Privacy Policy
Last Updated: March 2025
1. Introduction
Sun Cap Box ("we," "our," or "us") operates the website suncapbox.site. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our professional makeup artistry services.
We are committed to protecting your privacy and ensuring transparency about our data practices. By using our website and services, you agree to the collection and use of information in accordance with this policy.
Business Details:
Sun Cap Box
954 Robinson Key, East Avaburgh LA8 9RA, United Kingdom
Phone: +44 303 322 6701
Registration Number: 15241422
2. Information We Collect
We collect several types of information to provide and improve our services:
2.1 Personal Information
- Contact Information: Name, email address, phone number, postal address
- Booking Information: Service preferences, appointment dates and times, special requests
- Payment Information: Billing address, payment method details (processed securely through third-party payment processors)
- Communication Records: Correspondence through contact forms, emails, phone calls, or social media
- Account Information: If you create an account, username, password, and profile details
2.2 Automatically Collected Information
- Technical Data: IP address, browser type and version, device type, operating system
- Usage Data: Pages visited, time spent on pages, links clicked, referring websites
- Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies
- Location Data: Approximate geographic location based on IP address
3. How We Use Your Information
We use the collected information for various purposes:
- Service Delivery: To provide, maintain, and improve our makeup artistry services
- Booking Management: To schedule, confirm, and manage your appointments
- Communication: To respond to inquiries, send booking confirmations, and provide customer support
- Payment Processing: To process transactions and manage billing
- Marketing: To send promotional materials, special offers, and newsletters (with your consent)
- Website Improvement: To analyze usage patterns and optimize user experience
- Legal Compliance: To comply with legal obligations and protect our rights
- Security: To detect, prevent, and address technical issues and fraudulent activity
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process personal data under the following lawful bases:
- Consent: You have given clear consent for us to process your personal data for specific purposes
- Contract: Processing is necessary to fulfill our contract with you for services
- Legal Obligation: Processing is necessary to comply with legal requirements
- Legitimate Interests: Processing is necessary for our legitimate business interests, provided these do not override your rights
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our website and hold certain information:
5.1 Types of Cookies We Use
- Essential Cookies: Necessary for website functionality and cannot be disabled
- Analytics Cookies: Help us understand how visitors interact with our website (Google Analytics)
- Marketing Cookies: Track visitors across websites to display relevant advertisements (Facebook Pixel)
- Preference Cookies: Remember your preferences and settings
5.2 Managing Cookies
You can control cookies through your browser settings. However, disabling certain cookies may limit website functionality. Our cookie consent banner allows you to accept or decline non-essential cookies.
6. Third-Party Services
We use third-party services that may collect information about you:
- Google Analytics: Website analytics and performance monitoring
- Facebook Pixel: Advertising and conversion tracking
- Payment Processors: Secure payment processing (we do not store complete payment card details)
- Email Service Providers: For sending communications and newsletters
- Social Media Platforms: Facebook, Instagram, Twitter, LinkedIn integration
These third parties have their own privacy policies governing how they use your information. We encourage you to review their privacy policies.
7. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
- Service Providers: With trusted third parties who assist in operating our website and conducting business
- Legal Requirements: When required by law, court order, or government regulations
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- Protection of Rights: To protect our rights, property, or safety, and that of our users
- With Your Consent: When you explicitly agree to share information with specific third parties
8. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for data transmission
- Secure servers and encrypted databases
- Regular security assessments and updates
- Access controls and authentication procedures
- Staff training on data protection
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
9. Data Retention
We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:
- Customer Records: Retained for 7 years after last interaction for legal and tax purposes
- Marketing Data: Retained until you withdraw consent or unsubscribe
- Website Analytics: Aggregated data retained indefinitely; individual data retained for 26 months
- Communication Records: Retained for 3 years for quality assurance and dispute resolution
10. Your Rights
You have certain rights regarding your personal information:
- Right to Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data (subject to legal obligations)
- Right to Restrict Processing: Request limitation of how we use your data
- Right to Data Portability: Request transfer of your data to another organization
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent: Withdraw consent for processing at any time
To exercise these rights, contact us at +44 303 322 6701 or through our website contact form. We will respond to your request within 30 days.
11. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.
12. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your jurisdiction. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.
13. Marketing Communications
With your consent, we may send you marketing communications about our services, special offers, and beauty tips. You can opt out at any time by:
- Clicking the "unsubscribe" link in any marketing email
- Contacting us directly at +44 303 322 6701
- Adjusting your communication preferences in your account settings
Opting out of marketing communications will not affect essential service-related communications.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date. Continued use of our website after changes constitutes acceptance of the updated policy.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Sun Cap Box
954 Robinson Key
East Avaburgh LA8 9RA
United Kingdom
Phone: +44 303 322 6701
Email: [email protected]
16. Supervisory Authority
If you are located in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
17. California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising CCPA rights
To exercise these rights, contact us using the information provided above.