Provide you a copy of personal information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another business, where our processing is carried out by automated means; and
• Opt you out of the processing of the personal information for purposes of targeted advertising, the sale of personal information, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

Certain information may be exempt from such requests under applicable law. We need certain types of information so that we can provide you with any information that you request. If would like to exercise any of these rights, please submit a request at IPSY Data Request or by calling, toll free 1-855-661-0018. Please be aware that we do not accept or process requests through other means (e.g., via fax, social media, email addresses, etc.). You will be required to verify your identity before we fulfill your request. To do so, you will need to provide the information identified in the webform or as otherwise directed by us. If we deny your request to exercise any of the rights above, you may appeal that denial by sending an email to privacy@ipsy.com describing in detail why you believe the denial was in error. Your description must include your full name and the email addressed used for your account with IPSY along with a copy of the denial notice you received from IPSY.

‍

CALIFORNIA RESIDENTS: YOUR PRIVACY RIGHTS

If you are a California resident, California law permits you to request Information regarding the:

• Categories of Personal Information (as defined by applicable California law) collected, sold or disclosed by us;
• Purposes for which categories of Personal Information collected by us are used;
• Sources of information from which we collect Personal Information; and
• Specific pieces of Personal Information we have collected about you.

In addition, if you are a California resident you may:

• Opt-out of the sale or disclosure of your Personal Information, in some circumstances;
• Opt-out of receiving marketing communications from us;
• Opt-in to certain financial incentive programs we may offer related to the collection, sale, or deletion of your Personal Information; and
• Request deletion of your Personal Information by us and our service providers, in some circumstances.

Collection and Disclosure of Personal Information from California Residents

The table below outlines how we handle personal information from California residents.

‍

Requests

You can make the following requests related to your California privacy rights by emailing us at privacy@ipsy.com.  

• Access My Personal Information
• Delete My Personal Information
• Do Not Sell My Personal Information

Please be aware that we do not accept or process requests through other means (e.g., via fax, social media, email addresses, etc.).

We will review the information provided and may request additional information to ensure we are interacting with the correct individual. Please also be aware that making any such request does not ensure complete or comprehensive removal or deletion of Personal Information or content you may have posted, and there may be circumstances in which the law does not require or allow us to fulfill your request.

NEVADA RESIDENTS

Except as described in the section How We Use, Share and Disclose Your Personal Information, we do not sell your information for monetary consideration.

‍

CHANGES TO THIS PRIVACY POLICY

We will post any changes and updates to this Privacy Policy on this Site so you can always be aware of what information we collect, use and disclose. We encourage you to review this Privacy Policy periodically, so you'll know if it has been changed or updated.