Who we are and how to contact us
We are Jazay Works LLC of Shreveport, Louisiana, USA and in the case of your direct use of our website or our services, we act as the data controller in accordance with the Louisiana Database Security Breach Notification Law (“Act 499”) and the General Data Protection Regulation (“GDPR”).
If you have any questions about the processing of your Personal Information by us or about data protection in general, you can reach us at email@example.com or phone on +1 318-582-2668.
How do we use your Personal Information?
All Personal Information that we obtain from you via the website will only be processed for the purposes of providing our services to you. This is done within the framework of the respective legal regulations mentioned above or only with your consent. In particular, we only process and collect Personal Information if:
In doing so, we collect your Personal Information in two ways, that is either directly when you for example volunteer it to us, or automatically for example when you use our website.
Further, we only collect and process Personal Information that is absolutely necessary and store only for the period of time required to achieve the respective purpose, unless a legal retention period (in particular Louisiana commercial and tax law) exists. Once the purpose has been achieved or the retention period has expired, the corresponding data is routinely deleted.
Personal Information you provide to us automatically
We also collect data on every access to our website. The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Log file information is stored for security reasons (e.g., for the clarification of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is necessary for evidentiary purposes is exempt from deletion until the respective incident is finally clarified. The legal basis for the data processing is our legitimate interest in providing an appealing website.
As part of processing on our behalf, Shopify International Ltdprovides hosting and website presentation services for us. All data collected in the course of using our website or in forms provided for this purpose in the online shop are processed on Shopify`s servers. In doing so Shopify processes content data, contract data, usage data, meta data of users, interested parties and visitors of our website and services, on the basis of our legitimate interests in an efficient and secure provision of the website and services in conjunction with the provision of contractual services and the conclusion of the contract for our services.
Personal Information you provide to us directly
If you contact us, we process the data that you share with us for the purpose of processing and handling your request. This may include your first name, last name, e-mail address, and, if applicable, other information, if you have provided it. The legal basis for the data processing is our obligation to fulfill the contract and/or to fulfill our pre-contractual obligations and/or our overriding legitimate interest in processing your request.
If you would like to order in our webshop, it is necessary for the conclusion of the contract that you provide your Personal Information (your first name, last name, e-mail address, andshipping and delivery address), as we need it to process your order. The legal basis for this is our obligation to fulfill the contract. This data is collected and processed by us and by companies affiliated with us. If we pass on data, we do so only for a specific purpose and only to contractually commissioned service providers or partner companies that support us, for example, in the payment and delivery of products and administration of the webshop. These partners and service providers may only use the information to fulfill their tasks on our behalf and for the processing of contracts, including when delivering goods or when paying for goods.
You can voluntarily create an account, through which we can store your data for future purchases. When you create an account under "My Account", the data you provide will be stored revocably. You can always delete all further data, including your user account, in the customer area.
If you make a purchase your payment will be processed via the payment service providers Shop Pay and Sezzle and payment will solely be processed through the payment system of Shop Pay and Sezzle. The legal basis for the provision of a payment system is the establishment and implementation of the user contract for the use of the service.
We collect Personal Information if you voluntarily provide it to us in the context of your order (for example when you use our Bring Your Own Bundles or Wig Spa service). Mandatory fields are marked as such, as we need the data in these cases to process the contract and we cannot process the order without you providing it. We use the data you provide to process the contract.
If you register for our e-mail newsletter, we will send you regular information about our offers (e-mail newsletter or SMS marketing). Mandatory information for sending the newsletter is only your e-mail address. When you register for the newsletter, we store your IP address as well as the date and time of registration in order to be able to track any possible misuse of your e-mail address at a later date. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending us a message. The legal basis is your consent.
Insofar as you have also given us your separate consent to process your data for marketing and advertising purposes, we are entitled to contact you for these purposes via the communication channels you have given your consent to.
You may give us your consent in a number of ways including by selecting a box on a form where we seek your permission to send you marketing information, or sometimes your consent is implied from your interactions or contractual relationship with us. Where your consent is implied, it is on the basis that you would have a reasonable expectation of receiving a marketing communication based on your interactions or contractual relationship with us.
Direct Marketing generally takes the form of e-mail but may also include other less traditional or emerging channels. These forms of contact will be managed by us, or by our contracted service providers. Every directly addressed marketing sent or made by us or on our behalf will include a means by which you may unsubscribe or opt out.
Disclosure to third parties
We will not disclose or otherwise distribute your Personal Information to third parties unless this:
However, we are entitled to outsource the processing of your Personal Information in whole or in part to external service providers acting as processors within the framework of the respective legal regulations mentioned above. External service providers support us, for example, in the technical operation and support of the website (see above), data management, the provision and performance of services, marketing, as well as the implementation and fulfillment of reporting obligations.
The service providers commissioned by us however will process your data exclusively in accordance with our instructions and we remain in accordance with the respective legal regulations mentioned above responsible for the protection of your data. Doing so we always make sure that service providers commissioned by us are carefully selected, follow strict contractual regulations, technical and organizational measures, and additional controls by us.
We may also disclose Personal Information to third parties if we are legally obliged to do so e.g., by court order or if this is necessary to support criminal or legal investigations or proceedings at home or abroad or to fulfill our legitimate interests.
Automated decision-making including profiling does not take place at Jazay Works.
Do Not Sell
We do not sell Personal Information to third parties.
Technical and organizational measures have been implemented by us to ensure the protection, security, and integrity of your Personal Information. Access to Personal Information is restricted to those who have a need to know and who have been trained to comply with confidentiality requirements.
Appropriate mechanisms include, for example, SSL encryption (so that data is unreadable by others) during the collection and transmission of data. Said data is used only for the purpose it was collected for and we assure you that we will do our utmost to ensure that your Personal Information is not altered or corrupted and is not accessed by unauthorized third parties.
Nonetheless, databases or data sets that include Personal Information may be breached inadvertently or through wrongful intrusion. Upon becoming aware of a data breach, we will notify all affected individuals whose Personal Information may have been compromised, and the notice will be accompanied by a description of the action being taken to reconcile any damage as a result of the data breach. Notices will be provided as expeditiously as possible after which the breach was discovered.
We are present on social media on the basis of our legitimate interest. If you contact us via social media platforms, you should note that the chat history can neither be deleted by us nor by you. And that, in accordance with the GDPR, the relevant social media platform and we are jointly responsible for the processing of your data and enter into a so-called joint controller agreement. A Joint Controller Agreement itself is very legalistic and lengthy, but in a nutshell, it clarifies how the jointly responsible parties will fulfill the obligations arising from data protection laws that are applicable to them. The legal basis for the use of the relevant social media platform is our legitimate interest, your consent or, in the case of a (pre) contractual relationship with us, the initiation of a contractual service, if any.
Your rights under data protection legislation
You can exercise the following rights:
Updating your information
If you believe that the information, we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion, or object to its processing, please do so by contacting us using firstname.lastname@example.org.
Access Request and updating your Personal Information
In the event that you wish to make a Data Subject Access Request, you may inform us in writing of the same using email@example.com.
We will respond to requests regarding access and correction as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days after receiving your request, we will inform you in writing within thirty (30) days of the time by which we will be able to respond to your request. If we are unable to provide you with any Personal Information or to make a correction requested by you, we shall generally inform you of the reasons why we are unable to do so (except where we are not required to do so under the respective legal regulations mentioned above).
Does this policy change?
Who should I contact for more information?