ISDIN: Experts in Photoaging

California Privacy Policy

Webeat US - California Privacy Notice
CALIFORNIA PRIVACY NOTICE
This California Privacy Notice is incorporated into our Privacy Policy by reference. To view these terms, please see our Privacy Policy.
The California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020, provides you with specific rights regarding your personal information. This section describes the rights that California consumers have and explains how to exercise those rights. For the purposes of this section, personal information does not include: (i) information that is lawfully made available from federal, state or local government records; (ii) de-identified or aggregated data; or (iii) information excluded from the scope of the CCPA. To be clear, these rights are granted only to the extent that you are a California consumer and we are acting as a business under the CCPA with respect to your personal information. The rights in this section are not intended to grant you additional rights, but only your rights under the CCPA.
Information We Collect; How We Collect It; How We Use It.
We may collect, use and disclose personal information for certain processing purposes, including those described in the Personal Information Processing Chart below. For more information on the categories of personal information we may collect, please see the Personal Information Processing Chart section of our Privacy Policy. For more details regarding the sources from which we obtain personal information, please see the How We Collect Your Personal Information section of our Privacy Policy. We collect and use personal information for the business or commercial purposes described in the How We Use Your Personal Information section of our Privacy Policy.
Sharing of Personal Information
We may disclose your personal information to service providers for a business purpose, or sell or share your personal information to third parties, subject to your right to opt out (see Right to Opt Out of Selling or Sharing Your Personal Information, below). The information under the Personal Information Processing Chart (or as addressed under the section of the Privacy Policy titled How We Disclose or Share Your Information, if applicable) describes the entities with which we may disclose your personal information.
Rights to Your Information
a. Right to Know
As a California consumer, you have the right to request that we disclose certain information to you about our collection, use, or disclosure of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request (see Exercising Your Rights below), and subject to certain limitations that we describe below, we will disclose such information. You have the right to request any or all of the following:
The categories of personal information we collected about you.
The categories of sources from which the personal information is collected.
Our business or commercial purpose for collecting, selling, or sharing that personal information.
The categories of third parties with whom we disclose personal information.
The specific pieces of personal information we collected about you (see Data Portability Rights below).
a. Right to Delete
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see Exercising Your Rights below), we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. However, we may retain personal information that has been de identified or aggregated. Furthermore, we may deny your deletion request if retaining the information is necessary for us or our service provider(s) in order to perform certain actions set forth under the CCPA, such as detecting security incidents and protecting against fraudulent or illegal activity.
a. Right to Data Portability
You have the right to request a copy of personal information we have collected and maintained about you. The CCPA allows you to request your information from us up to twice during a 12-month period. We will provide our response in a readily usable (and usually electronic) format.
a. Right to Correct
You have the right to request the correction of any personal information we maintain about you.
a. Right to Opt Out of Selling or Sharing Your Personal Information
You have the right to opt out of the sale or sharing of your personal information, along with the right to opt in to the sale of such information. We do not sell or share the personal information of consumers we actually know are less than 16 years of age, unless we receive affirmative authorization (the "right to opt-in") from either the consumer who is less than 16 (but greater than 13) years of age, or the parent or guardian of a consumer less than 13 years of age. To our knowledge, we do not sell or share the personal information of minors under 16 years of age.
To exercise the right to opt out, you (or your authorized representative) may submit a request to us by may submit a request to us by contacting us at privacy.us@isdin.com, or by submitting a request form through our Your Privacy Choices Portal, or by visiting the following Internet Web page: "Do Not Sell or Share My Personal Information". We will also treat opt-out preference signals as valid opt-out requests.
You may change your mind and opt back in to personal information sales at any time by contacting us at privacy.us@isdin.comor by submitting a request form through our Your Privacy Choices Portal.
a. Right to Limit the Use of Your Sensitive Personal Information
The CCPA provides you with the right to limit the use or disclosure of your sensitive personal information (SPI) if we are using your SPI beyond what is reasonable and proportionate to provide the requested goods or services. SPI that we may collect from you includes Health Information, as that term is defined in the Personal Information We Collect From You section of our Privacy Policy. Depending on your interaction with us, our use of your SPI may be for purposes that are subject to your right to limit. You can make a request for us to limit the use or disclosure of your SPI by visiting the web page My Privacy Rights.
a. Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights, including but not limited to, by:
Denying you goods or services.
Charging you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties. Providing you a different level or quality of goods or services.
Suggesting that you may receive a different price or rate for goods or services or a different level or quality of goods or services. a. Exercising Your Rights
To exercise the rights described above, please contact us by using the following methods:
Calling us at +1 862-242-8129.
Submitting a request form through our Your Privacy Choices Portal.
Emailing us at privacy.us@isdin.com
Visiting our California Rights page by clicking here
After submitting a request, we will take steps to verify your identity in order for us to properly respond and confirm that it is not a fraudulent request. In order to verify your identity, we will ask, at a minimum, that you provide your name, email address, phone number, address, and relationship to us, so that we can seek to match this information with the information existing in our systems. When providing us this information, you represent and affirm
that all information provided is true and accurate. If we are unable to verify that the consumer submitting the request is the same individual about whom we have collected personal information, we may contact you for more information, or we may not be able to meet your request.
Only you, or an agent legally authorized to act on your behalf, may make a verifiable request related to your personal information. If you are making a request as the authorized agent of a California consumer, we will ask you also submit reliable proof that you have been authorized in writing by the consumer to act on such consumers behalf.
We will make every effort to respond to your request within 45 days from when you contacted us. If you have a complex request, the CCPA allows us up to 90 days to respond. We will still contact you within 45 days from when you contacted us to let you know we need more time to respond.
Financial Incentives
We may offer you financial incentives, including discounts, coupons, gift cards or other rewards, for sharing personal information through programs that we may provide from time to time. For example, we may offer you free ISDIN products or discount codes for your participation in telephone or online surveys, for making reviews on our products, as part of invitations to events, or in relation to other offers.
When we offer financial incentives to you, we believe that the value of the different pricing or services you will receive exceeds the cost of providing your personal information. Your participation in these programs is completely optional and subject to the terms provided to you at the time you sign up. You can opt-out of such program at any time by contacting us atprivacy.us@isdin.comor by submitting a request form through our Your PrivacyChoices Portal.
For financial incentive disclosures relating specifically to our Love ISDIN program, please see the section of our Privacy Policy titled Love ISDIN Loyalty Program.
California Shine the Light
Under California Civil Code Section 1798.83 (Shine the Light), Under California Law, California residents have the right to request in writing from businesses with whom they have an established business relationship, (a) a list of the categories of personal information, such as name, email address and mailing address and the type of services provided to the customer that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties direct marketing purposes and (b) the names and addresses of all such third parties. To request the above information, please contact us byprivacy.us@isdin.comor by submitting a request form through our Your Privacy Choices Portal. If you do not want your personally identifying information shared with any third party who may use such information for direct marketing purposes, then you may opt out of such disclosures by sending us an email atprivacy.us@isdin.comor by submitting a request form through our Your Privacy Choices Portal.
PERSONAL INFORMATION PROCESSING CHART
In the past 12 months, we have collected the following categories of personal information from the sources described in the section of the Privacy Policy titled How We Collect Your Personal Information. The chart below describes our business or commercial purposes for collecting and disclosing these categories personal information, the parties we have disclosed such information to, and whether we have sold or shared (or otherwise disclosed for targeted advertising) each category of personal information. Depending on your level of interaction with us, we may not have collected your personal information from all of the categories listed below. The categories of personal information described below are retained and stored for as long as is necessary to effectuate the business and commercial purposes for which they have been collected, and otherwise as described in the section of the Privacy Policy titled Data Retention.
Category of data: Personal Identifiers
Examples
A real name, postal address, online identifier, Internet Protocol address, email address, account name.
Business or Commercial Purposes for Collecting Personal Information
To communicate with you.
To provide our products and services.
Providing personalized advertising and marketing services.
For analytics and personalisation.
To operate and improve our business, products, and services.
To process adverse effects.
For security and fraud prevention.
To comply with legal obligations.
To support core business functions.
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes
To communicate with you.
To provide our products and services.
Providing personalized advertising and marketing services.
For analytics and personalisation
To operate and improve our business, products, and services.
To process adverse effects.
For security and fraud prevention.
To comply with legal obligations.
To support core business functions.
Sold or Shared in the Prior Twelve (12) Months for the Following Purposes
Marketing and advertising.
For analytics and personalisation
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information
Service providers who perform business services for us.
Marketing and advertising partners.

Category of data: Personal information covered by the California Customer Records statute (Cal. Civ. Code 1798.80(e)).
Examples
A name, physical characteristics or description, address, telephone number, credit card number, debit card number, or any other financial information.
Business or Commercial Purposes for Collecting Personal Information
To communicate with you.
To provide our products and services.
Providing personalized advertising and marketing services.
For analytics and personalization.
To operate and improve our business, products, and services.
To process adverse effects.
For security and fraud prevention.
To comply with legal obligations.
To support core business functions.

Disclosed in the Prior Twelve (12) Months for the Following Business Purposes
To communicate with you.
To provide our products and services.
Providing personalized advertising and marketing services.
For analytics and personalisation.
To operate and improve our business, products, and services.
To process adverse effects.
For security and fraud prevention.
To comply with legal obligations.
To support core business functions.
Sold or Shared in the Prior Twelve (12) Months for the Following Purposes
Marketing and advertising.
For analytics and personalisation
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information
Service providers who perform business services for us.
Marketing and advertising partners.

Category of data: Commercial information
Examples
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Business or Commercial Purposes for Collecting Personal Information
To communicate with you.
To provide our products and services.
Providing personalized advertising and marketing services.
For analytics and personalisation.
To operate and improve our business, products, and services.
To process adverse effects.
For security and fraud prevention.
To comply with legal obligations.
To support core business functions.
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes
To communicate with you.
To provide our products and services.
Providing personalized advertising and marketing services.
For analytics and personalisation
To operate and improve our business, products, and services.
To process adverse effects.
For security and fraud prevention.
To comply with legal obligations.
To support core business functions.
Sold or Shared in the Prior Twelve (12) Months for the Following Purposes
Marketing and advertising partners
For analytics and personalisation
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information
Marketing and advertising partners.
Service providers who perform business for us.

Category of data: Internet or other similar network activity.
Examples
Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.

Business or Commercial Purposes for Collecting Personal Information
Providing personalized advertising and marketing services.
For analytics and personalisation
To operate and improve our business, products, and services.
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes
Providing personalized advertising and marketing services.
For analytics and personalisation.
To operate and improve our business, products, and services.
Sold or Shared in the Prior Twelve (12) Months for the Following Purposes
Marketing and advertising partners.
For analytics and personalisation
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information
Marketing and advertising partners.
Service providers who perform business for us.

Category of data- geolocation data.
Examples
Information sufficient to identify the name of a city or town.
Business or Commercial Purposes for Collecting Personal Information
To provide our products or services.
Providing personalized advertising and marketing services. For analytics and personalisation
For security and fraud prevention.
To comply with legal obligations.
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes
Providing personalized advertising and marketing services. For analytics and personalisation
Sold or Shared in the Prior Twelve (12) Months for the Following Purposes
Service providers who perform business for us.
For analytics and personalisation
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information
Marketing and advertising partners.
Service providers who perform business for us.

Category of data- Inferences drawn from other personal information for profiling purposes.
Examples
Used to create a profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behaviour, attitudes, intelligence, abilities, and aptitudes.
Business or Commercial Purposes for Collecting Personal Information
Providing personalized advertising and marketing services.
For analytics and personalisation.
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes
Providing personalized advertising and marketing services.
For analytics and personalisation.
Sold or Shared in the Prior Twelve (12) Months for the Following Purposes
Service providers who perform business for us.
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information
Marketing and advertising partners.
Service providers who perform business for us.

Category of data - SPI (Health Information)
Examples
Health Information, which includes information you voluntarily provide about specific skin and body needs or conditions, such as pregnancy and menopause states, your skin conditions, as well as information you choose to provide regarding adverse effects.

Business or Commercial Purposes for Collecting Personal Information
To identify and evaluate previously unreported adverse effects so that we can monitor and manage the safety of our products.
To recommend products based on your skin condition through our LYS Assistant (not to be considered a substitute for professional medical advice).
To send you personalized marketing communications about our recommended products, only if we obtain your opt-in consent.
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes
N/A
Sold or Shared in the Prior Twelve (12) Months for the Following Purposes
N/A
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information
Service providers who perform business services for us related to the reporting and monitoring of adverse effects.

Category of data: Personal Identifiers
Examples	A real name, postal address, online identifier, Internet Protocol address, email address, account name.
Business or Commercial Purposes for Collecting Personal Information	To communicate with you. To provide our products and services. Providing personalized advertising and marketing services. For analytics and personalisation. To operate and improve our business, products, and services. To process adverse effects. For security and fraud prevention. To comply with legal obligations. To support core business functions.
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes	To communicate with you. To provide our products and services. Providing personalized advertising and marketing services. For analytics and personalisation To operate and improve our business, products, and services. To process adverse effects. For security and fraud prevention. To comply with legal obligations. To support core business functions.
Sold or Shared in the Prior Twelve (12) Months for the Following Purposes	Marketing and advertising. For analytics and personalisation
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information	Service providers who perform business services for us. Marketing and advertising partners.

Category of data: Commercial information
Examples	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Business or Commercial Purposes for Collecting Personal Information	To communicate with you. To provide our products and services. Providing personalized advertising and marketing services. For analytics and personalisation. To operate and improve our business, products, and services. To process adverse effects. For security and fraud prevention. To comply with legal obligations. To support core business functions.
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes	To communicate with you. To provide our products and services. Providing personalized advertising and marketing services. For analytics and personalisation To operate and improve our business, products, and services. To process adverse effects. For security and fraud prevention. To comply with legal obligations. To support core business functions.
Sold or Shared in the Prior Twelve (12) Months for the Following Purposes	Marketing and advertising partners For analytics and personalisation
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information	Marketing and advertising partners. Service providers who perform business for us.

Category of data: Internet or other similar network activity.
Examples	Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.

Business or Commercial Purposes for Collecting Personal Information	Providing personalized advertising and marketing services. For analytics and personalisation To operate and improve our business, products, and services.
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes	Providing personalized advertising and marketing services. For analytics and personalisation. To operate and improve our business, products, and services.
Sold or Shared in the Prior Twelve (12) Months for the Following Purposes	Marketing and advertising partners. For analytics and personalisation
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information	Marketing and advertising partners. Service providers who perform business for us.

Category of data- geolocation data.
Examples	Information sufficient to identify the name of a city or town.
Business or Commercial Purposes for Collecting Personal Information	To provide our products or services. Providing personalized advertising and marketing services. For analytics and personalisation For security and fraud prevention. To comply with legal obligations.
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes	Providing personalized advertising and marketing services. For analytics and personalisation
Sold or Shared in the Prior Twelve (12) Months for the Following Purposes	Service providers who perform business for us. For analytics and personalisation
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information	Marketing and advertising partners. Service providers who perform business for us.

Category of data- Inferences drawn from other personal information for profiling purposes.
Examples	Used to create a profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behaviour, attitudes, intelligence, abilities, and aptitudes.
Business or Commercial Purposes for Collecting Personal Information	Providing personalized advertising and marketing services. For analytics and personalisation.
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes	Providing personalized advertising and marketing services. For analytics and personalisation.
Sold or Shared in the Prior Twelve (12) Months for the Following Purposes	Service providers who perform business for us.
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information	Marketing and advertising partners. Service providers who perform business for us.

Category of data - SPI (Health Information)
Examples	Health Information, which includes information you voluntarily provide about specific skin and body needs or conditions, such as pregnancy and menopause states, your skin conditions, as well as information you choose to provide regarding adverse effects.

Business or Commercial Purposes for Collecting Personal Information	To identify and evaluate previously unreported adverse effects so that we can monitor and manage the safety of our products. To recommend products based on your skin condition through our LYS Assistant (not to be considered a substitute for professional medical advice). To send you personalized marketing communications about our recommended products, only if we obtain your opt-in consent.
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes	N/A
Sold or Shared in the Prior Twelve (12) Months for the Following Purposes	N/A
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information	Service providers who perform business services for us related to the reporting and monitoring of adverse effects.