Privacy policy

Beauty Selection Privacy Policy

Last updated: September 20th, 2024

This Privacy Policy describes how Beauty Selection (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from www.biodance.com (the "Site") or otherwise communicate with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully.

By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.




Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date, and take any other steps required by applicable law.




AI & Automated Technologies

Our AI Chatbot

We use artificial intelligence (AI) and machine learning technologies to provide
customer support through our website chatbot. This service helps us:

  • Answer product and order-related questions
  • Provide personalized beauty recommendations
  • Process customer inquiries 24/7
  • Improve our customer service capabilities

Data Collection Through Chatbot:

When you communicate with our Chatbot, we automatically collect:

  1. Conversation Content
    • Text of all messages you send
    • Date and time of interactions
    • Chat session duration
  2. Account & Identity Information
    • Your name and email address (if logged in or provided)
    • Account number/customer ID
    • Purchase history and browsing behavior
    • Product preferences and ratings
  3. Device & Technical Information
    • Device type and operating system
    • IP address
    • Browser type and version
    • Approximate geolocation

How We Use This Information:

Primary Purposes:

  • Responding to customer inquiries and providing support
  • Processing orders and transactions
  • Recording customer service interactions for quality assurance

Secondary Purposes:

  • Improving and training our Chatbot's accuracy and performance
  • Analyzing customer preferences and needs
  • Enhancing website user experience
  • Detecting fraud and ensuring security

Machine Learning & Analytics:

  • We use anonymized or aggregated chat data to train our AI models
  • We analyze patterns in customer inquiries to improve product offerings
  • Non-identifiable usage statistics are used for business analytics

Data Retention:

Customer inquiry information is collected for the purpose of handling customer inquiries and providing customer support and is retained until the purpose of collection has been fulfilled. However, where retention is required under applicable laws and regulations, such information will be retained for the period prescribed by the relevant laws and regulations and deleted thereafter.

Your Choices Regarding Chatbot:

  • Live Agent Alternative: You may request to chat with a human agent instead
  • Opt-Out of Recording: You can decline to have your conversation recorded
    (recording is required to use the Chatbot service)
  • Data Deletion: Request deletion of your chat history within [60 days]
    of interaction

Limitations & Disclaimers:

  • AI Limitations: The Chatbot may make errors or provide inaccurate information.
    Always verify recommendations with product labels or consult customer service.
  • Non-Binding Advice: Chatbot responses are informational only and do not
    constitute medical or professional advice
  • Data Accuracy: Ensure that information you provide is accurate, as it may
    be used to generate recommendations



How We Collect and Use Your Personal Information

To provide the Services, we collect personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

  • In addition to the specific uses set out below, we may use information we collect about you to:
  • Communicate with you

  • Provide the Services

  • Comply with any applicable legal obligations

  • Enforce any applicable terms of service

  • Protect or defend the Services, our rights, and the rights of our users or others

  • Service Providers &  Data Processors

    Transcosmos Malaysia Sdn. Bhd. - Customer Support Partner


    Overview
    • We partner with Transcosmos Malaysia Sdn. Bhd. ("TCMY"), headquartered in Kuala Lumpur, Malaysia, to provide comprehensive customer support services. TCMY operates our website chatbot, email support, and customer service functions.

    • Services Provided by TCMY
      • AI Chatbot operations and maintenance
        • Customer inquiry responses (email, chat, phone)
      • Order status tracking and fulfillment support
      • Returns and refund processing
      • Product recommendation and customer education
        • Quality assurance and chat monitoring
        • Data analytics for service improvement

    • Personal Information Shared with TCMY
        • When you interact with our customer support services, we share:

           1. Identity Information

        • Full name, email address, phone number
        • Home address and shipping address
        • Account credentials and ID

2. Transaction Information

        • Order history and purchase details
        • Product preferences and reviews
        • Payment method (last 4 digits only, not full card numbers)
        • Return and refund requests

3. Communication Information

        • Chat transcripts and email correspondence
        • Call recordings (where applicable)
        • Customer service interaction history

4. Technical Information

        • IP address and device identifiers
        • Browser and device information
        • Approximate geolocation

  • Data Security & Protection

    TCMY is contractually obligated to:

    Security Measures:

      • Encrypt data in transit and at rest
      • Implement firewalls and intrusion detection systems
      • Conduct regular security audits and assessments
      • Restrict access to personal information to authorized personnel only
      • Maintain business continuity and disaster recovery procedures

Compliance:

      • Comply with the Privacy Shield Framework or Standard Contractual Clauses for international data transfers
      • Adhere to applicable laws in Malaysia, US (CCPA, COPPA), EU (GDPR),
        and other jurisdictions where our customers are located
      • Maintain confidentiality obligations

Contractual Obligations:

      • Use your information ONLY for providing customer support services
      • Not sell, share, or disclose your information to unauthorized parties
      • Assist you in exercising your privacy rights (access, deletion, portability)
      • Notify us immediately of any unauthorized access or data breaches
      • Delete or return all customer data upon contract termination

Data Retention by TCMY

Customer inquiry information is collected for the purpose of handling customer inquiries and providing customer support and is retained until the purpose of collection has been fulfilled. However, where retention is required under applicable laws and regulations, such information will be retained for the period prescribed by the relevant laws and regulations and deleted thereafter.

Your Rights Regarding TCMY Processing

You can:

        • Request Access: Ask what personal information TCMY holds about you
        • Request Correction: Ensure information is accurate
        • Request Deletion: Request deletion of your records (subject to legal requirements
          like purchase history for accounting)
        • Request Restriction: Limit how your data is used by TCMY
        • File Complaints: Lodge complaints about TCMY's data handling with us or
          your local privacy authority

International Data Transfers

Your information is transferred to Malaysia and processed by TCMY. This international transfer is authorized under Data Processing Agreements that include:

        • Standard Contractual Clauses (EU-US/Malaysia)
        • Transfer Impact Assessment (for GDPR compliance)
        • Supplementary safeguards for data security

We ensure that transfers comply with all applicable cross-border data protection laws.

Supervision & Audits

We regularly audit TCMY's data protection practices through:

        • Annual compliance reviews
        • Security assessments
        • Customer complaint monitoring
        • Termination of services if standards are not met

Contact TCMY Directly

For questions about how TCMY handles your personal information:

        • Email: info@trans-cosmos.com.my
        • Mail: Transcosmos Malaysia Sdn. Bhd., Level 20, No. 211, Menara Shell, Jalan Tun Sambanthan, 50470 Kuala Lumpur
        • Phone: +60 3 2733 6790




What Personal Information We Collect

The types of personal information we obtain about you depend on how you interact with our Site and use our Services. When we use the term "personal information," we are referring to information that identifies, relates to, describes, or can be associated with you. The following sections describe the categories and specific types of personal information we collect.

Information We Collect Directly from You

Information that you directly submit to us through our Services may include:

  • Basic contact details: your name, email, and password

  • Order information: your name, billing address, shipping address, payment confirmation, email address, and phone number

  • Account information: username, password, security questions

  • Shopping information: items you view, add to your cart, or wishlist

  • Customer support information: any details you provide in communications with us (e.g., emails)

  • Notifications for events, new services, marketing, and event gifts: name, email, mobile number, address, date of birth, gender

Some features of the Services may require you to provide certain information. You may choose not to provide this information, but doing so may prevent you from using these features.

Information We Collect through Cookies

We automatically collect certain information about your interaction with the Services ("Usage Data") using cookies, pixels, and similar technologies. Usage Data may include device information, browser details, network connection, IP address, and other information regarding your use of the Services.

Information We Obtain from Third Parties

We may also obtain information about you from third parties, such as vendors and service providers, including:

  • Companies supporting our Site and Services (e.g., Shopify)

  • Payment processors (e.g., bank account, credit card details) to process your payments

Information obtained from third parties will be treated in accordance with this Privacy Policy.




How We Use Your Personal Information

We may use your personal information to:

  • Provide Products and Services: Process payments, fulfill orders, send account-related notifications, manage your account, arrange shipping, facilitate returns/exchanges, and allow you to post reviews.

  • Marketing and Advertising: Send marketing commFFunications, show advertisements, and tailor your experience.

  • Security and Fraud Prevention: Detect, investigate, or address fraudulent activity and ensure account security.

  • Communicate with You: Provide customer support and improve our services.




Cookies

We use cookies on our Site to power and improve our Services, run analytics, and personalize your experience. You may control cookies through browser settings, but removing or blocking cookies may affect your experience.

For specific details about Shopify-related cookies, visit Shopify's Cookie Policy.




How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties, including:

  • Vendors or service providers (e.g., IT management, payment processing, shipping)

  • Business and marketing partners (e.g., Shopify, Meta, TikTok for advertising)

  • Affiliates within our corporate group

  • As required by law (e.g., subpoenas or to protect legal rights)

  • In connection with business transactions (e.g., mergers, acquisitions)

  • With your consent or as directed by you

In the past 12 months, we have disclosed personal information in categories such as identifiers, commercial information, and network activity to vendors, service providers, marketing partners, and others as outlined above.




Destruction of Your Personal Information

We retain your information only for as long as necessary to fulfill legal obligations or business purposes. Once the purpose has been fulfilled, personal information is either securely deleted (for electronic data) or shredded (for paper documents).




User Generated Content

Any user-generated content (e.g., product reviews) you submit may be publicly visible. We do not control who accesses this content, and we are not responsible for any privacy risks associated with publicly available information.




Children's Data

We do not knowingly collect information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to have it removed.




Security and Retention of Your Information

While we strive to protect your personal information, no security measures are perfect. We retain information as necessary based on various factors such as legal obligations and contractual requirements.




Your Rights and Choices

Depending on where you live, you may have rights regarding your personal information, including:

  • Right to access or know the information we hold about you

  • Right to request deletion of your information

  • Right to correct inaccurate information

  • Right to opt out of sales, sharing, or targeted advertising

  • Right to limit or restrict the use of sensitive personal information

  • Right to withdraw consent where applicable

You may exercise these rights through our Site or by contacting us.




International Users

Your information may be transferred to and processed in countries outside your own, including the U.S. If transferred out of Europe, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses.




Contact

For questions, privacy-related concerns, or to exercise your rights, contact us at:

  • Phone: +82 1600-6586

  • Email: global_cs@beautyselection.co.kr

  • Address: Beautyselection, 22-5, Dosan-daero 100-gil, Gangnam-gu, Seoul, Republic of Korea