Privacy Policy

Who we are

Our website address is: https://habytsmile.com

Introduction

At Habyt, your privacy is paramount. This policy outlines how we collect, use, protect, and manage your personal information when you visit our website.

Information We Collect

What Personal Information Do We Collect?

We collect information you provide when you register on our site, place an order, subscribe to our newsletter, respond to a survey, or fill out a form. This may include your name, email address, mailing address, phone number, and credit card information.

Information Usage

How Do We Use Your Information?

The information we collect may be used in the following ways:

To personalize your experience and respond to your individual needs
To improve our website based on the information and feedback we receive from you
To process transactions
To administer a contest, promotion, survey, or other site feature
To send periodic emails

Cookies and Tracking Technologies

Cookies and How We Use Them

At Habyt, we use cookies to enhance and personalize your experience on our website. Below, we explain what cookies are, how we use them, and how you can manage them.

What is a Cookie? Cookies are small text files that are placed on your device (computer, smartphone, or other electronic device) when you visit a website. They involve the storage and sometimes tracking of information about your use of the site. Cookies can be “session” or “persistent” cookies, depending on how long they are used:

Session cookies only last for your online session and disappear from your device when you close your browser.
Persistent cookies stay on your device after the browser has been closed and last for the period of time specified in the cookie. These persistent cookies can be checked each time you visit the site that created the cookie.

How We Use Cookies: We use cookies to make our website easier to use and to better tailor our site and our products to your interests and needs. Cookies do this by allowing a website to remember your actions and preferences (such as login, language, font size, and other display preferences) over a period of time, so you don’t have to keep re-entering them whenever you come back to the site or browse from one page to another. Here are some specific ways we use cookies:

To Improve Site Functionality: Cookies help us understand how our website is being used, which parts are most popular, which pages are visited the most, or what features users are interacting with. This helps us improve and optimize our website based on user needs and preferences.
To Enhance User Experience: We use cookies to remember information about your browser and your preferences. For example, our site can recognize if you have visited previously and remember your login details if you choose this option.
For Marketing Purposes: Cookies can help us tailor advertising that we think may be of interest to you based on your browsing habits and online activities.

Managing Cookies: Most web browsers allow some control of most cookies through the browser settings. You can set your browser to refuse cookies or delete certain cookies. Generally, you should also be able to manage similar technologies in the same way that you manage cookies – using your browser’s preferences. Please note that if you choose to block cookies, this may impair or prevent due functioning of our service.

We encourage you to accept the cookies our website uses as they help us to improve the user experience for you and many others. If you want to check or change what types of cookies you accept, this can usually be altered within your browser settings.

Use of Customer Reviews and User-Generated Content

How We Use Your Reviews and Content

By submitting a review, comment, photo, video, or other user-generated content (‘User Content’) to Habyt, you agree that we may use such content in our marketing materials globally. This includes sharing or promoting your content across various channels without compensation. You grant Habyt a perpetual, royalty-free license to use this content as described. If you wish to withdraw this consent, please contact us.

GDPR Compliance

Compliance with GDPR

Habyt is committed to complying with the General Data Protection Regulation (GDPR), which applies to all data subjects within the European Union. We take our responsibilities under GDPR seriously and have implemented the following measures to ensure compliance:

Lawful Basis for Processing: We ensure that all data collected and processed is done on a lawful basis and is necessary for the purposes for which it was collected. The primary legal bases we rely on include consent (where you have given permission), contractual necessity (where processing is necessary for the performance of a contract with you), legal obligation (where we are required to comply with the law), and legitimate interests (where processing is necessary for our legitimate interests or the legitimate interests of a third party).
Data Subject Rights: Under GDPR, you have several rights concerning your personal data. These rights include:

The Right to Be Informed: You have the right to be informed about the collection and use of your personal data.
The Right of Access: You can request access to your personal data to verify the lawfulness of the processing.
The Right to Rectification: You can ask us to correct or complete any inaccurate or incomplete data.
The Right to Erasure (Right to Be Forgotten): You may request the deletion or removal of personal data where there is no compelling reason for its continued processing.
The Right to Restrict Processing: You have the right to ‘block’ or suppress processing of your personal data under certain conditions.
The Right to Data Portability: You can request the transfer of your data to another organization or to you in a structured, commonly used, and machine-readable format.
The: Right to Object: You have the right to object to how we process your personal data if you feel it impacts on your fundamental rights and freedoms.
Rights in Relation to Automated Decision Making and Profiling: You have the right not to be subject to a decision when it is based on automated processing, and it produces a legal effect or a similarly significant effect on you.

Data Protection Officer (DPO): Habyt has appointed a Data Protection Officer to oversee our management of your personal data in accordance with applicable data protection laws. If you have any questions or concerns about our data protection policies or practices, our DPO can be contacted directly.
Data Breach Notification: In the event of a data breach, we will notify affected individuals and relevant regulators in accordance with GDPR requirements, providing detailed information about the breach and the actions taken to mitigate its impact.
Data Protection Impact Assessments (DPIAs): Where processing operations are likely to result in a high risk to your data rights and freedoms, we conduct impact assessments to mitigate these risks before processing the data.
Training and Awareness: All employees of Habyt are required to undergo training on GDPR compliance as part of their induction and regularly thereafter. This ensures that our team is aware of the importance of protecting personal data, their roles and responsibilities under GDPR, and how to achieve compliance.

We are committed to upholding the protections your data deserves and to processing your personal data in fairness and transparency in line with GDPR requirements.

Changes to Our Privacy Policy

Changes to This Policy

We reserve the right to modify this privacy policy at any time. Changes will take effect immediately upon their posting on the website.

Protecting Your Information

How We Protect Your Information

At Habyt, safeguarding your personal information is a top priority. We employ a comprehensive range of security measures to ensure the protection of your data both online and offline. Here’s how we keep your information secure:

Secure Server Technology: Our website uses Secure Socket Layer (SSL) technology to ensure that all data passed between the web server and browsers remains encrypted, making it nearly impossible for unauthorized parties to decipher the information being exchanged.
Data Encryption: Any sensitive data you provide, such as credit card information, is encrypted using industry-standard encryption protocols during both transmission and storage. This ensures that your information is protected even in the unlikely event of a data breach.
Restricted Access: Access to your personal information is strictly limited to those employees and partners who need the information to perform a specific job (for example, billing or customer service). These individuals are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations.
Regular Security Audits: We regularly review our systems and processes for vulnerabilities and compliance with the latest security standards and regulations. This includes conducting regular security audits and vulnerability scans to ensure that we have identified and mitigated risks.
Data Minimization and Retention: We only collect the minimum amount of information necessary to fulfil the purposes outlined in this policy and do not store it for longer than necessary to meet these purposes or as required by law.
Incident Response Plan: Habyt has developed a formal incident response plan to handle data breaches or security incidents effectively. Should any data breach occur, we will act promptly to mitigate the breach’s impact and notify affected individuals and regulatory bodies as required by law.

We are committed to continuously improving our security measures and practices to protect against unauthorized access, alteration, disclosure, or destruction of your personal information stored on our servers.

Where your data is sent

At Habyt, the security and proper handling of your personal data are paramount. We want you to understand where and how your data is processed and stored.

Web Hosting and Storage: Our website is built on Shopify The data you provide us, including personal data from registration, transactions, and user interactions, is stored on these servers. Shopify is committed to high standards of data protection and information security.
Analytics and Tracking Tools: We utilize various analytics and marketing tools to better understand how our services are used and to provide you with tailored advertisements. These tools include:

Google Analytics and Google Ads: These services from Google help us analyse the behaviour of our visitors and measure the performance of our advertising campaigns. The data collected includes information about your device, location, and activities on our site.
Meta Business Suite: Operated by Facebook, this tool helps us manage our presence on Facebook and Instagram, including measuring the effectiveness of our social media campaigns.

Data Processing Outside the EU: While our primary data storage is in the UK, some of our third-party service providers, such as Google and Meta (Facebook), operate globally. Consequently, your data may be processed and stored in countries outside of the European Union, where the data protection and privacy laws may not offer the same level of protection as those in the EU. However, we ensure that any transfer of data outside the EU complies with applicable data protection laws and is safeguarded with appropriate security measures.
Ensuring Privacy and Compliance: We carefully select our third-party service providers and establish clear contractual obligations to ensure they adhere to the highest standards of data privacy and security. Additionally, where necessary, we implement Standard Contractual Clauses approved by the European Commission, or rely on the provider’s Privacy Shield certification, to ensure that your data is handled with care and in accordance with GDPR.
Your Rights and Control: You have specific rights over your personal data, regardless of where it is processed. These rights include accessing your data, requesting corrections, and, in certain cases, requesting the limitation or deletion of your data. If you have concerns about how your data is handled, please contact us directly.

We are committed to ensuring that your data is managed securely and transparently, with respect and care, across all platforms and locations.

Contact Us

How to Contact Us

If you have any questions regarding this privacy policy, you may contact us using the information provided on our website.