Privacy Policy

This exists for legal purposes, our ideology is to provide experiences of soul and use the technology to support us in connecting – not to take anything from you, sell you things you don’t need or pass on your data. Our intention is to create a space of freedom, love and community within the tech space so that we can explore issues relating to activism, the sacred, creativity and regeneration. We welcome suggestions to improve this policy from our community. (We also have no funding that comes with any special interests or any compromised values).

Effective Date: July 25th, 2022

Introduction

All That We Are (part of Create Beauty Ltd) understands and respects our users’ need for privacy. This Privacy Notice (“Notice”) describes the types of information we collect, the purposes for which it is used, and the choices you have with respect to its use.

About All That We Are 

Who You Are

This Notice applies to users of the all that we are services, paying all that we are customers, and all that we are website visitors (“Users”). We encourage you to read this Notice in full to understand our privacy practices before using our Services.

Information We Receive From You

We collect the following information through your use of our Services, and otherwise with your consent. In some cases, we receive information directly from you. For example, when you sign up for the all that we are mailing list, we collect your first name and email address. The types of information that we collect include:

• Information about you and your all that we are Account – Name and email address. This information is collected automatically, or you provide this information to us directly when you sign up for free programs. Name, email address, user ID, username and password. This information is collected automatically, or you provide this information to us directly when you register for an account and sign up for paid programs.
• Order and transaction information – Name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. This information is collected automatically, or you provide this information to us directly when you make a purchase or attempt to make a purchase through the Site.
• Device information – IP address, time zone, device type, operating system, manufacturer, model, and model number, and unique device identifiers such as your user name and password. We collect this information automatically when you use our Services.
• Usage analytics – Browser type, and usage details, such as time, frequency, and use pattern. In some cases, we analyze information on specific end users such as the amount of time spent on the platform. In others we look at data in the aggregate. We use this information to optimize our Services. We collect this information automatically when you use our Services.
• Social media information – Social posts and user generated content, such as user photos, other images you share with us, or screenshots and photos taken during use of our Services. You provide this information to us directly when you post in our community area. In other cases, we collect information about your social media interactions automatically. For example, we may receive information from social media sites when you choose to participate in social media-sponsored activities and offerings we provide via social media plug-ins on our website. In other cases, when you connect with all that we are’s or amisha ghadiali’s accounts on third party social networking sites, we may also collect information about your social networking accounts, for example, your name, user name, or handle.

To learn about your information collection choices and to opt-out of data collection, see the “Your Choices” section below.

Information We Receive from Other Sources

• partners – We receive information from other partners to help us find potential customers and enhance our Services with useful information. For example, information provided by our partners allows us to provide optimization services, such as when we receive data analytics from Google Analytics, or Facebook Insights.

How We Use, Share, and Disclose Information

We use collected information to:

• Communicate with you – We may contact you to respond to your inquiries, requests, and/or send important notices either via email. This includes, for example, sending order confirmations and receipts, technical notices, service updates, administrative messages, and providing you with updates about our Services and new features. See “Your Choices” below to learn how to manage your communication preferences.
• Provide customer support – We use your all that we are usage information to resolve support issues that may arise through your use of our Services. all that we are employees are prohibited from viewing the content of data you import into your account, except when necessary to resolve your support issues. Access is limited to the data required to resolve your support issues.
• Deliver and improve our Services – We use your information to deliver and analyze how you use our Services, develop new products and services, and improve functionality, quality, and user experience. This includes using aggregated, anonymized data to improve our Services. For example, we may use personal data in the aggregate to provide customer support or for research and development purposes. For more information see “Browser and usage information” in the “Information We Receive From You” section above. In other cases, we collect location information such as city, state, country, and post code to facilitate order processing and order shipping for physical products.
• Market our Services – We use your information to market our Services. For example, we may send you an email notification about new product features. Additionally, we may use pseudonymized personal information collected on our website to better tailor marketing or website content, including to run or optimize our service, or for other purposes, such as internal research. For example, we may use market segmentation tactics for targeting purposes, to advertise products and services. To learn more about how we track and use your information, see our Cookie Notice here
• Store data – We store data on servers hosted by vultr.com. We use appropriate technical, administrative, and physical measures to secure your data during storage.

We share information about you with third parties only in the manner described below:

• Marketing and advertising – We do not sell information about you to advertisers or other third parties. We do however, share information such as your name and email address with our marketing partners. For example, we may send you an email notification about new product features. If this changes we will obtain your consent first.
• Mergers and acquisitions – If your personal information is transferred to a party unaffiliated with all that we are  as part of merger, acquisition, or sale of all or a portion of our assets, we will provide you with notice prior to transferring your personal information to the new entity. Notice will be provided directly through our Services.
• Legal purposes – We disclose your information when we believe that disclosure is (1) reasonably necessary to comply with any applicable law, regulation, subpoena, legal process, or enforceable governmental request; (2) necessary to enforce the provisions of the Notice; (3) required to enforce our Terms of Service, including investigation of potential violations; or (4) necessary to protect against harm to the rights, property, or safety of all that we are, our users, or the public as required or permitted by law.
• External processing and Subprocessors – We provide your information to other third parties to help us with our business activities, products, and services. These companies are authorized to use your information only as necessary to provide these services or perform them on our behalf. For example, we may share your IP address with our e-commerce partner to prevent fraud.

We use the following sub-processors to operate our Services. This list was last updated on July 25th 2022.

Legal Bases for Processing (for EEA users)

If you are an individual from the European Economic Area (“EEA”), we collect and process your personal data only where we have legal basis for doing so under applicable EU laws.  The legal basis depends on the Services you use and how you use them. This means we collect and use your personal data only:

• To fulfill our contractual obligations to you;
• To operate our business, including to improve and develop our services, for fraud prevention purposes, improve user experience, or other legitimate interest; and/or
• As otherwise in compliance with law.

If you have any questions about the legal basis for processing, please refer to the “Your Rights” section below or contact us at the address listed in the “Contact Us” section.

Use of Cookies and Other Tracking Technologies

We use cookies to collect your personal and other information as you navigate our Services. Cookies help make interactions with our Services easier and faster for our users. For more information, see our Cookie Notice here.

“Do-Not-Track”

We do not respond to web browser “Do-Not-Track” signals.

Behavioral Advertising and Targeted Ads

We do not serve targeted advertisements in our Services at this time. However, you may see targeted ads from us on other websites based on your browsing history or other online activities. We do not participate in the Network Advertising Initiative (NAI), Digital Advertising Alliance (DAA) or TrustArc opt-out programs.

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by using the links below:

– Facebook: https://www.facebook.com/settings/?tab=ads

– Google: https://www.google.com/settings/ads/anonymous

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

Your Choices

Where appropriate or legally required, we will describe how we use personal information, so you can make choices about how your data is used. You can notify us of your preferences during the information collection process and change your selection at any time by contacting us directly.

• Geolocation – We collect your geographic location when you use our Services. You can restrict our access to and collection of your location information by disabling location-sharing on your browser.
• Marketing emails – You can choose to stop receiving marketing emails by following the unsubscribe instructions included in these emails, or by using the email address listed in the “Contact Us” section below. If you opt out of receiving marketing emails, we may still send you non-promotional emails, such as emails about your all that we are account.
• Account information – You can stop all that we are from collecting information through your all that we are account by contacting us and requesting deactivation of your account using the email address listed in the “Contact Us” section below.

Your Rights

You have certain rights in connection with the personal information we obtain about you. To update your preferences, correct your information, limit the communications you receive from us, or submit a request to exercise your rights, please contact us as specified in the “Contact Us” section.

As required by law, you have the right to:

• Request access to certain personal information we maintain about you;
• Request that we update, correct, amend, erase or restrict certain personal information; and
• Exercise your right to data portability.

For all requests, you can contact us as provided in the “Contact Us” section below to request assistance.

In some circumstances you can withdraw consent you previously provided to us or object to the processing of your personal information, and we will apply your preferences moving forward.

To help protect your privacy and maintain security, we may take steps to verify your identity before granting you access to the information. We may also decline your access request, but in the event we do, we will provide an explanation for our decision. Your request and choices may be limited in certain cases: for example, if fulfilling your request would reveal information about another person, or if you ask to delete information which we or your administrator are permitted by law or have compelling legitimate interests to keep. If you have unresolved concerns, you may have the right to complain to a data protection authority in the country where you live, where you work or where you feel your rights were infringed.

Children’s Privacy

Our Services are not directed to children under the age of 13, and we do not knowingly collect information from children under the age of 13.

How Long We Retain Information

How long we keep information we collect about you depends on the type of information, as described below. We will either delete or anonymize your information or, if this is not possible (for example, the information is stored in backup archives), then we will securely store your information and isolate it from any further use until deletion is possible.

• Information about you and your all that we are Account – We retain your account information for as long as your account is active and a reasonable period thereafter in case you decide to re-activate our Services. We also retain some of your information as necessary to comply with our legal obligations, to resolve disputes, to enforce our agreements, to support business operations, and to continue to develop and improve our Services. Where we retain information for the improvement and development of our Services, we take steps to eliminate information that directly identifies you. If our Services are made available to you through our partners, we retain your information as long as required by the Partner. For more information, see “Information We Receive from Other Sources” above.
• Order and transaction information – When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.
• Marketing information – If you have elected to receive marketing emails from us, we retain information about your marketing preferences for a reasonable period of time from the date you last expressed interest in our Services, such as when you last opened an email from us or ceased using your all that we are account. We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date the information was created.

User Generated Content

As we have a social network, all our community members (users) must adhere to these terms to moderate content and prevent abusive behaviour.

All users agree to terms (EULA) and understand that there is no tolerance for objectionable content or abusive users

We will filter and delete objectionable content

We have a mechanism for users to flag objectionable content

And a mechanism for users to block abusive users

All that we are will act on objectionable content reports within 24 hours by removing the content and ejecting the user who provided the offending content

Security Safeguards

We use reasonable and appropriate physical, technical, and administrative safeguards to protect your information from unauthorized use, access, loss, misuse, alteration, or destruction. We also require that third party service providers acting on our behalf or with whom we share your information also provide appropriate security measures in accordance with industry standards. Notwithstanding our security safeguards, it is impossible to guarantee absolute security in all situations. If you have any questions about security of our Services, please contact us using the email address listed in the “Contact Us” section below.

Changes to this Privacy Notice

We periodically update this Notice to describe new features, products, or services, and how those changes affect our use of your information. If we make material changes to this Notice, we will provide notification through our services and/or notify you directly. We encourage you to review this Notice for updates each time you use our Services.

Third Party Services, Applications, and Websites

Certain third party services, websites, or applications you use, or navigate to from our Services may have separate user terms and privacy policies that are independent of this Notice. This includes, for example, websites owned and operated by our customers or partners. We are not responsible for the privacy practices of these third party services or applications.

Additionally, all that we are collaborates and has business relationships with other companies, for example, marketing partners (including analytics and ad-related services), who may also collect information from the all that we are services. Our Privacy Notice does not cover the actions of these or any third parties (except service providers acting solely on behalf of all that we are), and all that we are cannot control how such third parties may collect, use, or secure your data. For information about a third party’s privacy practices, please consult the privacy policy of that third party. We recommend carefully reviewing the user terms and privacy statement of each third party service, website, and/or application prior to use.

Definitions and interpretation

1. In this privacy policy, the following definitions are used:

2. In this privacy policy, unless the context requires a different interpretation:
   1. the singular includes the plural and vice versa;
   2. references to sub-clauses, clauses, schedules or appendices are to sub-clauses, clauses, schedules or appendices of this privacy policy;
   3. a reference to a person includes firms, companies, government entities, trusts and partnerships;
   4. “including” is understood to mean “including without limitation”;
   5. reference to any statutory provision includes any modification or amendment of it;
   6. the headings and sub-headings do not form part of this privacy policy.

Scope of this privacy policy

3. This privacy policy applies only to the actions of all that we are and Users with respect to this Website. It does not extend to any websites that can be accessed from this Website including, but not limited to, any links we may provide to social media websites.
4. For purposes of the applicable Data Protection Laws,  all that we are is the “data controller”. This means that all that we are determines the purposes for which, and the manner in which, your Data is processed.

Data collected

5. We may collect the following Data, which includes personal Data, from you:
   1. name;
   2. contact Information such as email addresses and telephone numbers;

in each case, in accordance with this privacy policy.

How we collect Data

6. We collect Data in the following ways:
   1. data is given to us by you  ; and
   2. data is collected automatically.

Data that is given to us by you

7. all that we are will collect your Data in a number of ways, for example:
   1. when you contact us through the Website, by telephone, post, e-mail or through any other means;
   2. when you register with us and set up an account to receive our products/services;
   3. when you make payments to us, through this Website or otherwise;

in each case, in accordance with this privacy policy.

Data that is collected automatically

8. To the extent that you access the Website, we will collect your Data automatically, for example:
   1. we automatically collect some information about your visit to the Website. This information helps us to make improvements to Website content and navigation, and includes your IP address, the date, times and frequency with which you access the Website and the way you use and interact with its content.
   2. we will collect your Data automatically via cookies, in line with the cookie settings on your browser. For more information about cookies, and how we use them on the Website, see the section below, headed “Cookies”.

Our use of Data

9. Any or all of the above Data may be required by us from time to time in order to provide you with the best possible service and experience when using our Website. Specifically, Data may be used by us for the following reasons:
   1. transmission by email of marketing materials that may be of interest to you;

in each case, in accordance with this privacy policy.

10. We may use your Data for the above purposes if we deem it necessary to do so for our legitimate interests. If you are not satisfied with this, you have the right to object in certain circumstances (see the section headed “Your rights” below).
11. For the delivery of direct marketing to you via e-mail, we’ll need your consent, whether via an opt-in or soft-opt-in:
    1. soft opt-in consent is a specific type of consent which applies when you have previously engaged with us (for example, you contact us to ask us for more details about a particular product/service, and we are marketing similar products/services). Under “soft opt-in” consent, we will take your consent as given unless you opt-out.
    2. for other types of e-marketing, we are required to obtain your explicit consent; that is, you need to take positive and affirmative action when consenting by, for example, checking a tick box that we’ll provide.
    3. if you are not satisfied about our approach to marketing, you have the right to withdraw consent at any time. To find out how to withdraw your consent, see the section headed “Your rights” below.
12. When you register with us and set up an account to receive our services, the legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract.
13. We may use your Data to show you all that we are adverts and other content on other websites. If you do not want us to use your data to show you all that we are adverts and other content on other websites, please turn off the relevant cookies (please refer to the section headed “Cookies” below).

Keeping Data secure

14. We will use technical and organisational measures to safeguard your Data, for example:
    1. access to your account is controlled by a password and a user name that is unique to you.
    2. we store your Data on secure servers.
15. Technical and organisational measures include measures to deal with any suspected data breach. If you suspect any misuse or loss or unauthorised access to your Data, please let us know immediately by contacting us via this e-mail address: connect@allthatweare.org
16. If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.

Data retention

17. Unless a longer retention period is required or permitted by law, we will only hold your Data on our systems for the period necessary to fulfil the purposes outlined in this privacy policy or until you request that the Data be deleted.
18. Even if we delete your Data, it may persist on backup or archival media for legal, tax or regulatory purposes.

Your rights

19. You have the following rights in relation to your Data:
    1. Right to access– the right to request (i) copies of the information we hold about you at any time, or (ii) that we modify, update or delete such information. If we provide you with access to the information we hold about you, we will not charge you for this, unless your request is “manifestly unfounded or excessive.” Where we are legally permitted to do so, we may refuse your request. If we refuse your request, we will tell you the reasons why.
    2. Right to correct– the right to have your Data rectified if it is inaccurate or incomplete.
    3. Right to erase– the right to request that we delete or remove your Data from our systems.
    4. Right to restrict our use of your Data– the right to “block” us from using your Data or limit the way in which we can use it.
    5. Right to data portability– the right to request that we move, copy or transfer your Data.
    6. Right to object– the right to object to our use of your Data including where we use it for our legitimate interests.
20. To make enquiries, exercise any of your rights set out above, or withdraw your consent to the processing of your Data (where consent is our legal basis for processing your Data), please contact us via this e-mail address: connect@allthatweare.org
21. If you are not satisfied with the way a complaint you make in relation to your Data is handled by us, you may be able to refer your complaint to the relevant data protection authority. For the UK, this is the Information Commissioner’s Office (ICO). The ICO’s contact details can be found on their website at https://ico.org.uk/.
22. It is important that the Data we hold about you is accurate and current. Please keep us informed if your Data changes during the period for which we hold it.

Links to other websites

23. This Website may, from time to time, provide links to other websites. We have no control over such websites and are not responsible for the content of these websites. This privacy policy does not extend to your use of such websites. You are advised to read the privacy policy or statement of other websites prior to using them.

Changes of business ownership and control

24. all that we are may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of all that we are. Data provided by Users will, where it is relevant to any part of our business so transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this privacy policy, be permitted to use the Data for the purposes for which it was originally supplied to us.
25. We may also disclose Data to a prospective purchaser of our business or any part of it.
26. In the above instances, we will take steps with the aim of ensuring your privacy is protected.

Cookies

27. This Website may place and access certain Cookies on your computer. all that we are uses Cookies to improve your experience of using the Website and to improve our range of products and services.   all that we are has carefully chosen these Cookies and has taken steps to ensure that your privacy is protected and respected at all times.
28. All Cookies used by this Website are used in accordance with current UK and EU Cookie Law.
29. Before the Website places Cookies on your computer, you will be presented with a message bar requesting your consent to set those Cookies. By giving your consent to the placing of Cookies, you are enabling all that we are to provide a better experience and service to you. You may, if you wish, deny consent to the placing of Cookies; however certain features of the Website may not function fully or as intended.
30. This Website may place the following Cookies:

31. You can find a list of Cookies that we use in the Cookies Schedule.
32. You can choose to enable or disable Cookies in your internet browser. By default, most internet browsers accept Cookies but this can be changed. For further details, please consult the help menu in your internet browser.
33. You can choose to delete Cookies at any time; however you may lose any information that enables you to access the Website more quickly and efficiently including, but not limited to, personalisation settings.
34. It is recommended that you ensure that your internet browser is up-to-date and that you consult the help and guidance provided by the developer of your internet browser if you are unsure about adjusting your privacy settings.
35. For more information generally on cookies, including how to disable them, please refer to aboutcookies.org. You will also find details on how to delete cookies from your computer.

General

36. You may not transfer any of your rights under this privacy policy to any other person. We may transfer our rights under this privacy policy where we reasonably believe your rights will not be affected.
37. If any court or competent authority finds that any provision of this privacy policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this privacy policy will not be affected.
38. Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.
39. This Agreement will be governed by and interpreted according to the law of England and Wales. All disputes arising under the Agreement will be subject to the exclusive jurisdiction of the English and Welsh courts.

Contact Us

If you have questions about this Notice or our information handling practices, please contact us at connect@allthatweare.org or write to us at:

All That We Are, Create Beauty Ltd, First Floor, 85 Great Portland Street, London, W1W 7LT, United Kingdom