This Privacy Policy explains how Tunnel Weight Closet processes personal data when users visit or interact with tunnelweightcloset.makeup. It applies to visitors, prospective clients, and other individuals who submit information through the site.
This introduction outlines how the policy is organized and where to find key information.
We may collect identification details, contact information, account or inquiry content, technical data such as device and browser information, usage data, and any other information users choose to submit through forms or communications. In a legal services context, this may also include information relevant to a request, matter, or consultation.
We collect data from forms, messages, consultation requests, and other direct interactions with the site. We also receive technical and usage information automatically through the operation of the website, including log data and cookie-related data where applicable. In some cases, information may be provided by service providers acting on our behalf.
We may use strictly necessary cookies to support core site functions, preference cookies to remember settings, and analytics cookies to understand how the site is used. Cookies may be session-based or persistent, depending on their purpose. Where required, non-essential cookies are used only after consent.
Users may block, delete, or limit cookies through their browser settings. If the site provides a cookie banner or preference tool, users may use it to adjust non-essential cookies. Limiting cookies may affect some site functions and preferences.
Depending on the circumstances, users may have rights to access their data, request correction or deletion, object to certain processing, and ask for restriction or portability. Where processing is based on legitimate interests, users may object on grounds relating to their particular situation. These rights are exercised subject to applicable legal limits.
To exercise a privacy right, users should submit a clear request describing the data or processing concerned. We may ask for information needed to verify identity and to understand the request. We will respond within the period required by applicable law and may decline or limit a request where the law allows.
We keep personal data only for as long as needed for the purpose for which it was collected, including any follow-up, recordkeeping, dispute handling, or legal compliance requirements. When data is no longer needed, we delete it or anonymise it, unless a longer retention period is required or permitted by law.
We may update this Privacy Policy to reflect changes in our practices, legal requirements, or the services we provide. When changes are material, we will take reasonable steps to bring them to users' attention through the site or other appropriate means before the updated policy takes effect.
We use personal data to operate the website, respond to inquiries, manage consultations or service requests, maintain security, analyse site performance, comply with legal obligations, and keep business records. Where permitted, we may also use data to improve our services and manage communications related to user interactions.
We may share personal data with service providers that support hosting, security, analytics, communications, and administrative functions. These parties process data on our instructions or as independent controllers where required by law. We may also share information in connection with professional advisers, business transfers, or similar operational needs.
We may disclose personal data where necessary to comply with applicable law, lawful requests from public authorities, court orders, or to protect our rights, users, or the security of the site. Any disclosure is limited to what is reasonably necessary for the relevant purpose.
Under the GDPR, we process personal data only where we have a valid legal basis, such as consent, performance of a contract, compliance with legal obligations, or our legitimate interests where those interests are not overridden by user rights. We apply data minimisation, purpose limitation, and security measures appropriate to the nature of the processing.
Where users are located in the European Economic Area, the GDPR applies to our processing of personal data to the extent the law requires.
Users may have rights to access, rectify, erase, restrict, or object to processing, and to data portability where applicable. Where processing is based on consent, consent may be withdrawn without affecting prior processing. Users may also lodge a complaint with the competent supervisory authority if they believe their rights have been infringed.
