Dear Customer,

We understand and respect your concern about the privacy of any information you supply while at our site. We believe that knowledge is the key to monitoring and protecting how your information is used on the Internet. This statement sets forth Privacy Policy ruled by orientalheritageherbalists.com and 2C2P.com, our authorized retailer, and describes the practice follows with respect to all visitors to orientalheritageherbalists.com

Highlights

2C2P has developed this Privacy Statement to explain how we may collect, retain, process, share and transfer your personal data when you visit 2C2P.com or use 2C2P Service This Privacy Statement applies to your Personal Data when you visit Sites or use Services, and does not apply to online websites or services that we do not own or control, including websites or services of other 2C2P Users

How Do We Process Personal Data?

Use of your Personal Information
The personal information collected on this Site will be used to operate the Site and to provide the service(s) or carry out the transaction(s) you have requested or authorized.

In support of these uses, 2C2P may use personal information to provide you with more effective customer service, to improve the Site and any related 2C2P products or services, and to make the Site easier to use by eliminating the need for you to repeatedly enter the same information or by customizing the Site to your particular preference or interests.

We may use your personal information to provide you with important information about the product or service that you are using, including critical updates and notifications. Additionally, with your permission, we may send you information about other 2C2P products and services, and/or share information with 2C2P partners so they may send you information about their products and services.

We merge site-visitation data with anonymous demographic information for research purposes, and we may use this information in aggregate to provide more relevant content. In some limited entry sections of 2C2P.com, with your approval, we will combine site-visitation data with your personal information in order to provide you with personalized content. If you decline permission, we will not provide you the personalized service and will not merge your personal information with site-visitation data. When you sign up for a newsletter or agree to receive promotional e-mail, 2C2P may use customized links or similar technologies to track e-mail links that you click. We may associate that information with your personal information in order to provide you more focused e-mail communications or purchase information.

Some services on 2C2P offer individuals the ability to publicly display certain personal information, such as for a 2C2P partner who wishes to publish contact information as part of offering a business service. Participation in such services is always optional.

Do We Share Personal Data? 

We may share your Personal Data or other information about you with others in a variety of ways as described in this section of the Privacy Statement. We may share your Personal Data or other information for the following reasons:

With other members of the 2C2P corporate family: We may share your Personal Data with members of the 2C2P family of entities to, among other things, provide the Services you have requested or authorised; to manage risk; to help detect and prevent potentially illegal and fraudulent acts and other violations of our policies and agreements and to help us manage the availability and connectivity of 2C2P products, Services, and communications.

With other companies that provide services to us: We share Personal Data with third-party service providers that perform services and functions at our direction and on our behalf.  These third-party service providers may, for example, provide you with Services, verify your identity, assist in processing transactions, send you advertisements for our products and services, or provide customer support.

With other financial institutions: We share Personal Data with other financial institutions that we have partnered with to jointly create and offer a product.  These financial institutions may only use this information to market and offer 2C2P-related products, unless you have given consent for other uses. We may also share Personal Data to process transactions, provide you with benefits associated with your eligible cards, and keep your financial information up to date.

With the other parties to transactions when you use the Services, such as other Users, merchants, and their service providers: We may share information about you and your Account with the other parties involved in processing your transactions. This includes other Users you are sending or receiving funds from and merchants, and their service providers. The information might include:

• Personal Data and Account information necessary to facilitate the transaction;
• Personal Data to help other participant(s) resolve disputes and detect and prevent fraud; and
• Anonymous data and performance analytics to help merchants better understand the uses of our Services and to help merchants enhance Users’ experiences.

With other third parties for our business purposes or as permitted or required by law: We may share information about you with other parties for 2C2P business purposes or as permitted or required by law, including:

• if we need to do so to comply with a law, legal process or regulations;
• to law enforcement authorities or other government officials, or other third parties pursuant to a subpoena, a court order or other legal process or requirement applicable to 2C2P corporate family;
• if we believe, in our sole discretion, that the disclosure of Personal Data is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity;
• to protect the vital interests of a person;
• with credit agencies and data processors for credit reference checks and anti-fraud and compliance purposes;
• to investigate violations of or enforce a user agreement or other legal terms applicable to any Service;
• to protect our property, Services and legal rights;
• to facilitate a purchase or sale of all or part of 2C2P business;
• in connection with shipping and related services for purchases made using a Service;
• to help assess and manage risk and prevent fraud against us, our Users and fraud involving our Sites or use of our Services, including fraud that occurs at or involves our business partners, strategic ventures, or other individuals, and merchants, such as eBay, Inc.;
• to banking partners as required by card association rules for inclusion on their list of terminated merchants;
• to credit reporting and collection agencies;
• to companies that we plan to merge with or be acquired by; and
• to support our audit, compliance, and corporate governance functions.

With your consent: We also will share your Personal Data and other information with your consent or direction, including if you authorise an account connection with a third-party account or platform.

In addition, 2C2P may provide aggregated statistical data to third-parties, including other businesses and members of the public, about how, when, and why Users visit our Sites and use our Services.  This data will not personally identify you or provide information about your use of the Sites or Services.  We do not share your Personal Data with third parties for their marketing purposes without your consent.

How Do We Work with Other Services and Platforms? 

A significant benefit and innovation of 2C2P Services is that you can connect your Account with a third-party account or platform. For the purposes of this Privacy Statement, an “account connection” with such a third-party is a connection you authorise or enable between your Account and a 2C2P account, payment instrument, or platform that you lawfully control or own.  When you authorise such a connection, 2C2P and the third-party will exchange your Personal Data and other information directly.  Examples of account connections include:

• linking your Account to a social media account or social messaging service;
• connecting your Account to a third-party data aggregation or financial services company, if you provide such company with your Account log-in credentials; or
• using your Account to make payments to a merchant or allowing a merchant to charge your Account.

If you choose to create an account connection, we may receive information from the third-party about you and your use of the third-party’s service.  For example, if you connect your Account to a social media account, we will receive Personal Data from the social media provider via the account connection.  If you connect your Account to other financial accounts, directly or through a third-party service provider, we may have access to your account balance and transactional information, such as purchases and funds transfers.  We will use all such information that we receive from a third-party via an account connection in a manner consistent with this Privacy Statement.

Information that we share with a third-party based on an account connection will be used and disclosed in accordance with the third-party’s privacy practices.  Before authorising an account connection, you should review the privacy notice of any third-party that you authorised to have an account connection that will gain access to your Personal Data as part of the account connection.  For example, Personal Data that 2C2P shares with a third-party account or platform such as a social media account may in turn be shared with certain other parties, including the general public, depending on the account’s or platform’s privacy practices.

How Do We Use Cookies and Tracking Technologies? 

When you visit our Sites, use our Services, or visit a third-party website for which we provide online services, we and our business partners and vendors may use cookies and other tracking technologies (collectively, “Cookies”) to recognise you as a User and to customise your online experiences, the Services you use, and other online content and advertising; measure the effectiveness of promotions and perform analytics; and to mitigate risk, prevent potential fraud, and promote trust and safety across our Sites and Services.  Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies, your use of the Sites and Services may be limited or not possible.

Do Not Track (DNT) is an optional browser setting that allows you to express your preferences regarding tracking by advertisers and other third-parties.  We do not respond to DNT signals.

 How Do We Protect Your Personal Data?

We maintain technical, physical, and administrative security measures designed to provide reasonable protection for your Personal Data against loss, misuse, unauthorised access, disclosure, and alteration.  The security measures include firewalls, data encryption, physical access controls to our data centres, and information access authorisation controls.  While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s) and Account/profile registration information and verifying that the Personal Data we maintain about you is accurate and current.  We are not responsible for protecting any Personal Data that we share with a third-party based on an account connection that you have authorised.

What Are Your Rights?

Subject to limitations set out in EEA data protection laws, you have certain rights in respect of your Personal Data.  In particular, you have a right of access, rectification, restriction, opposition, erasure and data portability. Please contact us if you wish to exercise these rights.  If you wish to complete an access request to all personal data that 2C2P holds on you, please note that photo identity will be required to prove your identity.

If you have an Account with any of our Services, you generally can review and edit Personal Data in the Account by logging in and updating the information directly.  We may use automated decision-making for decisions concerning credit with your consent or where necessary for the entry into or performance of a contract or authorised by Union or Member state law.

Contact Us

You may contact us if you have general questions or concerns about this Privacy Statement and supplemental notices or the way in which we handle your Personal Data. Please contact us at cs@orientalheritageherbalists.com

Yours faithfully,

Stherb Cosmetics International Co., Ltd.