Obagi.ME.com
- Privacy and Security Statement
This Privacy and Security Statement ("Privacy Statement") applies
to information collected by Obagi-ME.com ("Obagi-ME"). Obagi-ME
is committed to protecting the privacy of its Customers ("Customers").
We have created the following Privacy Statement to give you an overview
of the type of information we collect, how the information is used and
how the information is safeguarded.
Information is collected
from Customers through the use of the Obagi-ME site. This Privacy Statement
applies only to information collected by Obagi-ME.com. By visiting Obagi-ME,
you are accepting the practices described in this Privacy and Security
Notice.
A.
WHAT INFORMATION IS COLLECTED?
In order to provide
you with products of interest to you and to continually improve your shopping
experience on Obagi-ME.com, we collect information about our Customers
in a variety of ways. In some cases, Obagi-ME asks Customers directly
for information in order for them to purchase products or use our services,
and, in other cases, information is collected automatically as Customers
are using our Web Site. You may choose not to provide certain information,
but then you may not be able to purchase products or take advantage of
the features we offer. The following is a summary of the kinds of information
Obagi-ME collects:
1. Active Collection:
Obagi-ME is the sole owner of information collected on Obagi-ME.com. Obagi-ME
collects certain information either voluntarily or as required in order
to register with Obagi-ME or use certain Obagi-ME Services. Such information
may include:
-
Order form. Contact
information, such as name, mailing address, email address and phone
number.
-
Shipping or transaction
information, such as billing address and financial information (credit
card number and expiration date) if you choose to purchase products
offered for sale on the Obagi-ME Web site. If we have trouble processing
an order, the information is used to contact the Customer.
-
Demographic information
such as zip code.
-
Information you
enter in forms and optional surveys or contests, such as name and
email address.
-
Information provided
in connection with discussions on forums, bulletin boards, in chat
rooms, and in messaging or other interactive services.
-
Information provided
in email requests and communications.
-
Information from
other sources. In order to personalize our service by providing better
product recommendations or special offers we may think will interest
you, we may receive information about you from other sources and add
it to our account information. We also sometimes receive updated delivery
and address information from our shippers or other sources so that
we can correct our records and deliver your next purchase or communication
more easily.
2. Passive Collection
Some information is
collected automatically while you are using Obagi-ME.com. It is important
to note that Obagi-ME must store this information in order to ensure its
Customers receive optimal service while using Obagi-ME services. This
type of information may include:
a. Log Files: Log
files information, such as IP addresses, browser type, domain names, number
of page views, login frequency, page or section accesses. Log files are
used to track member usage and engagement and to gauge the effectiveness
of our different services. We use your IP address to help diagnose problems
with our server and to administer the Web site.
b. Cookies, which
are electronic pieces of information used to keep track of information
such as Customer passwords. Obagi-ME does not use cookies.
c. Clear Gifs (Web
Beacons/Web Bugs). We employ a software technology called clear gifs (a.k.a.
Web Beacons/Web Bugs), that helps us better manage content on our site
by informing us what content is effective. Clear gifs are tiny graphics
with a unique identifier, similar in function to cookies, and are used
to track the online movements of Web users. The main difference between
the two is that clear gifs are invisible on the page and are much smaller,
about the size of the period at the end of this sentence.
B.
HOW DOES Obagi-ME USE THE INFORMATION COLLECTED?
Obagi-ME endeavors
to strictly adhere to state, local and federal laws regarding the preservation
and archiving of information collected. In addition to the uses described
elsewhere in this Privacy Statement, Obagi-ME may use the information
you provide in the following ways:
-
To contact you
about our products and services or about your use of our Web site.
For example, Customers may receive welcome kits, email newsletters,
and customized content, and they may receive updates when Obagi-ME
has new product features or enhancements or other news to relay to
our Customers.
-
For marketing
and promotional purposes.
-
For catalog mailings
if you request to receive a catalog.
-
Obagi-ME does
not use individually identifiable health information that may be collected
in our discussion groups for marketing purposes.
-
To respond to
your comments or requests or to request feedback regarding our products
or services.
-
For billing purposes,
to facilitate transactions and to fill Customer orders in connection
with purchases of products offered by Obagi-ME.
-
For the specific
purpose for which the information was provided.
C.
HOW DOES Obagi-ME COMMUNICATE WITH CUSTOMERS?
Obagi-ME would like
to communicate with its Customers when we have new products or services
we feel are of special interest to you. Unless you opt-out of communications
from Obagi-ME, you may receive the following types of communications:
-
Special Offers
and Updates. We will send Obagi-ME Customers a welcome email to verify
your participation in the Obagi-ME products and services we offer.
Established Customers will occasionally receive information on products,
services and special deals or coupons. Out of respect for the privacy
of our Customers, we present the option to not receive these types
of communications. Please see the Choice/Opt-out section.
-
Customer Service.
We communicate with Customers on a regular basis to provide requested
services and in regards to issues relating to their account, we reply
via email or phone, in accordance with the Customer's wishes.
-
Refer a friend.
If a Customer elects to use our referral service for informing a friend
about our site, we ask them for the friend's name and email address.
Obagi-ME will automatically send the friend a one-time email inviting
them to visit the site. Obagi-ME stores this information for the sole
purpose of sending this email and tracking the success of our referral
program. The friend may contact Obagi-ME to request the removal of
this information from our database.
D.
WHAT INFORMATION IS SHARED WITH THIRD PARTIES?
Information about
our customers is an important part of our business. Obagi-ME does note
disclose information you provide to us.
E.
SECURITY
The following outlines
different types of security procedures Obagi-ME has in place to protect
the loss, misuse or alteration of the information collected.
1. Identification
and Authentication
Access to the data
is assigned to specific individuals in order to maintain strict control
over access. We do not grant general access to data within Obagi-ME and,
except as set forth in this Privacy Statement, access to data is not granted
to parties outside Obagi-ME.
2. Authorization and
Access Control
Only authorized personnel
have access to restricted data. Access to sensitive data such as individually
identifiable health information is revoked in a timely manner for employees
who change function or resign. Nondisclosure Agreements are in place with
contractors and third parties having access to individually identifiable
health information.
3. Data Confidentiality
Obagi-ME uses 128-bit
encryption and a security firewall to protect the confidentiality of customer
information.
4. Data Management
and Monitoring
All employees of Obagi-ME
are informed of the company's security policies. Obagi-ME's new hires
are briefed on security and privacy issues and the security policies are
also covered in the employee manual. Obagi-ME departments review security
measures at regular department meetings.
Security and privacy
threats, operational and technical vulnerabilities have been assessed
and countermeasures have been taken to reduce these vulnerabilities. New
threats are consistently evaluated and measures are taken to prevent them
from occurring at Obagi-ME. In addition, a security firewall screens access
events and non-valid attempts are denied and logged. More stringent countermeasures
are being implemented by Obagi-ME's security administrator on a continuous
basis.
F.
LINKING
Obagi-ME may offer
links to other Web sites. Please be aware that Obagi-ME is not responsible
for the privacy practices of such linked sites, including sites of our
partners. We encourage our Customers to be aware of this when they leave
Obagi-ME.com and to read the privacy statements of each and every Web
site that collects personally identifiable information. This privacy statement
applies solely to information collected by Obagi-ME.
G.
SURVEYS AND CONTESTS
From time to time,
our site requests information from Customers via surveys or contests.
Participation in these surveys or contests is completely voluntary and
the user therefore has a choice whether or not to disclose this information.
The requested information typically includes contact information (such
as name and shipping address) and demographic information (zip code) or
your name and email address. Contact information will be used to notify
the winners and award prizes. Anonymous survey information will be used
for purposes of monitoring or improving the use and satisfaction of our
site
H.
CHILDREN
This Site is not directed
at children.. Obagi-ME.com does not sell products for purchase by children.
Visitors and Authorized Customers are required to be eighteen years or
older.
I.
CHOICE/OPT OUT
Obagi-ME gives
Customers the ability to opt-out of receiving future communications
from Obagi-ME by replying to Unsubscribe in the subject line via email
at info @ obagi-me.com. For example, Customers may wish to
opt-out of having their information used for information directly
related to Obagi-ME's products and services.
J.
ACCESSING AND CHANGING INFORMATION
To assure that the
information collected is accurate and up-to-date, Obagi-ME allows Customers
to edit and update their information through the Obagi-ME.com Web site.
The Web site allows Customers to access and correct any inaccuracies in
the information submitted online. Customers may also email Obagi-ME or
call Customer Services at 877.525.2830.
K.
NOTIFICATION OF CHANGES
Obagi-ME reserves
the right to make changes to the Privacy Statement at any time. If we
plan to make significant changes to any of our privacy policies or practices
with respect to how we use personally identifiable information, we will
post those changes to this Web site 30 days before they take effect. Obagi-ME
will post those changes on our Sites so our Customers are always aware
of what information we collect, how we use it, and under what circumstances,
if any, we disclose it. Please review our Privacy Statement periodically
to see recent changes.
L.
ADDRESSING PRIVACY & SECURITY CONCERNS
If you have any questions
about this Privacy Statement, the practices or your dealings with the
Sites, or wish to receive a printed version of this Privacy Statement,
please contact us:
Obagi-ME.com
105 W. Walnut Street
Gardena, CA 90248
E-mail: info @ obagi-me.com
Fax: 310.516.9661
