Privacy Policy
1. Introduction
This Privacy Policy ("Policy") describes how Olaybal ("we," "us," or "our") collects, uses, stores, shares, and protects information obtained from visitors and users ("you" or "your") of the website located at olaybal.com and all associated subdomains, pages, and services (collectively, the "Website").
By accessing, browsing, or otherwise using this Website, you acknowledge that you have read, understood, and agree to be bound by this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Website immediately.
We may update or modify this Policy from time to time. Material changes may be posted on this page and, where appropriate, communicated through other reasonable means. Your continued use of the Website after changes become effective may constitute acceptance of the revised Policy, to the extent permitted by applicable law. We encourage you to review this Policy periodically.
2. Information We Collect
2.1 Information You Provide Voluntarily
When you submit information through our contact form, AI chat assistant, or other interactive features, we may collect:
- Full name
- Email address
- Phone number (if provided)
- Company or organization name (if provided)
- Subject matter and message content of your inquiry
- Any other information you voluntarily include in communications
2.2 Technical and Device Data
When you visit the Website, we may automatically collect certain technical information, including but not limited to:
- IP address
- Browser type and version
- Operating system and device type
- Screen resolution and viewport dimensions
- Referring URL and exit pages
- Pages viewed, time spent on pages, and navigation paths
- Date and time of access
- Language preferences
2.3 Cookies and Analytics Data
We use cookies, web beacons, pixels, and similar tracking technologies to collect aggregated usage data, measure site performance, and improve the user experience. This may include session identifiers, browsing patterns, and interaction data.
2.4 Communication History
When you contact us — whether through the Website's contact form, the AI chat assistant, or via email — we may retain records of that communication, including metadata, message content, and any associated session information, for the purposes described in this Policy.
3. How We Collect Information
We collect information through the following methods:
- Direct submissions: Information you provide when filling out forms, sending messages, or interacting with the AI chat assistant.
- Automated technologies: Server logs, cookies, analytics scripts, and similar technologies that automatically record information when you access the Website.
- Third-party integrations: Data received from third-party service providers that assist in hosting, analytics, email delivery, content management, and other operational functions.
4. How We Use Information
We may use the information we collect for the following purposes:
- To respond to inquiries, requests, and messages submitted through the Website
- To provide, maintain, and improve the Website and its features
- To analyze usage trends and optimize content, performance, and user experience
- To detect, prevent, and address security incidents, fraud, abuse, and technical issues
- To communicate with you regarding your inquiry, follow-up correspondence, or related matters
- To comply with applicable laws, regulations, legal processes, or enforceable governmental requests
- To enforce our Terms and Conditions and protect our rights, property, and safety
- For internal analytics, business planning, and operational purposes
- To generate and send session summaries to our team for lead management and business development purposes
5. Legal Basis for Processing
Where applicable under data protection laws (including but not limited to the General Data Protection Regulation), we process your personal information on one or more of the following legal bases:
- Consent: You have given clear consent for us to process your personal data for a specific purpose.
- Legitimate interest: Processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, and responding to inquiries, provided these interests are not overridden by your rights.
- Contractual necessity: Processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract.
- Legal obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
6. Cookies and Tracking Technologies
This Website uses cookies and similar tracking technologies to enhance functionality, analyze performance, and gather usage statistics. Cookies are small data files placed on your device when you visit a website.
We may use the following types of cookies:
- Essential cookies: Required for core Website functionality, such as session management and security.
- Analytics cookies: Used to collect anonymous data about how visitors interact with the Website, including page views, traffic sources, and navigation patterns.
- Functional cookies: Used to remember preferences and enhance user experience.
You may configure your browser to refuse cookies or to alert you when cookies are being sent. Please note that disabling cookies may affect the functionality and features available to you on this Website.
7. Third-Party Services
We use third-party service providers to support the operation and functionality of this Website. These may include, but are not limited to:
- Hosting and infrastructure providers: For website hosting, deployment, and server infrastructure.
- Content management providers: For managing and delivering website content.
- Analytics and performance monitoring providers: For tracking website traffic, measuring performance, and understanding user behavior in aggregate.
- Communication and messaging providers: For delivering messages, notifications, and correspondence.
- AI and automation service providers: For powering automated and AI-assisted features on the Website.
- Embedded content and third-party integrations: The Website may embed or link to content from external platforms that may collect data independently.
These third-party services operate under their own privacy policies and terms of service. We do not control and are not responsible for the privacy practices, data collection, or security measures of any third-party service. We encourage you to review the privacy policies of any third-party service before interacting with them.
8. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
We may share or disclose your information in the following limited circumstances:
- Service providers: With trusted third-party vendors who assist us in operating the Website, processing data, or providing services on our behalf, subject to confidentiality obligations.
- Legal compliance: When required to comply with applicable law, regulation, legal process, subpoena, court order, or governmental request.
- Protection of rights: When necessary to protect our rights, property, safety, or the rights, property, or safety of others, including to enforce our Terms and Conditions.
- Business transfers: In connection with, or during negotiations of, any merger, acquisition, sale of assets, financing, or transfer of all or a portion of our business to another entity.
- With your consent: When you have given us explicit consent to share your information for a specified purpose.
9. Data Retention
We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, accounting, security, or reporting requirements. The retention period may vary depending on the context of the processing and our obligations.
When personal information is no longer required for its intended purpose, we will securely delete or anonymize it in accordance with our internal data management practices.
10. Data Security
We implement reasonable administrative, technical, and organizational safeguards designed to protect the information we collect against unauthorized access, alteration, disclosure, or destruction. These measures include, where appropriate, encryption, access controls, and secure development practices.
However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee its absolute security. You acknowledge that you provide information at your own risk.
11. International Data Transfers
Your information may be transferred to, stored in, and processed in countries other than the country in which you reside. Our service providers may operate in jurisdictions that may not provide the same level of data protection as your home jurisdiction.
By using this Website, you consent to the transfer of your information to such jurisdictions. Where required by applicable law, we take appropriate measures to ensure that your personal information receives an adequate level of protection.
12. Your Rights
Subject to applicable law, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete personal information
- Delete your personal information, subject to certain exceptions
- Object to the processing of your personal information for certain purposes
- Restrict the processing of your personal information in certain circumstances
- Withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out prior to withdrawal
- Data portability — request a copy of your personal information in a structured, commonly used, and machine-readable format
To exercise any of these rights, please contact us using the information provided in Section 16 below. We will respond to your request within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing your request.
13. Children's Privacy
This Website is not directed to, and we do not knowingly collect personal information from, children under the age of 13 (or the applicable minimum age in your jurisdiction). If we become aware that we have inadvertently collected personal information from a child under the applicable age, we will take reasonable steps to delete such information promptly.
If you believe that a child has provided us with personal information, please contact us immediately so that we can take appropriate action.
14. External Links
This Website may contain links to third-party websites, products, or services that are not owned or controlled by us. We are not responsible for the content, privacy policies, or practices of any third-party websites or services. The inclusion of any link does not imply endorsement, approval, or recommendation by us.
We encourage you to review the privacy policy and terms of service of any third-party website you visit through links on this Website. You access third-party websites entirely at your own risk.
15. Policy Updates
This Privacy Policy may be updated, revised, amended, or replaced from time to time at our discretion. When material changes are made, we may post the revised Policy on this page and, where appropriate, communicate such changes through other reasonable means.
Your continued use of the Website after any revised Policy becomes effective may constitute acceptance of the updated terms, to the extent permitted by applicable law. We encourage you to review this Policy periodically to stay informed about how we collect, use, and protect your information.
16. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
- Email: hello@olaybal.com
- Website: olaybal.com/contact