Alba VTO Privacy Policy

Alba VTO helps ecommerce brands implement virtual try-on for lipstick products. This policy explains how we collect, use and protect personal information when you visit our website, contact us, book a consultation or sign up for our emails. Our website is for marketing and booking only; it does not include a live try-on demo or collect camera images or face-photo uploads.

The person responsible for your information is Alba Leal, trading as Alba VTO, based in the United Kingdom. We work with businesses internationally.

Privacy email: albalealmcc@gmail.com

We collect information you choose to give us, such as your name, email address, company name, website, booking details and anything you include in an enquiry or form. We also keep records of our communications and your marketing preferences.

Our website and service providers may collect technical and usage information, such as your IP address, browser and device type, approximate location, pages visited, interactions and referring website. Some of this is collected through cookies or similar technologies.

You can browse without submitting a form. If you do not provide the contact details requested for an enquiry, resource or booking, we may be unable to fulfil that request.

We use personal information to:

• Respond to enquiries and arrange consultations.
• Provide resources or information you request.
• Manage our relationship with you and discuss or provide our services.
• Send relevant advice, updates and offers when you opt in.
• Understand website usage, improve the website and protect it against misuse.
• Keep necessary business records and meet legal obligations.

Under UK data protection law, our legal bases are consent for opted-in marketing and for analytics or session recordings where consent is required; our legitimate interests in responding to business enquiries, managing relationships and securing our website; contract where necessary to fulfil a contract with you or take steps you request towards one; and legal obligations where applicable. We balance our legitimate interests against your rights.

We use GoHighLevel for calendar bookings and sending relevant emails. For these purposes, it processes the contact details, booking information and email preferences needed to arrange your call and communicate with you.

If you opt in, we may email you about virtual try-on, relevant resources and Alba VTO’s services. Booking-related messages and replies to your enquiries are separate from marketing subscriptions.

You can stop marketing emails at any time using the unsubscribe link in an email or by contacting us. Withdrawing consent does not affect processing that took place before you withdrew it. We may still send messages needed to respond to an enquiry, manage a booking or deliver an agreed service.

We are setting up Google Analytics and Hotjar to understand how visitors use this website and help us improve it. When enabled, Google Analytics collects usage and device information through cookies or similar technologies and provides reports about how visitors find and use the website.

Read how Google uses information from sites and apps that use its services. Google also offers a Google Analytics opt-out browser add-on.

When enabled, Hotjar, part of Contentsquare, helps us understand how people use our website through heatmaps and session replays. These show interactions such as clicks, scrolling and movement between pages, together with device and browser information, so we can identify problems and improve the website. The service uses cookies or similar technologies. Read the Hotjar privacy information for details of its processing.

You can block or delete cookies through your browser settings and use the Google Analytics opt-out browser add-on linked above. Blocking some cookies may affect embedded booking or other website features. The provider privacy information explains how each service processes information and the choices it offers.

Browser privacy signals: Our website does not currently apply a separate, site-wide tracking opt-out in response to Do Not Track or Global Privacy Control signals. These are different browser signals, and individual service providers may handle them according to their own policies.

We do not sell personal information or rent our contact lists.

We disclose information where needed to providers that help us operate our business, including GoHighLevel for calendar bookings and relevant emails; Google Analytics and Hotjar/Contentsquare for website analytics when enabled; and providers of website hosting and business email. The information each provider receives depends on its service and the features you use.

We may also disclose information where required by law or reasonably necessary to protect legal rights or prevent fraud. We do not give other businesses our contact list for their own marketing.

Our providers may process information in the United States and other countries, which may have different privacy laws from your country.

Our providers explain their international processing and transfer safeguards in Google’s data transfer information, Hotjar/Contentsquare’s privacy information and HighLevel’s data-processing agreement. The arrangements differ by provider and destination. You can contact us for more information about the providers used for your information.

We keep information only as long as needed for the purposes described here. This depends on whether an enquiry is ongoing, whether we have a business relationship with you, your marketing preferences and any legal or recordkeeping requirements.

If you unsubscribe, we stop marketing to you and may keep a minimal record of your opt-out so that we respect your preference. Information that is no longer needed is deleted or anonymised.

You can contact us to ask about your information, request access, correct inaccurate details or request deletion.

Depending on applicable law and the circumstances, you may also have rights to restrict or object to processing, receive a portable copy of information, withdraw consent or appeal a decision about a privacy request. We may need to verify your identity before acting on a request.

Please send requests or concerns to albalealmcc@gmail.com. You can also complain to the relevant data protection authority. Where UK data protection law applies, this includes the Information Commissioner’s Office.

We use reasonable safeguards to protect personal information and limit access to those who need it. No website or storage system can be guaranteed completely secure.

We may update this policy as our website or practices change. We will post the revised policy here, update the effective date and provide additional notice where required.