YOUR PRIVACY MATTERS

Privacy Policy

Learn how we collect, use, and protect your information while creating a safe and trusted experience for our community.

HOW LONG WE RETAIN YOUR DATA

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

WHAT RIGHTS YOU HAVE OVER YOUR DATA

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Visitor comments may be checked through an automated spam detection service.

1. THE SHAKTI’S APOTHECARY COMMITMENT TO PROTECTING PRIVACY

We consider you an important customer. Our priority is to offer you exceptional products, events and experiences throughout the world.

Your complete satisfaction and confidence in Shakti’s Apothecary is absolutely essential to us.

That’s why, as part of our commitment to meeting your expectations, we have set up (and we had a privacy policy before the much-anticipated GDPR – General Data Protection Regulation ;-)) a customer personal data protection charter. This charter formalizes our commitments to you and describes how Starlesque uses your personal data.

2. SCOPE OF APPLICATION

In this charter, “Shakti’s Apothecary” means:
Shakti’s Apothecary is a parent company, with registered offices at 1292 High St. #1243 Eugene, OR 97401
Your personal data will be dealt with by Starlesque acting as Data Controllers for their own, separate, purposes. In summary:
Shakti’s Apothecary will process your data, which allows Shakti’s Apothecary to collect the data necessary to organize your event and experiences under a Shakti’s Apothecary brand and to communicate this data to the concerned vendors. Shakti’s Apothecary also manages a global database of clients who have participated with the Starlesque brand. Shakti’s Apothecary will process your data to manage its contractual relationship with you (invoicing, payment, booking management etc.), to perform marketing activities and to comply with its legal obligations.

Shakti’s Apothecary has communicated the principles set out in this charter to all of the branded affiliates, franchises, and their respective owners. We will do our upmost to ensure that all hotels comply with the applicable data protection laws and this charter in relation to the processing of your personal data.

3. SHAKTI’S APOTHECARY’S TEN PRINCIPLES FOR PROTECTING YOUR PERSONAL DATA

We have instituted the following ten principles at Shakti’s Apothecary:
Lawfulness: We use personal data only if we obtain the consent of the person, Orit is necessary to do so for the performance of a contract to which the person is a party, Orit is necessary for compliance with a legal obligation, Orit is necessary to protect the vital interests of the person, OR we have a legitimate interest in using personal data and our usage does not adversely affect the persons’ rights

Fairness: We can explain why we need the personal data we collect.

Purpose limitation and data minimization: We only use personal data that we really need. If the result can be achieved with less personal data, then we make sure we use the minimum data required.

Transparency: We inform people about the way we use their personal data. We facilitate the exercise of the people’s rights: access to their personal data, rectification and erasure of their personal data and the right to object to the use of their personal data.

Storage limitation: We retain personal data for a limited period. We ensure the security of personal data, i.e. its integrity and confidentiality. If a third party uses personal data, we make sure it has the capacity to protect that personal data. If personal data is transferred outside of the United States, we ensure this transfer is covered by specific legal tools. If personal data is compromised (lost, stolen, damaged, unavailable…), we notify such breaches to the respective country’s responsible authority and to the person concerned, if the breach is likely to cause a high-risk in respect of the rights and freedoms of this person.

For any questions concerning the ten principles of Shakti’s Apothecary data protection policies, please contact the Data Privacy department whose details appear in the clause “Your rights”.

4. WHAT PERSONAL DATA IS COLLECTED?

At various times, we may collect information about you and/or the persons accompanying you, including the following:
Contact details (for example, last name, first name, telephone number, email)Personal information (for example, date of birth, nationality)Information relating to your children (for example, first name, date of birth, age)Your credit card number (for transaction and reservation purposes)Information contained on a form of identification (such as ID card, passport or driver license) Your membership number for the Starlesque membership program or another partner program and information related to your activities within the context of the membership program. Your arrival and departure dates Your preferences and interests (for example, type of dance, music, cultural interests, food and beverages preferences, etc.) Your questions/comments, during or following an event in one of our Starlesque branded experiences. Technical and location data you generate as a result of using our websites and applications.
The information collected in relation to people under 16 years of age is limited to their name, nationality and date of birth, which can only be supplied to us by an adult. We would be grateful if you could ensure that your children do not send us any personal data without your consent (particularly via the Internet). If such data is sent, you can contact the Data Privacy department (see clause “Your rights” below) to arrange for this information to be deleted.
To meet your requirements or provide you with a specific service (such as dietary requirements), we may have to collect sensitive information, such as information concerning race, ethnicity, political opinions, religious and philosophical beliefs, union membership, or details of health or sexual orientation. In this case, we will only process this data if you provide your express prior consent.

5.WHEN IS YOUR PERSONAL DATA COLLECTED?

Personal data may be collected on a variety of occasions, including:
Activities such as booking and paying for events and services provided during a consultation, complaints and/or disputes. Participation in marketing programs or events: Signing up for membership programs, participation in customer surveys (for example, the Guest Satisfaction Survey) or competitions. Subscription to newsletters, to receive offers and promotions via email. Transmission of information from third parties: Tour operators, travel agencies (online or not), hotels and others Internet activities: Connection to Shakti’s Apothecary websites (IP address, cookies in Shakti’s Apothecary with our Policy about the use of tracers) Online forms (online reservation, event inquires, questionnaires, Shakti’s Apothecary pages on social networks, social networks login devices such as Facebook login, conversations with chatbot, etc.).

6. WHAT PURPOSES IS YOUR DATA COLLECTED FOR AND HOW LONG DO WE RETAIN IT?

The table below sets out why we process your data, the lawful basis for the processing and the associated retention period:
Purpose/Activity Lawful basis for processing including the basis of legitimate interest, retention period, meeting our obligations to our customers. Performance of a contract with you. Necessary to comply with a legal obligation. Necessary for our legitimate interest in running our business and providing you with requested products and services.

10 years from the booking in accordance with legal obligations. Managing the reservation of events, bookings, orders and accommodation of requests, in particular the creation and storage of legal documents in compliance with accounting standards. Monitoring your use of services. Performance of a contract with you. Necessary for our legitimate interest in running our business and providing you with requested products and services.

For the duration of your event. Managing our relationship with customers before, during and after your event. Managing the membership program. Inputting details into the customer database. Segmentation analysis based on reservation history and customer preferences with a view to sending targeted communications, subject to the requirements of the US Privacy laws. Predicting and anticipating future customer behaviors. Developing statistics, commercial scores and carrying out reporting of the same. Providing context data for our marketing tools. This happens when a customer visits a Group website or makes a reservation. Understanding and managing the preferences of new or repeat customers. Sending customers newsletters, promotions, tourist, hotel or service offers, offers from Shakti’s Apothecary or its commercial partners, or contacting you by telephone subject to the requirements of the US privacy laws. Performance of our contract with you and for the management of your membership in the membership program.

Necessary for our legitimate interests in promoting our services, performing direct marketing activities (considering your commercial relationship with one of Shakti’s Apothecary third party vendors, franchisees, or affiliates) and improving our services.

3 years from the last date on which you have interacted with us in any way, if you are not a member of the membership program.

6 years from the last date on which you have interacted with us in any way, if you are a member of the membership program.

Improving our event service by: Personalizing your service, improving the quality of service and customer experience. Processing your personal data through our customer marketing program to carry out marketing operations, promote brands and gain a better understanding of your requirements and wishes. Adapting our products and services to better meet your requirements. Customizing the commercial offers and promotional messages we send you. Informing you of special offers and any new services created by Shakti’s Apothecary or one of its subsidiaries or commercial partners. Performance of contract with you in relation to the management of your membership in the membership program.
Necessary for our legitimate interests in promoting our services, performing direct marketing activities (considering your commercial relationship with Shakti’s Apothecary) and improving our services.

3 years from the last date on which you have interacted with us in any way, if you are not a member of the membership program.

6 years from the last date on which you have interacted with us in any way, if you are a member of the membership program.

Use a trusted third party to cross-check, analyze and combine your collected data at the time of booking or at the time of your event, to determine your interests and develop your customer profile and to allow us to send you personalized offers. Necessary for our legitimate interests in promoting our services, performing direct marketing activities (considering your commercial relationship with one of the Shakti’s Apothecary third party vendors, franchisees or affiliates) and improving our services. 3 years from the last date on which you have interacted with us in any way, if you are not a member of the membership program.

6 years from the last date on which you have interacted with us in any way, if you are a member of the membership program.

Improving Shakti’s Apothecary services, in particular: Carrying out surveys and analyses of questionnaires and customer comments. Managing claims/complaints. Offering you the benefits of our membership program. Performance of contract with you (for the management of your membership in the membership program).

Necessary for our legitimate interests in promoting our services, performing direct marketing activities (considering your commercial relationship with one of the Shakti’s Apothecary’s entities)) and improving our services.

3 years from the last date on which you have interacted with us in any way, if you are not a member of the membership program.

6 years from the last date on which you have interacted with us in any way, if you are a member of the membership program.

6 years from the date of closure of your file in case of a claim or a complaint.

Securing and enhancing your use of Shakti’s Apothecary websites, applications and services by: Improving navigation; Maintenance and support; and Implementing security and fraud prevention. Necessary for our legitimate interests in running our business, provision of administration and IT services and network security to prevent fraud13 months from the collection of the information. Internal management of lists of customers having behaved inappropriately during their stay at the hotel (aggressive and anti-social behavior, non-compliance with safety regulations, theft, damage and vandalism or payment incidents). Necessary for our legitimate interests in running our business and to prevent fraud and the abuse of our property and staff. Up to 122 days from the recording of an event. Securing payments by determining the associated level of fraud risk. As part of this analysis, Starlesque may use the Starlesque risk prevention service provider to refine their analysis.

Depending on the results of the investigations carried out, Shakti’s Apothecary may take security measures, in particular Shakti’s Apothecary may request the use of a different booking channel or for the use of an alternative payment method. These measures will have the effect of suspending the execution of the booking or, if the result of the analysis does not guarantee the safety of the order, of cancelling it. Fraudulent use of a means of payment leading to payment default may result in the entry of data in the Shakti’s Apothecary incident file, which may lead Shakti’s Apothecary to block future payments or carry out additional checks.

Necessary for our legitimate interests in running our business and to prevent fraud. 90 days to our database to allow for analysis and controls and then 2 years in a separated database used for improving the system.

In case of recording in the incident file, 2 years from recording or until regularization of the situation if earlier.
Securing properties and persons and preventing non-payments.

For these reasons, some events will have a feature that allow them to include in the category of “ineffective” customers, any customer whose behavior has been inappropriate in the following ways: aggression and rudeness, non-compliance with the contract, failure to observe safety rules, theft, damage and vandalism, or payment issues. The status of “ineffective” may cause Shakti’s Apothecary, where this listing originated, to refuse a customer’s reservation when he/she returns for service or to book an event.

Necessary for our legitimate interests in running our business, securing properties and persons and preventing non-payments. 122 days from registration. Using services of Shakti’s Apothecary in the event of serious events affecting the event in question (natural disasters, terrorist attacks, etc.) Protection of the vital interests of the guests. For the duration of the event. Conforming to any applicable legislation (for example, storing of accounting documents), including: Managing requests to unsubscribe from newsletters, promotions, tourist offers and satisfaction surveys. Managing data subject’s requests regarding their personal data. Necessary to comply with a legal obligation. As stipulated in the respective country’s legislation.

7. CONDITIONS OF THIRD-PARTY ACCESS TO YOUR PERSONAL DATA

Shakti’s Apothecary operates in many countries and we endeavor to provide you with the same services throughout the world. Thus, we must share your personal data with internal and external recipients subject to the following conditions:
We share your data with several authorized people and departments within Shakti’s Apothecary in order to offer you the best experiences. The following teams may have access to your data: Consultant, Instructors, staff, reservation staff using Shakti’s Apothecary booking tools. IT departments. Commercial partners and marketing services. Medical services if applicable. Legal services if applicable. Generally, any appropriate person within Starlesque entities for certain specific categories of personal data.

In particular, the data related to your events, preferences, satisfaction and, if the case may be, your membership program membership are shared between vendors operating in accordance with Shakti’s Apothecary affiliates and third parties. This data is used to improve the quality of service and your experience in each of our events. In this context, your data is processed jointly by Shakti’s Apothecary and these vendors and affiliates. To pursue this legitimate interest, whilst safeguarding your rights and liberties, a specific joint controllership agreement describes the obligations and responsibilities of Shakti’s Apothecary. You may, at any time, object to the sharing of this data between third party vendors, affiliates, franchisees and Shakti’s Apothecary by contacting the Data Privacy department whose details appear in the clause “Your rights”. You can also request a summary of the key points of the joint controllership agreement.
With service providers and partners: your personal data may be sent to a third party for the purposes of supplying you with services and improving your stay, for example: External service providers: IT sub-contractors, international call centers, banks, credit card issuers, external lawyers, dispatchers, printers. Commercial partners: Shakti’s Apothecary may, unless you specify otherwise to the Data Privacy department, enhance your profile by sharing certain personal information with its preferred commercial partners. In this case, a trusted third party may cross-check, analyze and combine your data. This data processing will allow Shakti’s Apothecary and its privileged contractual partners to determine your interests and customer profile to allow us to send you personalized offers. Social networking sites: To allow you to be identified on the Starlesque website without the need to fill out a registration form, Starlesque has put in place a social network login system. If you log in using the social network login system, you explicitly authorize Shakti’s Apothecary to access and store the public data on your social network account (e.g. Facebook, LinkedIn, Google, Instagram…), as well as other data stated during use of such social network login system. Shakti’s Apothecary may also communicate your email address to social networks in order to identify whether you are already a user of the concerned social network and in order to post personalized, relevant adverts on your social network account if appropriate. With local authorities: We may be obliged to send your information to local authorities if this is required by law or as part of an inquiry. We will ensure that any such transfer is carried out in accordance with local regulations.

8. PROTECTION OF YOUR PERSONAL DATA DURING INTERNATIONAL TRANSFERS

For the purposes set out in clause 6 of this charter, we may transfer your personal data to internal or external recipients who may be in countries offering different levels of personal data protection.

Consequently, in addition to implementation of this charter, Shakti’s Apothecary employs appropriate measures to ensure secure transfer of your personal data to a Starlesque entity or to an external recipient located in a country offering a different level of privacy from that in the country where the personal data was collected.

Your data may be sent, in particular as part of the reservation process, to Shakti’s Apothecary affiliates and third party vendors located outside of the United States, in particular in the following countries: South Africa, Algeria, Saudi Arabia, Argentina, Australia, Brazil, Cambodia, Cameroon, Canada, Chile, China, Colombia, South Korea, Ivory Coast, Cuba, Egypt, United Arab Emirates, Ecuador, EU, Fiji, Ghana, Guatemala, India, Indonesia, Israel, Japan, Laos, Lebanon, Madagascar, Malaysia, Morocco, Mexico, Monaco, Myanmar, Nigeria, New Zealand, Panama, Paraguay, Peru, Philippines, Qatar, Democratic Republic of Congo, Dominican Republic, Russia, Singapore, Switzerland, Chad, Thailand, Vietnam, Taiwan.

Other than those that are required to carry out your reservation, data transfers to countries having different levels of personal data protection, are regulated by standard contractual clauses defined by the United States an Commission. Data transfers to the United States may also be made to entities that belong to the US-Privacy Shield.

9. DATA SECURITY

Shakti’s Apothecary takes appropriate technical and organizational measures, in accordance with applicable legal provisions to protect your personal data against illicit or accidental destruction, alteration or loss misuse and unauthorized access, modification or disclosure. To this end, we have taken technical measures (such as firewalls) and organizational measures (such as a user ID/password system, means of physical protection etc.) to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services. In relation to the submission of credit card data when making a reservation, SSL (Secure Socket Layer) encryption technology is used to guarantee a secure transaction. Organizational measures ensure the security of the processing.

10. COOKIES

Shakti’s Apothecary uses cookies or other tracers on its websites. To learn more about the way Shakti’s Apothecary uses tracers and to configure them, please consult our Policy about the use of tracers.

11. YOUR RIGHTS

You have the right to obtain information about and access your personal data collected by Shakti’s Apothecary, subject to applicable legal provisions. Also, you have the right to have your personal data rectified, erased or have the processing of it restricted. Furthermore, you have the right to data portability and to issue instructions on how your data is to be treated after your death. You can also object to the processing of your personal data, to the sharing of the data related to your events, preferences and satisfaction operating under the Starlesque brands.

If you wish to exercise any of your above rights, please contact the Data Privacy department for Shakti’s Apothecary directly by sending an email to shaktisapothecary@gmail.com or by writing to the address below:
Shakti’s Apothecary
1292 High St. #1243
Eugene, OR 97401

For the purposes of confidentiality and personal data protection, we will need to check your identity to respond to your request. In case of reasonable doubts concerning your identity, you may be asked to include a copy of an official piece of identification, such as an ID card or passport, along with your request. A black and white copy of the relevant page of your identity document is sufficient.

All requests will receive a response as swiftly as possible.

You may also exercise your rights in respect of your personal data that is stored and processed by a third party. To do this, you must contact the third party directly. You will find all necessary information to contact them at www.ShaktisApothecary.com. If you need any assistance, please contact Shakti’s Apothecary Data Privacy Department by writing to the above address.