COPYRIGHT / PRIVACY

Copyright:

All copyright rights in the text, images, photographs, graphics, user interface, and other content provided on this website, and the selection, coordination, and arrangement of such content, are owned by TML Group, Inc. or its third-party licensors to the full extent provided under the United States Copyright Act and all international copyright laws. Under applicable copyright laws, you are prohibited from copying, reproducing, modifying, distributing, displaying, performing, or transmitting any of the contents of this website for any purposes. Nothing stated or implied on this website confers on you any license or right under any copyright of TML Group, Inc. or any third party.

Privacy:

TML Group, Inc. is committed to protecting the personal information that you share with us via our website. We strive to make sure your browsing and shopping experience is as enjoyable and informative as possible, and to ensure that any information you share with us remains secure. This statement discloses our website Privacy Policy, including: what information we collect from you, how we use that information, how that information may be shared, and your rights and choices regarding the information you provide to us.

What information we collect

We collect information so that we can provide the best possible experience when you make a purchase and/or contact us. Much of what you likely consider personal data is collected directly from you when you:

(1) make a purchase or create an account during a purchase (ex: billing information, including name, address, phone number, email address);
We never, at any time, collect, control, or save any payment information from you. All payment information is securely passed on to one of our payment processors, and the payment information you submit is collected and used by them in accordance with their terms and privacy policies.

(2) complete contact forms or request newsletters or other information from us (ex: name, email);

TML Group, Inc. may use session or persistent cookies. Session cookies are only stored on your computer or mobile device during your use of the Website and are automatically deleted when you close your web browser. Session cookies may be used to direct internet traffic to a server that is closer to you or to allow us to identify you as you move between pages of the Website.

Persistent cookies are stored as a file on your computer or mobile device that remains on your computer or mobile device even after you close your web browser. Persistent cookies can be read by the website that created the cookie when you revisit it again. TML Group, Inc may use persistent cookies to authenticate you when you return to the Website so that you do not have to login again or when it utilizes Google Analytics or other analytics providers, which is intended to track the origin and behavior of traffic to the Website.

How the Information is Used

Primarily your information is used in order for us to process and ship your purchases to you. It will also be used to provide customer service for any of your orders.

In addition, if you choose to share personal information with us via this website, we may use the information to improve site quality, contact you to provide information you requested, and send you emails regarding offers, promotions, specials, new products, and other related information. We use Klaviyo as our marketing automation platform “data processor”. The information you provide will be transferred to Klaviyo for processing in accordance with their Privacy Policy and Terms.

Our website uses Google Analytics and Cookies to improve our service, user experience and analyze how the website is used.

Google Analytics

Aside from the approximate location (IP address), the information collected by Google Analytics is mostly anonymous traffic data including browser information, device information, and language. The collected information is used to provide an overview of how people are accessing and using the website. Google operates independently from us and has its own privacy policy, which we suggest you review. Google may use the information collected through Google Analytics to evaluate users’ and visitors’ activity on the website. For more information, see Google Analytics Privacy and Data Sharing. You may opt out from the collection of navigation information about your visit to the Site by Google Analytics by using the Google Analytics Opt-out feature.

Cookies

A cookie is a small string of text that a web site can send to your web browser—often used to enhance your site browsing experience. Generally, cookies cannot retrieve personal data from your computer’s hard drive, nor can they pass on computer viruses, or record your email address. At your option, you may set your web browser to allow or disallow cookies, or to inform you when a cookie is being placed, so you always have a choice as to whether or not you want to receive a cookie. We may use ‘cookie’ technology to collect information about site usage, and to provide you with an enjoyable and efficient browsing experience. You can obtain more information about Cookies by visiting http://www.allaboutcookies.org

Information Sharing and data transfer

Except as described in this Policy, we will not intentionally disclose the personal data that we collect or store to third parties without your consent.

When we share data with third-party services that support our email marketing, we require that they use your information only for the purposes we’ve authorized per this policy, and that they protect your personal information.

Opting out from Marketing Communications

If you receive marketing emails from us, you may unsubscribe at any time by following the instructions contained within the email or by sending an email to the address provided in “How to Contact Us” below.

We may disclose Personal Data or other information if required to do so by law or in the good-faith belief that such action is necessary to comply with applicable laws, in response to a facially valid court order, judicial or other government subpoena or warrant, or to otherwise cooperate with law enforcement or other governmental agencies.

Under no circumstance will we sell or rent information collected on this web site to unrelated third parties.

TML Group, Inc. may use the following analytics providers, and you are directed to review their respective cookie policies and privacy notices:

DHL Express: https://www.dhl.com/global-en/home/footer/privacy-notice.html

Hulk Forms: https://www.hulkapps.com/pages/privacy-policy

JudgeMe Reviews: https://judge.me/privacy

Klaviyo: https://www.klaviyo.com/legal/privacy/privacy-notice

Pandectes GDPR Compliance: https://pandectes.io/privacy-policy/

Route: https://route.com/privacy

Shopify: https://www.shopify.com/legal/privacy

Shoutout: https://shoutout.io/privacy/

Signifyd: https://www.signifyd.com/privacy/

Webgility: https://www.webgility.com/privacy-policy

This website is using Tidio, a chat platform that connects users with the customer support of TML Group, Inc. We are collecting email addresses/names/phone numbers only with the consent of the users, in order to start the chat. The messages and data exchanged are stored within the Tidio application. For more information, please refer to their Privacy Policy.

TML Group, Inc is not making use of these messages or data other than to follow up on users’ registered issues or inquiries. Your personal data will be processed and transmitted in accordance with the General Data Protection Regulation (GDPR).

Childrens’ Online Privacy Protection Act Compliance

TML Group, Inc. complies with the requirements of COPPA (Childrens’ Online Privacy Protection Act). TML Group, Inc. does not knowingly collect any information from anyone under 13 years of age, and its products and services are to individuals 13 years of age or older.

If you believe that TML Group, Inc. has collected personal data from someone under the age of 13, please notify TML Group, Inc. immediately at contact@themakeuplight.com.

Rights of European Citizens

If you are a European citizen, you are entitled to certain rights regarding the protection of your Personally Identifiable Information and Personal Data, which are subject to limitations set forth in the EU GDPR and its applicable case law. These rights are:

The right to access and correct the information that TML Group, Inc processes about you;
The right to transfer all or a part of the information collected about you to another data controller, where it is technically feasible;
The right to the erasure of data concerning you, subject to TML Group Inc’s rights of retention under the law;
The right to object to the processing of Personally Identifiable Information and Personal Data where you dispute the accuracy of the data, the processing is not lawful, TML Group, Inc no longer needs the information for the purposes of processing, or you have raised an objection for personal reasons;
The right to revoke your consent to data processing;
The right to object to the processing of your Personally Identifiable Information and Personal Data for marketing purposes;
The right to object to the processing of Personally Identifiable Information and Personal Data for direct marketing or for personal reasons that arise from your particular situation; and
The right to file a complaint with a data protection authority.

To exercise these rights, you may either opt out of receiving communications from TML Group, Inc by unsubscribing to its e-mails or by sending an e-mail to contact@themakeuplight.com. You do not need to pay a fee to exercise these rights, however, TML Group, Inc reserves the right to charge a reasonable fee if your request is unreasonable or excessive. To confirm your request, we may need to request specific information from you as a security measure to ensure that personal data is not disclosed to an unauthorized third party. We will attempt to respond to all legitimate requests within thirty (30) days.

TML Group, Inc may disclose Personal Data or other information if equired to do so by law or in the good-faith belief that such action is necessary to comply with applicable laws, in response to a facially valid court order, judicial or other government subpoena or warrant, or to otherwise cooperate with law enforcement or other governmental agencies.

Under no circumstance will we sell or rent information collected on this web site to unrelated third parties.

California Residents

This privacy notice section for California residents supplements the information contained in Our Privacy Policy and it applies solely to all visitors, users, and others who reside in the State of California.

Categories of Personal Information Collected

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Consumer or Device. The following is a list of categories of personal information which we may collect or may have been collected from California residents within the last twelve (12) months.

Please note that the categories and examples provided in the list below are those defined in the CCPA. This does not mean that all examples of that category of personal information were in fact collected by Us, but reflects our good faith belief to the best of our knowledge that some of that information from the applicable category may be and may have been collected. For example, certain categories of personal information would only be collected if You provided such personal information directly to Us.

Category A: Identifiers.

Examples: A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, driver's license number, passport number, or other similar identifiers.

Collected: Yes.

Category B: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).

Examples: A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.

Collected: Yes.

Category C: Protected classification characteristics under California or federal law.

Examples: Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).

Collected: No.

Category D: Commercial information.

Examples: Records and history of products or services purchased or considered.

Collected: Yes.

Category E: Biometric information.

Examples: Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.

Collected: No.

Category F: Internet or other similar network activity.

Examples: Interaction with our Service or advertisement.

Collected: Yes.

Category G: Geolocation data.

Examples: Approximate physical location.

Collected: No.

Category H: Sensory data.

Examples: Audio, electronic, visual, thermal, olfactory, or similar information.

Collected: No.

Category I: Professional or employment-related information.

Examples: Current or past job history or performance evaluations.

Collected: No.

Category J: Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).

Examples: Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.

Collected: No.

Category K: Inferences drawn from other personal information.

Examples: Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Collected: No.

Under CCPA, personal information does not include:

Publicly available information from government records
Deidentified or aggregated consumer information
Information excluded from the CCPA's scope, such as:
Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data
Personal Information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994

Sources of Personal Information

We obtain the categories of personal information listed above from the following categories of sources:

Directly from You. For example, from the forms You complete on our Service, preferences You express or provide through our Service, or from Your purchases on our Service.
Indirectly from You. For example, from observing Your activity on our Service.
Automatically from You. For example, through cookies We or our Service Providers set on Your Device as You navigate through our Service.
From Service Providers. For example, third-party vendors to monitor and analyze the use of our Service, third-party vendors for payment processing, or other third-party vendors that We use to provide the Service to You.

Use of Personal Information for Business Purposes or Commercial Purposes

We may use or disclose personal information We collect for "business purposes" or "commercial purposes" (as defined under the CCPA), which may include the following examples:

To operate our Service and provide You with our Service.
To provide You with support and to respond to Your inquiries, including to investigate and address Your concerns and monitor and improve our Service.
To fulfill or meet the reason You provided the information. For example, if You share Your contact information to ask a question about our Service, We will use that personal information to respond to Your inquiry. If You provide Your personal information to purchase a product or service, We will use that information to process Your payment and facilitate delivery.
To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
As described to You when collecting Your personal information or as otherwise set forth in the CCPA.
For internal administrative and auditing purposes.
To detect security incidents and protect against malicious, deceptive, fraudulent or illegal activity, including, when necessary, to prosecute those responsible for such activities.

Please note that the examples provided above are illustrative and not intended to be exhaustive. For more details on how we use this information, please refer to the "Use of Your Personal Data" section.

If We decide to collect additional categories of personal information or use the personal information We collected for materially different, unrelated, or incompatible purposes We will update this Privacy Policy.

Disclosure of Personal Information for Business Purposes or Commercial Purposes

We may use or disclose and may have used or disclosed in the last twelve (12) months the following categories of personal information for business or commercial purposes:

Category A: Identifiers
Category B: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
Category D: Commercial information
Category F: Internet or other similar network activity

Please note that the categories listed above are those defined in the CCPA. This does not mean that all examples of that category of personal information were in fact disclosed, but reflects our good faith belief to the best of our knowledge that some of that information from the applicable category may be and may have been disclosed.

When We disclose personal information for a business purpose or a commercial purpose, We enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

Sale of Personal Information

As defined in the CCPA, "sell" and "sale" mean selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer's personal information by the business to a third party for valuable consideration. This means that We may have received some kind of benefit in return for sharing personal information, but not necessarily a monetary benefit.

Please note that the categories listed below are those defined in the CCPA. This does not mean that all examples of that category of personal information were in fact sold, but reflects our good faith belief to the best of our knowledge that some of that information from the applicable category may be and may have been shared for value in return.

We may sell and may have sold in the last twelve (12) months the following categories of personal information:

Category A: Identifiers
Category B: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
Category D: Commercial information
Category F: Internet or other similar network activity

Share of Personal Information

We may share Your personal information identified in the above categories with the following categories of third parties:

Service Providers
Payment processors
Our affiliates
Our business partners
Third party vendors to whom You or Your agents authorize Us to disclose Your personal information in connection with products or services We provide to You

Sale of Personal Information of Minors Under 16 Years of Age

We do not knowingly collect personal information from minors under the age of 16 through our Service, although certain third party websites that we link to may do so. These third-party websites have their own terms of use and privacy policies and we encourage parents and legal guardians to monitor their children's Internet usage and instruct their children to never provide information on other websites without their permission.

We do not sell the personal information of Consumers We actually know are less than 16 years of age, unless We receive affirmative authorization (the "right to opt-in") from either the Consumer who is between 13 and 16 years of age, or the parent or guardian of a Consumer less than 13 years of age. Consumers who opt-in to the sale of personal information may opt-out of future sales at any time. To exercise the right to opt-out, You (or Your authorized representative) may submit a request to Us by contacting Us.

If You have reason to believe that a child under the age of 13 (or 16) has provided Us with personal information, please contact Us with sufficient detail to enable Us to delete that information.

Your Rights under the CCPA

The CCPA provides California residents with specific rights regarding their personal information. If You are a resident of California, You have the following rights:

The right to notice. You have the right to be notified which categories of Personal Data are being collected and the purposes for which the Personal Data is being used.
The right to request. Under CCPA, You have the right to request that We disclose information to You about Our collection, use, sale, disclosure for business purposes and share of personal information. Once We receive and confirm Your request, We will disclose to You:

The categories of personal information We collected about You
The categories of sources for the personal information We collected about You
Our business or commercial purpose for collecting or selling that personal information
The categories of third parties with whom We share that personal information
The specific pieces of personal information We collected about You
If we sold Your personal information or disclosed Your personal information for a business purpose, We will disclose to You:

The categories of personal information categories sold
The categories of personal information categories disclosed

The right to say no to the sale of Personal Data (opt-out). You have the right to direct Us to not sell Your personal information. To submit an opt-out request please contact Us.
The right to delete Personal Data. You have the right to request the deletion of Your Personal Data, subject to certain exceptions. Once We receive and confirm Your request, We will delete (and direct Our Service Providers to delete) Your personal information from our records, unless an exception applies. We may deny Your deletion request if retaining the information is necessary for Us or Our Service Providers to:

Complete the transaction for which We collected the personal information, provide a good or service that You requested, take actions reasonably anticipated within the context of our ongoing business relationship with You, or otherwise perform our contract with You.
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
Debug products to identify and repair errors that impair existing intended functionality.
Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if You previously provided informed consent.
Enable solely internal uses that are reasonably aligned with consumer expectations based on Your relationship with Us.
Comply with a legal obligation.
Make other internal and lawful uses of that information that are compatible with the context in which You provided it.

The right not to be discriminated against. You have the right not to be discriminated against for exercising any of Your consumer's rights, including by:

Denying goods or services to You
Charging different prices or rates for goods or services, including the use of discounts or other benefits or imposing penalties
Providing a different level or quality of goods or services to You
Suggesting that You will receive a different price or rate for goods or services or a different level or quality of goods or services

Exercising Your CCPA Data Protection Rights

In order to exercise any of Your rights under the CCPA, and if You are a California resident, You can contact Us:

By visiting this page on our website: https://themakeuplight.com/pages/contact
By sending us an email: contact@themakeuplight.com

Only You, or a person registered with the California Secretary of State that You authorize to act on Your behalf, may make a verifiable request related to Your personal information.

Your request to Us must:

Provide sufficient information that allows Us to reasonably verify You are the person about whom We collected personal information or an authorized representative
Describe Your request with sufficient detail that allows Us to properly understand, evaluate, and respond to it

We cannot respond to Your request or provide You with the required information if we cannot:

Verify Your identity or authority to make the request
And confirm that the personal information relates to You
We will disclose and deliver the required information free of charge within 45 days of receiving Your verifiable request. The time period to provide the required information may be extended once by an additional 45 days when reasonably necessary and with prior notice.

Any disclosures We provide will only cover the 12-month period preceding the verifiable request's receipt.

For data portability requests, We will select a format to provide Your personal information that is readily usable and should allow You to transmit the information from one entity to another entity without hindrance.

Do Not Sell My Personal Information

You have the right to opt-out of the sale of Your personal information. Once We receive and confirm a verifiable consumer request from You, we will stop selling Your personal information. To exercise Your right to opt-out, please contact Us.

The Service Providers we partner with (for example, our analytics or advertising partners) may use technology on the Service that sells personal information as defined by the CCPA law. If you wish to opt out of the use of Your personal information for interest-based advertising purposes and these potential sales as defined under CCPA law, you may do so by following the instructions below.

Please note that any opt out is specific to the browser You use. You may need to opt out on every browser that You use.

Website

You can opt out of receiving ads that are personalized as served by our Service Providers by following our instructions presented on the Service:

The NAI's opt-out platform: http://www.networkadvertising.org/choices/
The EDAA's opt-out platform http://www.youronlinechoices.com/
The DAA's opt-out platform: http://optout.aboutads.info/?c=2&lang=EN

The opt out will place a cookie on Your computer that is unique to the browser You use to opt out. If you change browsers or delete the cookies saved by your browser, You will need to opt out again.

Mobile Devices

Your mobile device may give You the ability to opt out of the use of information about the apps You use in order to serve You ads that are targeted to Your interests:

"Opt out of Interest-Based Ads" or "Opt out of Ads Personalization" on Android devices
"Limit Ad Tracking" on iOS devices

You can also stop the collection of location information from Your mobile device by changing the preferences on Your mobile device.

Connecticut Residents

During the preceding calendar year, we did not control or process the personal data of at least 100,000 consumers or derive more than 25% of our gross revenue from the sale of personal data.

Nevada Residents

If you are a resident of Nevada, you may provide notice to us to limit the sale of your personal data to third parties for resale or licensing purposes. However, we do not sell your personal data for such use. To notify us that you wish to limit the sale of your personal data to third parties for resale or licensing purposes, you may send us an email to contact@themakeuplight.com with the subject line, “Nevada Do Not Sell Request,” along with your name, address, and user account information.

Virginia Residents

TML Group, Inc does not control or process the personal data of at least 100,000 Virginia residents or control or process the personal data of at least 25,000 Virginia residents and derive more than 50% of its gross revenue from the sale of personal data. For these reasons, the Virginia Consumer Data Protection Act (VCDPA) does not apply to TML Group, Inc’s collection and use of personal data.

Security Measures in Place

To better ensure your privacy and lessen the risk of loss, theft, alteration, or misuse of information, this web site is protected by an authorized personnel password and login procedure. We use SSL technology to encrypt data during transmission through public internet, and we also employ application-layer security features to further anonymize Personal Data.

However, no method of transmission over the Internet, or method of electronic storage, is completely guaranteed. We cannot completely ensure or warrant the security of any information you transmit to us, and you do so at your own risk. We also cannot guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards. If you believe your Personal Data has been compromised, please contact us as set forth in the “How to Contact Us” section.

Data Retention

We only retain the personal data collected from a user for as long as the user’s account is active or otherwise for a limited period of time as long as we need it to fulfill the purposes for which we have initially collected it, unless otherwise required by law.

Links

Our web site may contain links to other sites, which we feel may be helpful to consumers, our clients, or industry professionals and interested persons. We assume no responsibility for the privacy practices of any other sites, and we suggest that you read the privacy policies of all other sites that you visit. Our Privacy Policy applies to this website only.

Acceptance of Terms and Conditions

Because TML Group, inc. is a US-based company, your information will be collected and processed in the United States. The United States has its own laws governing data protection and government access to information. The rules that protect your personal information under United States law may be different than in your home country. If you make a purchase, you need to agree to our Terms and Conditions and this Privacy Policy. We reserve the right to modify this Privacy Policy at any time. You agree to review this policy from time to time. By continuing to access and use our web site after any posted policy change you agree to accept such changes.

Your Rights and Choices

We respect your privacy rights and provide you with reasonable access to the personal data that you may have provided through this site. If you wish to access or amend any other personal data we hold about you, or to request that we delete or transfer any information about you, you may contact us as shown in “How to Contact Us” below. At your request, we will have any reference to you deleted or blocked in our database.

You may update, correct, or delete your Account information at any time by accessing your Account settings page. Please note that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain all information you submit for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.

At any time, you may object to the processing of your personal data, on legitimate grounds, except if otherwise permitted by applicable law. If you believe your right to privacy granted by applicable data protection laws has been infringed upon, please contact us as shown below. You also have a right to lodge a complaint with data protection authorities.

How to Contact Us

To contact us at anytime regarding this privacy policy, email us at: contact@themakeuplight.com

(Updated August 2024.)