Privacy Policy

Our Commitment to Your Privacy

At Zephora, we understand that trust is earned through transparency and respect. This Privacy Policy explains how we collect, use, protect, and handle your personal information when you interact with our website and services.

We are committed to protecting your privacy and ensuring that your personal data is handled responsibly and in accordance with applicable data protection laws. We believe you have the right to know exactly what information we collect and how we use it.

Information We Collect

Information You Provide Directly

When you contact us or request our services, you may provide:

• Your name and contact information (email address, phone number if provided)
• Home address for service scheduling and delivery
• Service preferences and special requirements
• Communication history and feedback

Automatically Collected Information

When you visit our website, we automatically collect certain technical information:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referring website or source

Information from Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and understand how you interact with our website. For detailed information about our cookie usage, please see our Cookie Policy. You have control over which cookies you accept through your browser settings or our cookie preference center.

How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To schedule appointments, provide cleaning services, and communicate with you about your service requests
• Customer Support: To respond to your inquiries, address concerns, and provide assistance
• Service Improvement: To understand how our services are used and identify areas for enhancement
• Website Analytics: To analyze website traffic and improve user experience
• Communication: To send service updates, appointment reminders, and respond to your requests (we do not send unsolicited marketing emails)
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide the services you requested
• Consent: When you have given explicit permission for specific processing activities
• Legitimate Interests: For business operations, service improvement, and protecting our rights
• Legal Obligations: To comply with laws and regulations

Information Sharing and Disclosure

We respect your privacy and do not sell your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and delivering services (such as scheduling tools, payment processors, or analytics providers). These providers are contractually obligated to protect your information.
• Legal Requirements: When required by law, court order, or legal process, or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the new entity
• With Your Consent: When you have explicitly agreed to share your information for a specific purpose

How We Protect Your Information

Security Measures

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption of data in transit and at rest
• Secure server infrastructure with regular security updates
• Access controls limiting data access to authorized personnel only
• Regular security assessments and monitoring

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we securely delete or anonymize it.

Breach Notification

In the unlikely event of a data breach that affects your personal information, we will notify you and relevant authorities as required by law. We will take immediate steps to mitigate any potential harm and prevent future breaches.

Your Privacy Rights

You have the following rights regarding your personal information:

• Right to Access: You can request a copy of the personal information we hold about you
• Right to Rectification: You can request that we correct any inaccurate or incomplete information
• Right to Erasure: You can request that we delete your personal information under certain circumstances
• Right to Data Portability: You can request to receive your data in a structured, machine-readable format
• Right to Object: You can object to certain types of processing, including direct marketing
• Right to Restrict Processing: You can request that we limit how we use your information
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us through the contact information provided on our website. We will respond to your request within a reasonable timeframe as required by applicable law.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

• Avoid filling out contact forms, account registrations, or any data-submitting features
• Disable cookies through your browser settings (see our Cookie Policy for more details)
• Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us through our contact page. We will process your request promptly and in accordance with applicable data protection laws.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us immediately.

International Data Transfers

If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using our services, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised "Last updated" date. We encourage you to review this Privacy Policy periodically. For material changes, we will provide prominent notice on our website or contact you directly if required by law.