Privacy Policy

Palm Beach Tan Privacy Policy Updated December 13, 2023

Palm Beach Tan, Inc. (“Palm Beach Tan” or “PBT”) is committed to protecting your privacy. The information that you provide to Palm Beach Tan, 6321 Campus Circle Dr. East, Irving, TX. 75063 (sometimes referred to as “we”, “us” or “our”) is utilized in order for us to (among other things) provide you with the highest level of customer service reflective of the quality of our brand.

What This Privacy Policy Covers

This Privacy Policy (“Policy”) covers how Palm Beach Tan treats personal information that Palm Beach Tan collects and receives, including information related to your past use of Palm Beach Tan products and services.

This Policy also applies to our offline and online data collection practices, including when you visit our website at https://www.palmbeachtan.com/ or My PBT app or the websites of any of our affiliates (collectively the “Site”), inquire about our products or services, make a purchase from us, subscribe to our mailing lists or when you engage with us via email or on social media.

This Policy does not apply to the practices of companies that Palm Beach Tan does not own or control, or to people that Palm Beach Tan does not employ or manage. If you are a Palm Beach Tan employee, employment applicant, supplier, distributor, or trade contact, additional policies may apply.

This Policy is subject to our Terms of Use located at https://palmbeachtan.com/terms. We may update this Policy from time to time, as specified in the “Changes to This Privacy Policy” section below.

California, Colorado, Connecticut and Virginia state laws confer certain rights relating to personal information to their residents. If you are a resident of those states, please also see the applicable sections in this Policy located at:

Covered Below

Your Consent

Please review this Policy periodically. You should read this entire Policy before submitting information, including personal information, to us in any form or using our Site. Whenever you submit personal information to us, you consent to the collection, use, disclosure, transfer, and storage of that information in accordance with this Policy.

All personal information may be used for the purposes stated in this Policy. We may make full use of all information that is de-identified, aggregated, or otherwise not in personally identifiable form. We may also make full use of all user-generated content you submit to us, in accordance with our Terms of Use.

We may make full use of all information that is de-identified, aggregated, or otherwise not in personally identifiable form.

Collection of Personal Information

Palm Beach Tan collects personal information when you register with Palm Beach Tan, when you visit a Palm Beach Tan salon, when you download the My PBT app, when you use Palm Beach Tan products or services, when you visit Palm Beach Tan social media pages or the pages of certain Palm Beach Tan partners, and when you enter promotions or sweepstakes. Palm Beach Tan may combine information about you that we have with information we obtain from business partners or other companies. To see a complete list of what we collect, how we use this data, please see our Annex 1.

Personal Information

When you register with Palm Beach Tan, we collect Personal Information, such as your name, phone number, email address, birth date, gender, zip code, occupation, industry and personal interests. Once you register with Palm Beach Tan and sign in to our services, you are not anonymous to us.

We also collect information about your transactions with us and with some of our business partners, including information about your use of products and services that we offer.

When you visit our Site, we collect information about you through your browser, computer hardware and software. This information can include your first & last name, email address, zip, phone number, date of birth, street address, city, zip code, state, active membership & packages, time of tan, salon name & property name, IP address, device ID, browser type, domain names, access times and dates, number of clicks, pages viewed, one or more cookies (as described below) that may uniquely identify your browser, and referring website addresses. This information is used by Palm Beach Tan for the improvement of our Site.

We may combine data collected from third party sources.

Sensitive Personal Information

Palm Beach Tan collects sensitive personal information as set forth in Annex 1, including:

  • Consumer’s geolocation;
  • Consumer’s racial origin, religious beliefs, or union membership;
  • Consumer’s genetic data.

How We Use Your Personal Information

We use Personal Information of customers for a wide range of purposes, including:

  • for marketing purposes;
  • to customize the advertising and content you see;
  • to fulfill your requests for products and services;
  • to improve our services, products, business, and Site;
  • to contact you and respond to your requests and feedback;
  • to follow up with you after you have communicated with us or submitted information to us through the Site or via email;
  • to send promotional communications or offers (unless you have requested that we not send such communications);
  • for legal requirements and obligations, or to investigate, prosecute or defend legal claims or fraud;
  • to provide anonymous reporting for internal and external clients;
  • for other business purposes and as otherwise specified at the point of Personal Information collection.

How We Disclose Your Personal Information

Other than in connection with disclosures identified in our CA Privacy Notice, Palm Beach Tan does not rent, sell or share Personal Information about you with other people or non-affiliated companies except to provide products or services you’ve requested, when we have your permission or under the following circumstances:

Service Providers and Contractors

We disclose Personal Information you provide to consultants, service providers, and contractors that we use to support our business and operations who have agreed to keep the information confidential under confidentiality agreements and use it only to provide the applicable service(s) such as vendors that help us communicate with you about offers from Palm Beach Tan and our marketing partners, vendors that host our website and data, security and fraud detection vendors. However, these companies do not have any independent right to share this information.

Outside Parties

We disclose Personal Information to third parties we work with who help us gather information from you and communicate with you including entities that provide sweepstakes/contests sponsorship, social media companies, companies providing data analytics, targeted advertising, or online behavioral marketing services.

Palm Beach Tan may from time to time display targeted advertisements based on Personal Information. Advertisers (including ad serving companies) may assume that people who interact with, view or click on targeted ads meet the targeting criteria – for example, women ages 18-24 from a particular geographic area. Palm Beach Tan does not provide any Personal Information to the advertiser when you interact with or view a targeted ad. However, by interacting with or viewing an ad, you are consenting to the possibility that the advertiser will make the assumption that you meet the targeting criteria used to display the ad.

Legal Obligations

We believe it is necessary to share information in order to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of Palm Beach Tan’s terms of use or as otherwise required by law. As such, we may disclose Personal Information to outside parties (including, without limitation, governmental agencies) if required to do so by law, regulation or court order; to respond to governmental and/or law enforcement requests; to identify, contact or bring legal action against someone who may be causing injury to or interfering with our (or others’) rights or property; to support any actual or threatened claim, defense or declaration in a case or before any jurisdictional and/or administrative authority, arbitration or mediation panel; or in connection with disciplinary actions/investigations.

Sale or Corporate Restructuring

We may disclose Personal Information to third parties in connection with the sale, assignment or other transfer of the business or our website or the sale, assignment, merger, reorganization or other transfer of our brand or company. In that event, Palm Beach Tan will notify you before your information is transferred and becomes subject to a different privacy policy.

How We Use “cookies” and Other Automated Technology

As you enter the Site, our server records and monitors your IP address and uses it to develop statistical analysis. These analyses assist us in refining and adapting the content and design of our site. The use of IP addresses also enables us to prevent malicious Internet users from masquerading as other users. Automated technology collects information from your computer or mobile device and includes cookies, web beacons, local shared objects, or other similar technology. A “cookie” is a small text file that is placed onto an Internet user’s web browser or device and is used to remember and/or obtain information about the user. A “web beacon” is a small object or image that is embedded into a web page, application, or email and is used to track activity. They are also sometimes referred to as pixels and tags.

As you access or use our Site, we and/or third parties may collect information using cookies, web beacons, pixels, and navigational and location data collection (clickstream, log files, server logs) for the purposes described in this Policy. Such automated technologies further help us to keep track of your interactions with our website and provide you with a more customized experience.

To find more information about cookies please visit www.allaboutcookies.org. Most browsers are initially set to allow cookies, but also offer the option to restrict cookies or warn you of their use. By disabling cookies, you won’t be able to enjoy the convenience provided by our customization.

Third Party Advertising and Analytics Disclaimers

We and/or third parties including advertising companies, social networking sites, and service providers on our behalf, use cookies, web beacons and other similar technology, to collect information for the purposes described in this Policy including targeting advertising, analytics, online behavioral marketing, monitoring performance and improvement of our online services (traffic, errors, page load time, popular pages, etc.).

You may opt out of behavioral remarketing as follows:

Google Analytics and Meta Pixel:

We use Google Analytics and Meta Pixel to understand how our website, services, and products perform, how you use them, and to serve you with ads on third-party websites and social networking sites like Facebook. To learn more about how Google processes your data, please visit https://www.google.com/policies/privacy/. To opt out of Google Analytics please visit https://tools.google.com/dlpage/gaoptout. To learn more about how Meta Pixel uses your data, please visit https://www.facebook.com/policy.php.

Advertising and Remarketing Services:

We use remarketing services to inform, optimize, and serve ads on third-party websites such as Facebook to you based on your use of our Site and social media. To understand more about Meta advertising and manage your preferences, please visit https://www.facebook.com/about/ads. Login to Facebook and go to Settings > Ads > Ad Settings (web) or Ad Preferences > Ad Settings (app) for more information. For more information about targeted advertising and to opt out of collection of information and ad targeting from third-party websites, including Facebook and Google, please visit http://www.aboutads.info/choices. If you choose to opt out, you will continue to receive advertisements, but they will not be tailored to your interests.

Digital Advertising Alliance:

You can also opt out from companies like Google, Instagram, Pinterest, Meta and other participating companies through the Digital Advertising Alliance in the USA: http://www.aboutads.info/choices. You can also opt out of participating companies from the Digital Advertising Alliance of Canada in Canada: https://youradchoices.ca/ or the European Interactive Digital Advertising Alliance in Europe: https://youronlinechoices.eu/, or opt out using your mobile device settings.

Retention of Personal Information

We will retain your Personal Information (collected through offline and online methods) for as long as it is necessary for the purposes described in this Policy. We will also retain and use your Personal Information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies. For more information regarding retention of Personal Information see Annex 1.

Intended Audience of Website; COPPA Compliance

We are in compliance with the requirements of the Children’s Online Privacy Protection Act (“COPPA”). Our website, social media accounts and online activities are not directed to children under the age of 16. As a result, our website does not request or knowingly collect personal data from individuals under the age of 16. If you are not 17 or older, you should not visit or use our website.

Confidentiality and Security

We limit access to Personal Information about you to employees who we believe reasonably need to come into contact with that information to provide products or services to you or in order to do their jobs. We have physical, electronic and procedural safeguards to protect Personal Information about you.

Please keep in mind, however, that there is no such thing as perfect security, and no Internet transmission is ever completely secure or error-free. Although we strive to protect your Personal Information in accordance with this Policy, we will not be liable for disclosure of Personal Information obtained due to errors in transmission or security breaches.

External Links

We may make available third party applications through our Site and social media applications for your use. Links to such applications, any other websites included in this Site or links on our social media accounts operate with privacy policies beyond our control. Unless otherwise indicated, once you have left our Site or our social media account, all use of information you provide is governed by the privacy policy of the other website’s or social media account’s operators. We are not responsible for any transactions that occur between you and a third-party website or social media account.

Palm Beach Tan Communications

You may receive communications related to Palm Beach Tan. Our users are given the opportunity to opt out of emails and communications relating to Palm Beach Tan to which they have previously opted in. This does not apply to emails that relate to your Palm Beach Tan account or our website information, Terms of Use, or those that are automatically generated by the system (registration confirmation emails, administrative messages and service announcements). For example, even if you have unsubscribed from our promotional email messages, we will still send you confirmations when you register for any of our services. Users who no longer wish to receive our promotional communications or our newsletter may opt out of receiving these communications by clicking on the Unsubscribe link provided in emails or can unsubscribe by filling out the customer care contact form.

Governing Law

This Policy and our privacy practices will be subject exclusively to the laws of the State of Texas, United States of America. We make no representation that this Policy and its practices comply with the laws of any other jurisdiction.

Changes to This Privacy Policy

Palm Beach Tan may update this Policy from time to time for any reason. If this Policy changes, the revised policy will include a new effective date. Be sure to check the Policy whenever you submit Personal Information or use our website, app, services, or engage with our social media accounts.

Text Message SMS

If you’ve elected to receive text notifications, you will receive MMS alerts. If your device does not support MMS alerts then you will receive an SMS alert.

SMS Supported Carriers:

T-Mobile®, AT&T, Verizon, Sprint, U.S. Cellular, Boost Mobile, Cricket, Virgin Mobile, Iowa Wireless, Metro PCS, ACS Wireless, West Central Cellular, Ntelos, Bluegrass, Plateau Wireless, AWCC, Cincinnati Bell, Cellular South, Carolina West Wireless, Immix Wireless/Keystonen Wireless, Golden State Cellular, Cellcom, ECIT, GCI/Alaska Digitel, Inland Cellular, Illinois Valley, Nex-Tech, Chat Mobility, NW Missouri Cellular, NE Cellular One of PA, Element Wireless, MTPCS, Thumb Cellular, Viaero Wireless.

MMS Supported Carriers:

AT&T, Cricket, T-Mobile®, Sprint, Verizon Wireless, U.S. Cellular.

Contact Us

If you have any questions or concerns about this Policy, please contact us at:

Palm Beach Tan Inc. Attn: Customer Care/Privacy Policy Issues 633 E. State Hwy 121 South, Suite 500 Coppell, TX 75019 (866) 644-5631

California Consumers Only: Your California Privacy Rights

What This Privacy Policy Covers

This Privacy Rights Act Notice (“Notice”) provides additional information to California residents whose Personal Information is collected by Palm Beach Tan, Inc. (“Palm Beach Tan” or “PBT”) pursuant to California laws, including the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”). If you are not a California resident, this Notice does not apply to you. Any capitalized terms undefined in this Notice have the same definition as the Policy.

This Notice covers information collected (through offline and online methods) when you visit any Palm Beach Tan salon or business location, visit the Palm Beach Tan website at www.palmbeachtan.com (the “Site”), use the My PBT mobile application, contact us by phone or email, subscribe to our mailing lists, enter a sweepstakes/contest sponsored by us, or when you engage with us on social networking sites including Facebook.

Right to Know About Personal Information Collected, Disclosed, or Sold and Shared

Information Collected

In the preceding 12 months, we have collected the categories of Personal Information about California consumers as described in Annex 1 to this Notice. To review these categories click here.

Business-to-Business (“B2B”) Information

If you are a contact person for any of our business partners, vendors, distributors, suppliers, service providers, contractors, or other entities with which we have a business relationship or potential business relationship, we collect the contact information you provide to us, including name, phone number, address, email address and other contact and relationship information consistent with your role in facilitating that business relationship. We use that information for internal purposes, including to contact you, send and receive information, and otherwise facilitate the business relationship. We do not disclose that information outside our business relationship without your consent. See Annex 1 for more details.

Information Sold or Shared

As explained in Annex 1 of this Policy, we share your data with third-party partners such as social networking sites and advertising companies in order to serve you with ads tailored to your preferences across various platforms. This type of sharing may be considered “selling” or “sharing” under the CPRA. You can control the information shared about you and request an opt-out as explained below.

We have sold or shared the following categories of personal information for a business or commercial purpose in the preceding 12 months:

  • Personal Identifiers
  • Commercial Information
  • Internet Activity
  • Geo-location Data

We do not knowingly sell the personal information of individuals under 16 years of age without affirmative authorization.

Information Disclosed for Business Purposes

We have disclosed the following categories of personal information for a business or commercial purpose in the preceding 12 months:

  • Personal Identifiers
  • Commercial Information
  • Internet Activity
  • Geo-location Data

For details regarding the categories of third parties with whom we have shared, sold, or disclosed personal information, please see Annex 1.

Right to Know

You have the right to request that we disclose to you the following information about Personal Information we collect from you:

  • categories of personal information collected;
  • categories of sources of personal information collected;
  • the business or commercial purpose for collecting or selling personal information;
  • the categories of third parties with whom we share personal information; and
  • the specific pieces of personal information we have collected about you over the past 12 months.

You also have a right to know if we have shared, sold, or disclosed your Personal Information for a business purpose over the past 12 months and, if so, the categories of Personal Information shared, sold, or disclosed and the categories of third parties to whom the Personal Information was shared, sold, or disclosed, along with the business or commercial purpose for which the Personal Information was shared, sold, or disclosed.

Requests to Know

To make a request for any of the information set forth above (a “Request to Know”), please submit a verifiable consumer request pursuant to the instructions below. You may only make a Request to Know twice within a 12-month period. We will acknowledge your Request to Know within 10 days and will attempt to respond substantively within 45-90 calendar days.

The Request to Know must provide sufficient information to allow us to verify that you are the person about whom the Personal Information was collected, sold or disclosed and must contain sufficient detail to allow us to properly understand, evaluate and respond to your request. If we cannot verify your identity, we will not be able to respond to your request.

You can make a Request to Know the personal information we have about you in the following ways:

  • You may make a request by contacting us at:
    • California – Fresno 1 (888) 258-0032
    • California – Northern California 1 (800) 979-4826
    • California – Southern California 1 (888) 412-9170
  • You may also make a request through our contact form

Once we receive your Request to Know, we will begin the process to verify that you are the person that is the subject of the request (the “Verification Process”). The Verification Process consists of matching identifying information provided by you with the information we have about you in our records. You will be asked to provide us with information that will help us to verify your identity. If we cannot verify your identity, we will not be able to respond to your request.

Right to Know Sensitive Personal Information Collected

You have the right to request the deletion of your personal information collected or maintained by us (“Request to Delete”), subject to certain exceptions permitted by law.

To make a Request to Delete, please submit a verifiable consumer request pursuant to the instructions below. We will acknowledge your Request to Delete within 10 days and will attempt to respond substantively within 45-90 calendar days.

The Request to Delete must provide sufficient information to allow us to verify that you are the person about whom the personal information was collected, sold or disclosed and must contain sufficient detail to allow us to properly understand, evaluate and respond to your request. If we cannot verify your identity, we will not be able to respond to your request. Additionally, as permitted by law, if the information requested to be deleted is necessary for us to maintain, we will not be able to comply with your request. We will notify you if this is the case.

You can make a Request to Delete in the following ways:

  • You may make a request by contacting us at:
    • California – Fresno 1 (888) 258-0032
    • California – Northern California 1 (800) 979-4826
    • California – Southern California 1 (888) 412-9170
  • You may also make a request through our: contact form

Once we receive your initial request to delete and your separate confirmation to delete, we will need to verify that you are the person that is the subject of the request (the “Verification Process”). The Verification Process consists of matching identifying information provided by you with the information we have about you in our records. If we cannot verify your identity, we will not be able to respond to your request. If the information requested to be deleted is necessary for us to maintain, we will not be able to comply with your request and will notify you this is the case.

We will retain correspondence, documents and information related to any Request to Know, Request to Delete, or Request to Opt-Out for 24 months as required by law.

Right to Opt-out of Sale or Sharing of Personal Information

You have the right to opt-out of the sale or sharing of your Personal Information. As explained in Annex 1 of this Policy, we share your data with third parties such as social networking sites and advertising companies, in order to serve you with ads tailored to your preferences across various platforms. This type of sharing may be considered “selling” or “sharing” under the CPRA. You can control the information shared about you and request an opt-out as explained below. We will process your Request to Opt-Out of sale within 15 days.

Requests to Opt Out Of a Sale or Share of Personal Information

You can make a Request to Opt Out in the following ways:

  • You may make a request by contacting us at:
    • California – Fresno 1 (888) 258-0032
    • California – Northern California 1 (800) 979-4826
    • California – Southern California 1 (888) 412-9170
  • You may also make a request through our: contact form

Once we receive your initial request to delete and your separate confirmation to delete, we will need to verify that you are the person that is the subject of the request (the “Verification Process”). The Verification Process consists of matching identifying information provided by you with the information we have about you in our records. If we cannot verify your identity, we will not be able to respond to your request. If the information requested to be deleted is necessary for us to maintain, we will not be able to comply with your request and will notify you this is the case.

We will retain correspondence, documents and information related to any Request to Know, Request to Delete, or Request to Opt-Out for 24 months as required by law.

Opt-out Preference Signals

We honor opt-out preference signals that you enable, including a Global Privacy Control. Opt-out preference signals are plug-ins available in certain browsers that signal to websites you visit of your preferences to opt out of the sale and sharing of certain Personal Information. In order to process your request through an opt-out preference signal, you must use a browser supporting the preference signal. If you choose to use an opt-out preference signal, you will need to turn it on for each browser and each device you use. If you have enabled an opt-out preference signal device from your browser, we will not sell or share your Personal Information without first seeking your explicit consent.

This Policy does not apply to, and we are not responsible for, third-party cookies, web beacons, or other tracking technologies, which are covered by such third-parties’ privacy policies. For more information, we encourage you to check the privacy policies of these third parties to learn about their privacy practices.

Cookies

As explained in our “How We Use ‘Cookies’ and Other Automated Technology” section (add link), you can opt out of cookies using your browser. You may also exercise your right to opt-out of cookies using our Cookie Settings (Link to OneTrust Form).

Please Note:

  • Opt-outs are device and browser based. You must opt out on each device and each browser where you want your choice to apply.
  • Opt-outs may be stored via cookies. If you clear cookies, your opt out may no longer be valid and you must opt out again where you want your choices to apply.
  • We may still share your information with our service providers that help us perform functions that are necessary for our business such as vendors that host our Site, credit card processors, analytics processors. These entities are contractually obligated to keep this information confidential and not use it for any purpose other than for the services they provide to our business.
  • You may still receive ads from us that are not tailored to your interests.

Additional Options to Opt-out of Sale or Sharing

In addition to the above options to opt out of the sale or sharing of your information under the CCPA as described above, you have controls and choices with respect to collection and use of your information by third parties. These are summarized for you below. We do not control or maintain opt-out mechanisms for third-party companies and are not responsible for their operation.

Advertising Opt-Out

You can opt out of sharing your information with third-party companies engaged in targeted advertising including social networking sites such as Google and Facebook using the following tools provided through the AdChoices website powered by the Digital Advertising Alliance (“DAA”):

Google Opt-Out

You can opt out of Google Analytics by installing Google’s Opt Out browser add on: https://tools.google.com/dlpage/gaoptout.

You can opt out of interest-based Google ads using: https://adssettings.google.com/u/0/authenticated.

Facebook Ad Preferences

To understand more about Facebook advertising and manage your preferences, please visit https://www.facebook.com/about/ads. Login to Facebook and go to Settings > Ads > Ad Settings (web) or Ad Preferences > Ad Settings (app) for more information..

Right to Non-discrimination for Exercising Consumer Privacy Rights

You have the right not to receive discriminatory treatment for exercising your privacy rights conferred by the California Consumer Privacy Act, including by exercising the rights specified herein. Some of the functionality and features available to you may change or no longer be available to you in some instances.

Right to Correct

You have the right to request that we rectify inaccurate information about you (“Request to Correct”).

Requests to Correct

To make a Request to Correct, please submit a verifiable consumer request pursuant to the instructions below. We will acknowledge your Request to Correct within 10 business days and we will attempt to respond substantively within 45-90 calendar days.

You can make a Request to Correct in the following ways:

  • You may make a request by contacting us at:
    • California – Fresno 1 (888) 258-0032
    • California – Northern California 1 (800) 979-4826
    • California – Southern California 1 (888) 412-9170
  • You may also make a request through our contact form

Once we receive your Request to Correct, we will need to verify that you are the person that is the subject of the request through the Verification Process. The Verification Process consists of matching identifying information provided by you with the information we have about you in our records. You will be asked to provide us with information that will help us to verify your identity. If we cannot verify your identity, we will not be able to respond to your request.

We will review all information provided by you to us, to determine whether the information is inaccurate. We reserve the right to delete the information instead of correcting if such deletion does not impact you or you consent to the deletion.

We will inform you of our decision to deny or grant your request.

We will retain correspondence, documents and information related to any Request to Correct for 24 months as required by law.

Right to Access Information About Automated Decision Making and the Right to Opt-out of Automated Decision Making

You can request access to information about automated decision making processes Palm Beach Tan uses and you may request to opt out of automated decision making. We do not engage in automated decision making regarding your personal information.

Retention of Personal Information

We will retain your Personal Information for as long as it is necessary for the purposes set out in Annex 1 and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

Authorized Agent Information

You may designate an authorized agent to make a request on your behalf under the California Consumer Privacy Act.

Authorized agents can make requests under the California Consumer Privacy Act by emailing us at email address: ccparequests@palmbeachtan.com. We will require authorized agents to provide proof of the consumer’s identity and proof of designation as an the authorized agent. We may also require that a consumer verify his or her own identity directly with us before we respond to an authorized agent’s request.

We reserve the right to deny requests in certain circumstances, such as where we have a reasonable belief that the request is fraudulent.

Other California Disclosure Information

California Do Not Track Notice

Because there are not yet common, industry accepted “do not track” standards and systems, our Site does not respond to Do Not Track signals. In addition, we may allow third parties to collect personal information from your activity on our Site, as described in the “Information Collection and Use” section above and described in Annex 1 below.

California Shine The Light Disclosure Information

Although we do not disclose to any third parties for their marketing purposes any personal information, California residents are entitled to receive the following disclosure information under California law:

Under California Law, California residents have the right to request in writing from businesses with which they have an established business relationship, (1) a list of the categories of personal information, such as name, address, email address, and the type of services provided to the customer, that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third-parties' direct marketing purposes, and (2) the names and addresses of all such third parties. We will respond to such written requests within 30 days following receipt at the email or mailing address specified below under “Contact Us”. If we receive your request at a different email or mailing address, we will respond within a reasonable period of time, but not to exceed 150 days from the date received. Please note that we are required to respond to each customer only once per calendar year.

Changes to This Notice

Palm Beach Tan may update this Notice from time to time for any reason. If this Notice changes, the revised notice will include a new effective date. Be sure to check the Notice whenever you submit Personal Information or use our website, app, services, or engage with our social media accounts. The effective date of this Notice is July 1, 2023.

Contact for More Information

For information and questions about the use of your personal information or this California Consumer Privacy Section or your rights under California law, you may contact us through our contact form.


Colorado, Connecticut, Virginia Consumers Only: Colorado, Connecticut, and Virginia Privacy Act Notices

This Notice provides additional information to Colorado, Connecticut, and Virginia residents whose personal data is collected pursuant to the Colorado Privacy Act (“CPA”), Connecticut Data Privacy Act (“CTDPA”), and Virginia Consumer Data Protection Act (“VCDPA”).

The Notice below applies only to Connecticut, Colorado, and Virginia residents. Any capitalized terms undefined in this Notice have the same definition as the Policy.

Right to Confirm, Access, and Data Portability

You have the right to confirm whether or not we are processing your personal data and to access such personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means. We will respond to your request within 45 days of receipt, unless we request an extension for an additional 45 days to respond.

You can exercise this right in the following ways:

  • You may make a request by contacting us at:
    • Colorado: (866) 690-9080
    • Connecticut: (866) 644-5631
    • Virgina: (866) 644-5631
  • You make also make a request through our contact form.

Once we receive your request, we will begin the process to authenticate your identity to confirm that you are the person that is the subject of the request (the “Authentication Process”). The Authentication Process consists of matching identifying information provided by you with the information we have about you in our records. Upon making a request, you should be prepared to provide us with information that will help us to verify your identification. If we cannot authenticate your identity, we will not be able to respond to your request.

Information Collected

We have collected the categories of personal data about Connecticut, Colorado, and Virginia consumers as described in this Notice in Annex 1. To review these categories, click here.

Information Sold or Used for Targeted Advertising

As explained in Annex 1 of this Policy, we and our third-party partners such as social networking sites and advertising companies, share your data in order to serve you with ads tailored to your preferences across various platforms. This type of sharing may be considered a “sale” or sharing for targeted advertising purposes under certain state laws. You can control the information shared about you and request an opt-out.

We sell personal data to third parties for a business or commercial purpose as follows:

  • Personal Identifiers
  • Commercial Information
  • Internet/Network Activity
  • Geo-location data

We disclose the following categories of personal data for Targeted Advertising (See Annex 1 for further details):

  • Personal Identifiers
  • Commercial Information
  • Internet/Network Activity
  • Geo-location data

For details regarding the categories of third parties with whom we have shared this information, please see Annex 1.

Right to Request Deletion of Personal Data

You have the right to request the deletion of your personal data provided by or obtained about you (“Request to Delete”), subject to certain exceptions permitted by law.

To make a Request to Delete, please submit a verifiable consumer request pursuant to the instructions below. We will respond to your request within 45 days of receipt, unless we request an extension for an additional 45 days to respond.

Requests to Delete

You can make a Request to Delete in the following ways:

  • You may make a request by contacting us at:
    • Colorado: (866) 690-9080
    • Connecticut: (866) 644-5631
    • Virgina: (866) 644-5631
  • You make also make a request through our contact form

Once we receive your request, we will begin the process to authenticate your identity to confirm that you are the person that is the subject of the request (the “Authentication Process”). The Authentication Process consists of matching identifying information provided by you with the information we have about you in our records. Upon making a request, you should be prepared to provide us with information that will help us to verify your identification. If we cannot authenticate your identity, we will not be able to respond to your request.

Right to Correct

You have the right to request that we rectify inaccurate information about you.

To make a Request to Correct, please submit a verifiable consumer request pursuant to the instructions below. We will attempt to respond substantively within 45-90 days.

Requests to Correct

You can make a Request to Correct in the following ways:

  • You may make a request by contacting us at:
    • Colorado: (866) 690-9080
    • Connecticut: (866) 644-5631
    • Virgina: (866) 644-5631
  • You make also make a request through our contact form

Once we receive your request, we will begin the process to authenticate your identity to confirm that you are the person that is the subject of the request (the “Authentication Process”). The Authentication Process consists of matching identifying information provided by you with the information we have about you in our records. Upon making a request, you should be prepared to provide us with information that will help us to verify your identification. If we cannot authenticate your identity, we will not be able to respond to your request.

We will retain correspondence, documents and information related to any Request to Correct for 24 months as required by law.

Right to Opt-out of Sale of Personal Data

You have the right to opt-out of the sale of your personal data.

Requests to Opt Out

You can make a Request to Opt Out in the following ways:

  • You may make a request by contacting us at:
    • Colorado: (866) 690-9080
    • Connecticut: (866) 644-5631
    • Virgina: (866) 644-5631
  • You make also make a request through our contact form

Right to Opt Out of Data Processing for Targeted Advertising

You have the right to opt out of the processing of your personal data for purposes of targeted advertising (“Request to Opt Out”).

Requests to Opt Out

You can make a Request to Opt Out in the following ways:

  • You may make a request by contacting us at:
    • Colorado: (866) 690-9080
    • Connecticut: (866) 644-5631
    • Virgina: (866) 644-5631
  • You make also make a request through our contact form

Opt-out Preference Signals

We honor opt-out preference signals that you enable, including a Global Privacy Control. Opt-out preference signals are plug-ins available in certain browsers that signal to websites you visit of your preferences to opt out of the sale and sharing of certain personal data. If you have enabled an opt-out preference signal device from your browser, we will not sell or share your personal data for targeted advertising purposes without first seeking your explicit consent.

Cookies

As explained in our “How We Use ‘Cookies’ and Other Automated Technology” section (add link to the Cookies section in the main Privacy Policy), you can opt out of cookies using your browser. You may also exercise your right to opt-out of cookies using our Cookie Preference Center (Link to Cookie Banner).

Please Note:

  • Opt-outs are device and browser based. You must opt out on each device and each browser where you want your choice to apply.
  • Opt-outs maybe stored via cookies. If you clear cookies, your opt-out may no longer be valid and you must opt out again where you want your choices to apply.
  • We may still share your Personal Information with our service providers that help us perform functions that are necessary for our business such as vendors that host our Site, analytics processors, etc. These entities are contractually obligated to keep this information confidential and not use it for any purpose other than for the services they provide to our business.
  • You may still receive ads from us that are not tailored to your interests.

Additional Options to Opt Out of Sale or Targeted Advertising

In addition to the above options to opt out of the “sale” or processing of your personal data for targeted advertising as described above, you have controls and choices with respect to collection and use of your data by third parties. These are summarized for you below. We do not control or maintain opt-out mechanisms for third party companies and are not responsible for their operation.

Advertising Opt-Out

You can opt out of sharing your data with third-party companies engaged in targeted advertising including social networking sites such as Google and Facebook using the following tools:

Google Opt-Out

If you would like to opt out of Google Analytics and Ads, you can.  If you are on the web, you can opt out of Google Analytics by installing Google’s Opt Out browser add on here: https://tools.google.com/dlpage/gaoptout, and you can opt out of interest-based Google ads using this link: https://adssettings.google.com/u/0/authenticated.

Facebook Ad Preferences

To understand more about Facebook advertising and manage your preferences, please visit Facebook Ads.  Login to Facebook and go to Settings > Ads > Ad Settings (web) or Ad Preferences > Ad Settings (app) for more information.

Right to Opt Out of Profiling

You have the right to opt out of the processing of your personal data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects (“Request to Opt Out of Profiling”).

Requests to Opt Out of Profiling

You can make a Request to Opt Out of Profiling in the following ways:

  • You may make a request by contacting us at:
    • Colorado: (866) 690-9080
    • Connecticut: (866) 644-5631
    • Virgina: (866) 644-5631
  • You make also make a request through our contact form

Once we receive your request, we will begin the process to authenticate your identity to confirm that you are the person that is the subject of the request (the “Authentication Process”). The Authentication Process consists of matching identifying information provided by you with the information we have about you in our records. Upon making a request, you should be prepared to provide us with information that will help us to verify your identification. If we cannot authenticate your identity, we will not be able to respond to your request.

Right to Non-discrimination for Exercising Consumer Privacy Rights

You have the right not to receive discriminatory treatment for exercising your privacy rights, including by exercising the rights specified herein. As the Right to Non-Discrimination is effective across the board, there is no specific “request” that you need to make in order to exercise this right.

Authorized Agent

You may designate an authorized agent to make a request on your behalf to opt out of the sale of personal data.

Authorized agents may make requests under the CTDPA, CPA, and VCDPA on behalf of consumers by filling out our customer care form. We will require authorized agents to provide proof of the consumer’s consent to and designation of the authorized agent for purpose of making the request, and will require authorized agents to provide information necessary to verify the identity of the consumer who is the subject of the request. We may also require that a consumer verify his or her own identity directly with us before we respond to an authorized agent’s request.

Right to Appeal

You have the right to appeal our decision to deny any of your privacy rights requests above. Within 45 days of receipt of your appeal (45 days for Colorado residents), we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.

Colorado residents, if your appeal is denied, you may submit a complaint to the Colorado Attorney General at https://coag.gov/office-sections/consumer-protection/.

Connecticut residents, if your appeal is denied, you may submit a complaint to the Connecticut Attorney General at https://portal.ct.gov/AG/Common/Complaint-Form-Landing-page

Virginia residents, if your appeal is denied, you may submit a complaint to the Virginia Attorney General at https://www.oag.state.va.us/consumer-protection/index.php/file-a-complaint.

Making an Appeal

You can make an appeal in the following ways:

  • You may make an appeal by phone by contacting us at: [insert applicable phone number]
    • Colorado: (866) 690-9080
    • Connecticut: (866) 644-5631
    • Virgina: (866) 644-5631
  • You may also enter your appeal here https://palmbeachtan.com/contact-us#customer-service-questions. We reserve the right to deny appeals in certain circumstances, such as where we have a reasonable belief that the request is fraudulent.

Retention of Personal Data

We will retain your personal data for as long as it is necessary for the purposes set out in the Privacy Policy https://palmbeachtan.com/privacy-policy and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your personal data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.


Annex 1 Notice of Collection, Use, and Disclosure

Collection, Use and Disclosure of Personal Information

You can opt out of the sale of your information here: Do Not Sell My Personal Info

Category Personal Identifiers,
Personal Characteristics,
Commercial Information
Internet/Network Activity Sensitive Personal Information Business-to-Business (“B2B”) Information
Examples

Personal Identifiers - e-mail address, shipping and billing address, payment information such as credit or debit card; bank account; deduction type, market, telephone number, date of birth, interests, gender, zip code.

Personal Characteristics - Eye color, skin type, gender.

Commercial Information - Products and services (including packages and memberships) purchased considered, reviewed or other purchasing or consuming habits including transactional history, account information including activity status and balance, account or debit or credit card numbers, your services and product preferences, Customer ID, personal preferences, time of tan, salon name and property name, equipment, room type, and your favorite Salon.

IP address, your device information, domain name, browser type and operating system, webpages viewed before and after visiting our Site, time spent on webpages, links clicks, transactions entered into and site-navigation patterns.

Location of your computer or mobile device using geolocation and other technology such as GPS, Wi-Fi, Bluetooth and cell tower proximity, customer ID information, favorite location and personal preferences.

Name, phone number, address, email address and other contact and relationship information consistent with your role in facilitating the business relationship.

Collected From

You when you visit a PBT salon, access and use our Site,sign up for a my PBT account on our Site, MY PBT mobile app., or in person, use our products or services, enter in a contest or sweepstakes conducted by us, sign up for email/text subscriptions, access content, engage with us on social media, or otherwise interact with us through posting content on our Site, or communicating with us via phone or email.

We may also collect information from third-party sources, such as Google, social-networking sites such as Facebook, third-party service providers, opt-in lists, publicly available data, consumer reporting agencies, other companies and referrals.

Your computer or mobile device, through your online activities and interactions with us, including, without limitation, your use of our services, your online activity on our Site and MY PBT mobile app, and on our social media channels or through our third-party sources.

We may also collect information from third-party sources, such as Google, social-networking sites such as Facebook, third-party service providers, opt-in lists, publicly available data, consumer reporting agencies, other companies and referrals.

You when you visit our Site (including your online activities on our Site), purchase a product (through our Site, in person, or on the phone), register for an account on our Site, join our wine club programs, enter a promotion or competition conducted by us, engage with us on social media, or otherwise interact with us through posting content on our Site, or communicating with us via phone or email.

We may also collect information from third-party sources, such as third-party service providers, opt-in lists, publicly available data, consumer reporting agencies, other companies and referrals.

To prevent, detect, and investigate any security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted sensitive personal information.

For purposes that do not infer characteristics about the consumer.

You when you use our Site and our MY PBT mobile App.

You, if you are a contact person for any of our business partners, vendors, distributors, suppliers, service providers, contractors, or other entities with which we have a business relationship or potential business relationship.
Purposes

To provide you with the products, services, and information you request, fulfill and process your purchases, send you communications regarding our products and services including your membership, provide customer service and support, follow up with you after you have communicated with us or submitted information to us regarding our services and products;

To identify your products and service preferences and notify you about product recalls or other information regarding the products you have purchased;

To send promotional communications or special marketing offers about new or additional products, services, and promotions that might be of interest to you (unless you have requested that we not send such communications);

Enhance, modify, or improve our business, Site, services, and products;

For records, marketing, research, legal, and other business purposes; and

To comply with our policies, procedures, and legal obligations, including complying with law enforcement or governmental authority requests, investigating fraudulent activity, resolving disputes, and enforcing our legal agreements and policies.

To provide, maintain administer and expand our Site;

Analyze and track usage of our Site including social media accounts;

Determine the popularity of our Site and social media accounts;

To better understand how you use our Site, services, and products;

Develop new products and service offerings;

Enhance, modify, or improve our business, Site, and products;

Provide you with a customized guest experience of our Site and present offers tailored to your personal preferences;

To send promotional communications or offers including invitations to events, taking surveys, and participating in promotions (unless you have requested that we not send such communications);

For other marketing, research, legal, and other business purposes; and

To comply with our policies, procedures, and legal obligations, including complying with law enforcement or governmental authority requests, investigating fraudulent activity, resolving disputes, and enforcing our legal agreements and policies.

To respond to and fulfill your requests, purchase orders, and wine club orders, follow up with you after you have communicated with us or submitted information to us, and to provide products or services that you have ordered;

To process your order transactions, contact you regarding your order, and deliver products to you;

To improve our products, services, Site, and social media;

To provide you with a customized user experience;

To send promotional communications or offers regarding our products and services (unless you have requested that we not send such communications);

To authenticate your account credentials and identify you, as necessary to log you in and/or ensure the security of your account;

For marketing, research, legal, and other business purposes; and

To comply with our policies, procedures, and legal obligations, including complying with law enforcement or governmental authority requests, investigating fraudulent activity, resolving disputes, and enforcing our legal agreements and policies

To suggest the closest salon location to you;

To provide you with local promotional offers and specials; and

To communicate with you.

For internal purposes, including to contact you, send and receive information, and otherwise facilitate the business relationship.

Disclosed to

Consultants, service providers, and contractors that we use to support our business and operations (e.g., vendors hosting or operating our Site, data-storage vendors, vendors that help us communicate with you, entities that provide data analytics, and fraud detection service providers) who have agreed to keep the information confidential and use it only to provide the applicable services;

Third-party companies that assist us with data analytics, data research, analyzing website metrics, entities including Google, social networking sites such as Facebook, that assist us with data analytics, marketing, online behavioral advertising, customer satisfaction surveys and reviews, and managing social media channels;

Third-parties (including, without limitation, governmental agencies) if required to do so by law, regulation or court order; to respond to governmental and/or law enforcement requests;

An acquirer or successor-in-interest in the event of a reorganization, merger, sale, change of control, consolidation, joint venture, assignment, transfer or other disposition of all or any part of the business or its affiliates including any negotiation thereof; and

Third-party advertisers or sponsors of contests, sweepstakes, discounts, and promotions that you enter into.

Consultants, service providers, and contractors that we use to support our business and operations (e.g., vendors hosting or operating our Site, data-storage vendors, vendors that help us communicate with you, entities that provide data analytics, and fraud detection service providers);

Third-party companies that assist us with data analytics, data research, analyzing website metrics, entities including Google, social networking sites such as Facebook that assist us with data analytics, marketing, and online behavioral advertising;

Third-parties (including, without limitation, governmental agencies) if required to do so by law, regulation or court order; to respond to governmental and/or law enforcement requests;

An acquirer or successor-in-interest in the event of a reorganization, merger, sale, change of control, consolidation, joint venture, assignment, transfer or other disposition of all or any part of the business or its affiliates including any negotiation thereof; and

Third-party advertisers or sponsors of contests, sweepstakes, discounts, and promotions that you enter into.

Third party service providers such as vendors hosting our Site and app, security services etc.

We do not disclose B2B Information outside our business relationship without your consent.

Sold or Shared

Yes. To opt out, please click here.

Yes. To opt out, please click here.

Yes. To opt out, please click here.

No.

Retention Period

We will retain your Personal Information for as long as it is necessary and to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

We will retain your Personal Information for as long as it is necessary and to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

We will retain your Personal Information for as long as it is necessary and to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

We will retain your B2B Information for as long as it is necessary to fulfill the purposes outlined in this Policy and as otherwise needed to comply with applicable law and internal company policies.