Privacy Policy

Last Updated: January 2023

Introduction

1. We are committed to safeguarding the privacy of our website visitors, or when you interact with us in any form, including third-party applications controlled by Legs Heaven.
2. This privacy policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data. Hence, it governs our data collection, processing, and usage practices. It also describes your choices regarding use, access, and correction of your personal information. By using our website or our applications, you consent to the data practices described in this privacy policy. If you do not agree with the data practices described in this privacy policy, you should not use our website or our applications.
3. We may change this privacy policy from time to time. Whenever we make changes to this privacy policy, the changes are effective 30 days after we post the revised privacy policy (as indicated by revising the date at the top of our privacy policy). We encourage you to review our privacy policy whenever you access our services to stay informed about our information practices and the ways you can help protect your privacy.
4. We will ask you to consent to our use of cookies in accordance with the terms of this policy when you first visit our website.
5. In this policy, “we”, “us” and “our” refer to Legs Heaven.

How we use your personal data

1. This section explains what categories of data that we process, the sources we obtain data from, the purposes for which we process the personal data, how we share your personal data, and how we allow for third-party analytics.
2. We collect information you provide directly to us. For example, we collect information when you participate in any interactive features of our services, fill out a form, request customer support, provide any contact or identifying information or otherwise communicate with us. The types of information we may collect include your name, email address, profile picture, phone number, postal address, credit card information and other contact or identifying information you choose to provide. The legal basis for this processing is consent.
3. When you access or use our services, we automatically collect information about you. The legal basis for this processing is our legitimate interests, namely monitoring and improving our website and services. The information we collect includes: 
   Log Information: We log information about your use of our services, including the type of browser you use, access times, pages viewed, your IP address and the page you visited before navigating to our services. 
   Device Information: We collect information about the device you use to access our services, including the hardware model, and operating system and version. 
   Location Information: We may collect information about the location of your device each time you access or use one of our mobile applications or otherwise consent to the collection of this information. 
   Information Collected by Cookies and Other Tracking Technologies: We use various technologies to collect information, and this may include sending cookies to your device. Cookies are small data files stored on your hard drive or in your device memory that helps us improve our services and your experience, see which areas and features of our services are popular, and count visits. We may also collect information using web beacons (also known as “tracking pixels”). Web beacons are electronic images that may be used in our services or emails and to track count visits or understand usage and campaign effectiveness. Their purpose is also to analyse the use and performance of our website and applications with the purpose of being able to provide the best possible experience and communication to our visitors and our users.
4. In order to provide you with access to the website, or to provide you with better service in general, we may combine information obtained from other sources (for example, a third-party service whose application you have authorised or used to sign in) and combine that with information we collect through our services. The legal basis for this processing is consent.
5. We use information about you for various purposes. The legal basis for this processing is our legitimate interests, namely monitoring and improving our website and services. The purposes are including: 
   Provide, maintain and improve our services; Provide services you request, process transactions and to send you related information; 
   Send you technical notices, updates, security alerts and support and administrative messages; 
   Respond to your comments, questions and requests and provide customer service; 
   Communicate with you through email and text message about news and information related to our service; Monitor and analyse trends, usage and activities in connection with our services; 
   Personalise and improve our services.
6. We may share personal information about you. The legal basis for this processing is our legitimate interests, namely monitoring and improving our website and services. The information we may share about you is as follows: 
   With third party vendors and other service providers who need access to your information to carry out work on our behalf, such as third-party applications etc. 
   If we believe disclosure is reasonably necessary to comply with any applicable law, regulation, legal process or governmental request; To enforce applicable user agreements or policies, to protect us, our users or the public from harm or illegal activities; 
   In connection with any merger, sale of Legs Heaven assets, financing or acquisition of all or a portion of our business to another company. 
   If we notify you through our services (or in our privacy policy) that the information you provide will be shared in a particular manner and you provide such information. 
   We may also share aggregated or anonymous information that does not directly identify you.
7. We may allow third parties to provide analytics services. These third parties may use cookies, web beacons and other technologies to collect information about your use of the services and other websites, including your IP address, web browser, pages viewed, time spent on pages, links clicked and conversion information. This information may be used by us and third parties to, among other things, analyse and track data, determine the popularity of certain content and other websites and better understand your online activity. The legal basis for this processing is our legitimate interests, namely monitoring and improving our website and services.

Providing your personal data to others

1. We may provide your personal data to other members of our group of companies if it’s reasonably necessary.
2. We may provide your personal data to our professional advisors for the purpose of obtaining advice etc. if it’s reasonably necessary.
3. We may provide your personal data to our suppliers and subcontractors if it’s reasonably necessary.
4. We may provide your personal data to be handled by our payment services providers for the purpose of processing your payment.

International transfer of your personal data

1. Our office and employees are physically located in Poland. According to the European Commission free movement of data is not restricted or prohibited within EU/EEA.
2. Our subcontractors and third-party service providers are in the following countries, for which, according to the European Commission, an “adequacy decision” has been made with respect to this country and transfers of data to this country will be protected by appropriate safeguards; 
   United States of America 
   Canada 

How long we will store your data

1. We will not keep personal data for longer than necessary for the purposes that we are storing the data.
2. The personal data that we store to fulfil our obligations to users of our applications will be retained for as long as determined necessary. We will deem it necessary to retain the data if the data is necessary for us to be able to provide and deliver the services that our users expect of us.
3. This also includes the data that our visitors provide us through signup forms, registration forms, contact forms and messages via email, phone, or other means of communication.
4. We will stop processing your data for marketing purposes when you have actively rejected further marketing communications from us.
5. We will delete your data if you have requested us to do so.

Security

1. We take reasonable measures to help protect personal information from loss, theft, misuse and unauthorised access, disclosure, alteration, and destruction.

Cookies

1. Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject cookies, either in your browser or our cookie banner, this could affect the availability and functionality of our services.
2. Cookies do not typically contain information that specifically identify a user personally, but it can store personal information about you and that information can be linked to any other information that is stored about you, if the information is contained from cookies.
3. We use cookies in the following instances: 
   To identify you as a visitor on our website with the purpose of providing you with relevant information. 
   To determine if you are logged into our application with the purpose of providing our services to you through our application. In security instances where cookies can help us determine if there is fraudulent use of login credentials and to protect our website and services provided through our applications. 
   To identify you as a user that have previously interacted with us online and have opted-in to receive promotional communication from us with the purpose of providing you with relevant and necessary information. 
   To analyse the use and performance of our website and applications with the purpose of being able to provide the best possible experience to our visitors and our users. 
   To store the consent given to us from visitors and users of our website and applications with the purpose of providing you with the service and functionality that you request from us as a visitor or user.

Opt-in / Opt-out

1. If you sign up on our website to hear more about our services, we will ensure that you have an easy to understand opt-in solution, where you can choose to opt-in to receive communication.
2. If you opt-in to receive communication from us, we will make it easy for you to opt-out again by simple letting us know that you no longer wish to receive any further communication from us.
3. If you choose to opt-out of receiving communication from us, and this will hinder us in providing you the service that you have requested from us, and/or paid for to us, we will let you know that we will no longer be able to provide you with our services.
4. If you are a visitor of our website and have chosen to opt-in to receive promotional emails from us, you will furthermore could opt-out of receiving any promotional emails from us by following the instructions in those emails that we send you with promotional emails.
5. If you have created an account on our website, you have the right to delete your account and personal data at the account page. If you choose to delete your account you will no longer access the services that come with having an account, for instance collecting points and receiving personalised communication.
6. You may instruct us in not processing your personal data for any marketing purposes.

Your rights

1. You have the right to instruct us to provide you with the information that we have available in our possession about you.
2. If permitted by law, we may withhold personal information about you if you request us to provide you with all the information we have available about you.
3. Under the data protection law, you have the right of access as described here https://gdpr-info.eu/art-15-gdpr/
4. Under the data protection law, you have the right to rectification as described here https://gdpr-info.eu/art-16-gdpr/
5. Under the data protection law, you have the right to erasure as described here https://gdpr-info.eu/art-17-gdpr/
6. Under the data protection law, you have the right to restriction of processing as described here https://gdpr-info.eu/art-18-gdpr/
7. Under the data protection law, you have the right to complain to a supervisory authority as described here https://gdpr-info.eu/art-19-gdpr/
8. Under the data protection law, you have the right to data portability as described here https://gdpr-info.eu/art-20-gdpr/
9. Under the data protection law, you have the right to object as described here https://gdpr-info.eu/art-21-gdpr/

Our details

1. Our website and applications are owned and operated by Legs Heaven
2. Our company is registered with the authorities in Poland.
3. Our company is physically located at Konstruktorska 9/19, 02-673 Warsaw, Poland which also serves as our primary place of business.
4. You can contact us in the following ways: 
   By post to our address. 
   By using our signup, contact or registration form on our website. 
   By email on hello@legsheaven.com.

Contact

1. hello@legsheaven.com
2. Legs Heaven 
   Konstruktorska 9/19  
   02-673 Warsaw 
   Poland