Privacy policy

SECTION 1: PRIVACY POLICY

UPDATED: AUGUST 19, 2025

This brand Palma Cosmetics is owned and operated by Bailey Enterprises, LLC. When we say “Us”, “Our”, or “We”, We are referring to Bailey Enterprises, LLC. This Summary Privacy Notice supplements Our Privacy Notice by providing key information to you about how We collect and use personal information about you. 

Our detailed Privacy Policy, which describes the types of Personal Information We collect from You directly, from your interactions with Us (on Our websites, mobile apps, social sites (“Social Sites”) and digital tools (collectively, “Sites”) and advertising), and from third parties; how We use it; how We protect it; and Your rights as Our consumer. 

This Privacy Policy may be changed from time to time. We will post changes to the Site, and we reserve the right to make changes without prior individual notice. Such changes are effective upon posting. Please review this Privacy Policy often so you are up to date on current policies, including our policies concerning the gathering and use of information that may be collected on our Site. You are responsible for making sure you are aware of the provisions of Palma Cosmetics most current Privacy Policy. You can tell when the Privacy Policy was last modified by checking the “updated” date.

If Our brand is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.


SECTION 2: DISCLOSURE

We may disclose your personal information if we are required by law to do so or if you violate our Terms of Use.


 SECTION 3: USE OF WEBSITE BY CHILDREN

You must be 18 years of age to use the Site. Palma Cosmetics does not knowingly collect or maintain information from children under the legal age of majority in your jurisdiction of residence, and no part of the Site is designed with the intention of attracting such children. 




SECTION 4: CHANGES TO PRIVACY POLICY

You are responsible for making sure you are aware of the provisions of Palma Cosmetics most current Privacy Policy. We reserve the right to modify this privacy policy at any time. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

 

SECTION 5: STATE PRIVACY LAWS

Bailey Enterprises, LLC and our brands are committed to consumer privacy. Residents of certain States have additional rights under applicable privacy laws. Your rights under the California Privacy Rights Act or the Virginia Consumer Data Protection Act. If You are a resident of California or Virginia, please review the information below. 


A. California Privacy Rights

Updated on March 13, 2024

The California Consumer Privacy Act of 2018 (CCPA) gives consumers more control over the personal information that businesses collect about them and the CCPA regulations provide guidance on how to implement the law. This landmark law secures new privacy rights for California consumers, including:

  • The right to know about the personal information a business collects about them and how it is used and shared;
  • The  right to delete personal information collected from them (with some exceptions);
  • The right to opt-out of the sale or sharing of their personal information including via the GPC;
  • The right to non-discrimination for exercising their CCPA rights.

In November of 2020, California voters approved Proposition 24, the CPRA which amended the CCPA and added new additional privacy protections that began on January 1, 2023. As of January 1, 2023, consumers have new rights in addition to those above, such as:

  • The right to correct inaccurate personal information that a business has about them; and
  • The right to limit the use and disclosure of sensitive personal information collected about them.

Businesses that are subject to the CCPA have several responsibilities, including responding to consumer requests to exercise these rights and giving consumers certain notices explaining their privacy practices. The CCPA applies to many businesses, including data brokers.

CPRA amends the CCPA; it does not create a separate, new law. As a result, our office typically refers to the law as “CCPA” or “CCPA, as amended.”

For more information on the 

California Consumer Privacy Act (CCPA) 

(https://oag.ca.gov/privacy/ccpa)

 

B. Virginia Privacy Rights

The Virginia Consumer Data Protection Act (“VCDPA”) went into effect on January 1, 2023. This new law provides Virginia residents certain rights for personal data collected by businesses under conditions outlined in the law. The following information on this page is intended for informational purposes only and should not be construed as legal advice for Virginia residents seeking to protect their data interests under the VCDPA. 

The entire Act can be read here: https://law.lis.virginia.gov/vacodefull/title59.1/chapter53/. What is personal data?

  •  “Personal data” means any information that is linked or reasonably linkable to a Virginia resident. “Personal data” does not include publicly available information such as public records held by the government. What data is exempt from the VCDPA?
  •  The following types of data are not covered by the VCDPA: protected health information under the Health Insurance Portability and Accountability Act (“HIPAA”), health records, patient identifying information, and other sets of data identified in Va. Code § 59.1-576 that relate to compliance with various federal laws. What rights do Virginia consumers have with their personal data? 
  • The VCDPA allows for consumers to request that the controller of their personal data: o Confirm if the controller is actually processing their personal data. o Correct inaccuracies in the consumer’s personal data that is collected by the controller. o Delete personal data provided by or obtained about the consumer. o Obtain copies of the personal data collected by the controller.
  • Opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or further profiling. Where can consumers submit requests regarding data held by businesses? 
  • Consumers can submit requests to businesses that target Virginia consumers for products or services and also do one of the following: o Control or process personal data of at least 100,000 consumers. o Control or process personal data of at least 25,000 consumers and derive over 50% of gross revenue from the sale of personal data.
  •  Consumers cannot submit requests relating to data under the VCDPA to state and local governments, nonprofit organizations, institutions of higher education, and any other entity listed under Va. Code § 59.1-576(B). What should Virginia residents do to ensure that a business honors their rights regarding their personal data? 
  • Virginia consumers can invoke their rights by submitting a request to the controller of their personal data specifying the rights they want to invoke. Controllers are required to provide consumers with a reasonably accessible, clear, and meaningful privacy notice for exercising their rights. Information provided in response to a consumer request shall be provided by the controller free of charge, up to twice annually per consumer.
  •  The controller must respond within 45 days of the receipt of the request submitted by the consumer. The controller can request an extension of an additional 45 days to respond. 
  • The controller will either grant the consumer’s request or decline it by providing the justification for declining it. The controller can also request that additional information be provided by the consumer in order to both authenticate the consumer and the consumer’s request. • If the request invoking the consumer’s rights is declined, the controller must provide clear instructions for appealing the decision. Within 60 days of receipt of an appeal, the controller must provide in writing an explanation of the reasons for its decision.
  •  If the appeal is denied by the controller, the controller must provide the consumer with an online mechanism or other method through which the consumer may contact the Attorney General to submit a complaint. What can Virginia consumers do to protect their sensitive data? • Sensitive data is also considered as personal data under the VCDPA, but it is subject to additional requirements. For example, controllers cannot process sensitive data concerning a consumer without obtaining the consumer’s consent. 
  •  The VCDPA considers the following to be sensitive data: 
    • A person’s racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, or citizenship or immigration status. 
    •  The processing of genetic or biometric data for the purposes of uniquely identifying that person. 
    • The personal data collected from a known child, which is defined as someone younger than 13. 
    •  Precise geolocation data. 

For more information on the Virginia Consumer Data Protection Act (VCDPA). 

(https://www.oag.state.va.us/consumer-protection/files/tips-and-info/Virginia-Consumer-Data-Protection-Act-Summary-2-2-23.pdf)


SECTION 6: WHAT DO WE DO WITH YOUR INFORMATION

At times, we may collect your Personal Information. When you purchase something from our Site, as part of the buying and selling process, you may provide your delivery and billing address, credit card type, credit card number and credit card expiration date. We will also collect details of your past orders.

When you register for portions of the Site that may require registration, enter a sweepstakes, contest, complete a survey, subscribe, send us an email, and email marketing we may send you emails about our store, new products and other updates.

When you visit the Site, engage with Palma Cosmetics content or with us digitally, we may collect your broad geographic location (e.g. country or city-level location) from your device.

When using a social media log in or use functionality such as “like” or “share” buttons, that social media site may pass information to us, including: the user id for that third party site, the name, email address and location associated with the user id and any other information permitted under the privacy policy for that website.

Your images and photographs may be used if you enter a competition, sweepstakes, contest, complete a survey, subscribe, send us an email on the website or via social media when you tag us you may provide a photograph of yourself, or if you engage with us via technologies or other tools and Social Sites (“Social Sites”).

When you access the Site, Palma Cosmetics will automatically receive some information about your use of the service. The type of information that is automatically collected by us includes, but is not limited to, such things as the date and time of access of the Site, the anonymized internet protocol (IP) address of the computer that you are using, the domain and host from which you access the internet, your browser software and operating system, the referring website address, and the specific activities you are engaged in while visiting the Site. 

SECTION 7: CONSENT

When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.

If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to opt-out.

When you submit your Personal Information to us you are consenting to the collection, handling, use and disclosure of your Personal Information for the purposes of responding and/or as otherwise identified or apparent at the time of collection and as otherwise described in this Privacy Policy.


SECTION 8: WITHDRAW CONSENT

If after you consent and you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us via email at: palmacosmeticscustomercare@gmail.com


SECTION 9: SHOPIFY INC.

Our store is hosted on Shopify Inc. (“Shopify”) They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify’s data storage, databases and the general Shopify application. All stores hosted by Shopify are certified Level 1 PCI DSS compliant.

You should also review Shopify’s Policies.

Shopify's Terms of Service  (https://www.shopify.com/legal/terms)

Shopify Privacy Statement (https://www.shopify.com/legal/privacy)

Shopify Compliance Report (https://www.shopify.com/legal/compliance/reports)


SECTION 10: LINKS TO OTHER WEBSITES AND SERVICES

The Palma Cosmetics Site may contain links to other websites that are not controlled and/or maintained by Us. Please be aware that these other websites may have different privacy policies. Please review the privacy policies of such other websites. Palma Cosmetics is not responsible for the contents or privacy practices of any linked site or any link on a linked site.

Any use by you of optional tools offered through these sites is entirely at your own risk and discretion. You are responsible for being familiar with terms of service and privacy practices which these tools are provided by third-party provider(s).

Our Site also includes social media features, such as Facebook, X, Instagram, Pinterest, or other Social Sites (“Social Sites”). These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our Site. Your interactions with these features are governed by the privacy policy of the company providing the feature.

We may at times offer new services and/or features through the website including new tools and resources. These new features and/or services shall also be subject to our Terms of Use.

You acknowledge and agree that Palma Cosmetics has no liability relating to your use of optional third-party tools. 


SECTION 11: THIRD PARTY SERVICES

Third-party providers used by Us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.

For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

Certain providers may be located in or have facilities that are located in a different jurisdiction than either you or Us. If you proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

If you are located in a different jurisdiction(s) and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act. Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Use.

For more information on The USA PATRIOT ACT

(https://www.fincen.gov/resources/statutes-regulations/usa-patriot-act)


SECTION 12: COOKIES

Cookies are small pieces of text sent to your browser by a website you visit. They help Our website remember information about your visit, which can both make it easier to visit Our site again and make Our site more useful to you. 

To review which cookies we use please review  

Shopify Cookie Policy (https://www.shopify.com/legal/cookies)


SECTION 13: SECURITY

You acknowledge that the security of online transactions you conduct using the Site cannot be guaranteed. To the fullest extent permitted at law, Palma Cosmetics shall not accept responsibility for misuse or loss of, or unauthorized access to, your Personal Information.

To protect your personal information, Palma Cosmetics maintains reasonable standards of confidentiality and security for the Site and the Personal Information collected from the Site. We take reasonable precautions on your Personal Information so it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

In the event that Palma Cosmetics determines that there has been a security breach that results in the unauthorized disclosure of Personal Information to a third party, Palma Cosmetics will promptly notify consumers whose Personal Information it reasonably believes has been compromised. 

You should also review Shopify’s Policies.

Shopify's Terms of Service (https://www.shopify.com/legal/terms)

Shopify Privacy Statement (https://www.shopify.com/legal/privacy)

Shopify Compliance Report (https://www.shopify.com/legal/compliance/reports)


SECTION 14: GOVERNING LAW

This Privacy Policy agreement shall be governed by, and construed and enforced in accordance with, the laws of the Commonwealth of Massachusetts, in the United States of America without regard to the conflict of laws provisions thereof. Any action, suit or other legal proceeding that is commenced to resolve any matter arising under or relating to any provision of this Agreement shall be submitted to the exclusive jurisdiction of any state or federal court in Middlesex County, Massachusetts, United States of America. 


SECTION 15: CONTACT INFORMATION

Questions about the Privacy Policy should be sent to us at palmacosmeticscustomercare@gmail.com