TONI&GUY collects private data about you from various sources. We may collect this when you provide information at one of our TONI&GUY Hairdressing Academies, TONI&GUY Hairdressing Salons, through our interactions with you through the TONI&GUY Websites, when you register to book appointments online, when you make appointments by telephone, and through providing our services. You provide some of this data directly, and we get some of it by collecting data about your interactions, use, and experiences with our services and the TONI&GUY Websites. The data we collect depends on the context of your interactions with TONI&GUY and the choices you make, including your privacy settings and the products and features you use. When you visit the TONI&GUY Websites, we may also collect certain information by automated means, using technologies such as cookies, web server logs and web beacons. The types of personal data (“Personal Data”) you provide us usually include: (1) contact information, (2) gender, (3) age and birth date, (4) account registration information such as username and password, (5) payment information, (6) survey opinions or testimonials, (7) IP address, (8) physical location, (9) information provided on waiver forms at salon and academy locations, and/or (10) content you provide such as photographs and comments.
From time to time, we may post customer testimonials that contain Personal Data on the TONI&GUY Websites. We obtain the customer’s consent to post these testimonials prior to publication. We may use the information you provide to: send you promotional materials or other communications regarding the TONI&GUY Hairdressing Academies and/ or Salons, or advanced education; provide services to you; process your payment card transactions; create and manage your online account; respond to your inquiries; forward your information to the TONI&GUY Hairdressing Academy and/ or the TONI&GUY Hairdressing Salon you are interested in so that they may contact you; operate, evaluate, and improve our business (such as analyzing data and evolving our services, communications, and products); and comply with legal requirements. We also may use the information in other ways for which we provide specific notice at the time of collection.
We do not sell or otherwise disclose Personal Data we collect about you, except as described here. We may share your Personal Data with: our affiliates; service providers who perform services on our behalf based on our instructions, including but not limited to services such as payment processors for payment transactions, financial services or fraud prevention; our TONI&GUY Hairdressing Academies or Salons or other TONI&GUY locations you are interested in, which may be managed by third parties other than TONI&GUY; and/or other third parties with your consent. We may share Personal Data with a limited number of approved vendors, which are unaffiliated entities that make available TONI&GUY-branded products, services, or discounts. We may share Personal Data with vendors and social media networks we hire to provide services or perform business functions on our behalf (such as print, mail, or email vendors; web hosting vendors; cloud service providers; consultants; digital advertising and analytics vendors; and contest or sweepstakes operators). These vendors are contractually required to treat the Personal Data provided as confidential. The TONI&GUY Websites may have message boards, forums, and/or chat areas where users can exchange ideas and communicate with each other. When posting to these areas, please be aware that the information is being made publicly available online and the user does so at his or her own risk.
If you are under thirteen years of age, you may browse the TONI&GUY Websites. However, you may not provide Personal Data to us. The TONI&GUY Websites are not directed to children under the age of thirteen and we do not knowingly collect Personal Data from children under the age of thirteen on the TONI&GUY Websites.
PRIVACY NOTICE FOR CALIFORNIA RESIDENTS:
Beginning January 1, 2020, if you are a resident of California, you will have additional rights under the California Consumer Privacy Act (the “CCPA”) with respect to your Personal Information (as defined in this notice), as outlined below.
I. Notice and access.
As a Consumer, you have the right to know:
You may request that TONI&GUY provide you access to the specific pieces of Personal Information collected about you in a readily usable format.
Your access rights under the CCPA are not absolute. Specifically, the CCPA limits the information you can request to Personal Information collected in the 12-month period preceding our receipt of the request. Additionally, under the CCPA, TONI&GUY is not obligated to respond to requests for access to Personal Information more than twice in a twelve month period. Further, in connection with any request made under the CCPA, TONI&GUY will need to collect information from you in order to verify your identity.
You may request that TONI&GUY delete the Personal Information we process about you, subject to certain limitations. Your Personal Information may not be deleted if the information is needed to:
III. Opt-out of sales.
The CCPA provides you the right to opt-out of having your Personal Information sold by a business. TONI&GUY does not sell Personal Information to third parties. You are entitled to contact us to prevent disclosure of Personal Information to third parties for such third parties’ direct marketing purposes; in order to submit such a request, please contact us at [email protected]
The CCPA prohibits businesses from discriminating against a consumer for exercising their rights under the CCPA. TONI&GUY will not discriminate against you for exercising any of your CCPA rights.
V. Designated methods for submitting rights requests.
If you have not created a TONI&GUY account, you may contact us directly to submit your request by emailing [email protected] with the subject line “CCPA Rights Request” or calling our Chief Data Protection Officer at 214-273-2250.
VI. Verifying consumer requests.
Only you or someone legally authorized to act on your behalf may make a verifiable consumer request related to your Personal Information. Your request must:
Generally, requests submitted through your TONI&GUY account will be considered sufficiently verified when the request relates to Personal Information associated with that specific account. However, if you have not created, or no longer have access to your TONI&GUY account, we may request additional materials or information for the purposes of validating the authenticity of your request.
TONI&GUY will use the information provided in connection with a verification request solely for the purposes of verification. We cannot fulfill your request if we are unable to verify your identity or authority to make the request and confirm that the Personal Information relates to you.
There may be other situations where TONI&GUY is unable or not required to fulfill your request. In such circumstances, TONI&GUY will respond to your request within the period required by the CCPA. The response will provide relevant details regarding TONI&GUY’s determination and any additional, pertinent information about your request.
Categories of Personal Information collected:
I. Information you provide directly to us.
II. Information collected through tracking technology (e.g. from cookies and similar technologies).
III. Derived information created from other Personal Information.
IV. Disclosures of Personal Information for a business purpose.
TONI&GUY may share information listed above under “Categories of Personal Information collected” with our service providers for operational business purposes including:
V. Disclosures of Personal Information for a commercial purpose.
If you have given your explicit consent, for example via a data transfer authorization or other consent document, we may disclose the categories of Personal Information detailed above for commercial purposes. The purpose, such as recruitment for external research, may vary and will be specified in the consent.
Changes to this notice
TONI&GUY will review and update this notice at least once every 12 months and more frequently as needed. We recommend visiting this page periodically to stay aware of any changes. If we modify this notice, we will make the revised notice available through the TONI&GUY Websites.Contact information
If you have questions about this section or our data practices generally, or if you wish to submit a complaint, request or inquiry, please contact TONI&GUY’s Chief Data Collection Officer at [email protected], or send a letter to:
Legal Basis for Processing Information: If you are located in the EU or Switzerland, we rely on several legal bases to process your Personal Information. These legal bases include where:
If you have any questions about, or would like further information concerning the legal basis on which we collect and use your Personal Information, please contact us by emailing [email protected].
Rights Under the General Data Protection Regulation: If you are located in the EU or Switzerland, you have the following rights with regard to your personal data that we hold:
If you wish to exercise one of these rights, please email us at [email protected].You also have the right to lodge a complaint to your local data protection authority. Further information about how to contact your local data protection authority is available at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.Obligations to Data Protection Officers: We will respond diligently and appropriately to requests from a Data Protection Officer (“DPA”) about this policy or compliance with applicable data protection privacy laws and regulations. We will, upon request, provide DPAs with names and contact details of the individuals designated to handle this process. With regard to transfers of Personal Information, we will (1) cooperate with inquiries from the DPA responsible for the entity exporting the data and (2) respect its decisions, consistent with applicable law and due process rights. With regard to transfers of data to third parties, we will comply with DPAs’ decisions relating to it and cooperate with all DPAs in accordance with applicable legislation.