Privacy Policy

01.Information We Collect

We collect different types of information to provide and improve our services. The categories of personal information we may collect include:

We collect this information when you create an account, place an order, contact customer service, subscribe to our newsletter, opt into SMS messaging, or simply browse the Site.

02.How We Use Your Information

We use the information we collect for the following purposes:

• Order processing: to process, fulfill and deliver your orders, including shipping and customer service support;
• Communication: to contact you about your purchase, inquiries, order updates and customer service matters;
• Marketing: to send promotions, news, product updates or relevant content — only if you have opted in;
• Improving the Site: to analyze how visitors use the Site, improve user experience, and develop new features;
• Security & fraud prevention: to detect and prevent fraudulent activity, protect our customers and comply with our legal obligations;
• Legal compliance: to comply with applicable laws, regulations, court orders or government requests.

03.Legal Basis for Processing

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with similar laws, we process your personal data on the following legal bases:

• Contract: when processing is necessary to fulfill an order or perform a contract with you;
• Consent: when you have given us explicit consent (e.g., subscribing to newsletters, opting into SMS);
• Legal obligation: when processing is required by applicable law (e.g., tax records);
• Legitimate interests: when processing is necessary for our legitimate business interests, such as fraud prevention, site security and improving our services, provided your rights do not override those interests.

04.Sharing of Information

We may share your personal information with the following categories of third parties:

• Payment processors (Stripe) — to securely process your payment;
• Shipping & logistics carriers (e.g., USPS, UPS, FedEx) — to deliver your orders;
• Email & SMS service providers — to send transactional and marketing communications you have opted into;
• Analytics & advertising platforms (e.g., Google Analytics, Google Ads, Meta Ads) — to measure performance and improve our marketing;
• Hosting & security providers (e.g., Elementor Hosting, Cloudflare) — to operate the Site securely;
• Legal & regulatory authorities — when required by law, court order or to protect our rights and safety.

All third-party service providers are required to handle your information in accordance with applicable privacy laws and our agreements with them.

05.SMS Communications

If you opt in to receive SMS messages from EcoSkin Supplies via a web form or other medium, we will use your phone number to send transactional and service-related messages, including order confirmations, shipping updates, appointment reminders, post-purchase instructions and customer service notifications.

SMS opt-in is optional and is not a condition of any purchase. Your phone number and message data are not shared with third parties for marketing purposes. We retain SMS records only as long as necessary to provide the service and comply with legal obligations.

06.Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies (such as web beacons, pixels and local storage) to enhance your browsing experience, analyze Site performance, and support advertising efforts.

Types of cookies we use

• Strictly necessary cookies: required for the Site to function (e.g., shopping cart, checkout);
• Functional cookies: remember your preferences (e.g., language, currency);
• Analytics cookies: help us understand how visitors use the Site (e.g., Google Analytics);
• Marketing cookies: used to deliver relevant advertising on the Site and on third-party platforms (e.g., Google Ads, Meta Ads).

You can manage your cookie preferences at any time through our cookie consent banner. You can also configure your browser to reject cookies; however, doing so may limit some features of the Site.

For more information about cookies, you can visit allaboutcookies.org.

07.Third-Party Services

The Site may contain links to third-party websites, plugins or services. This Privacy Policy applies only to ecoskinsupplies.com. We are not responsible for the privacy practices of third-party sites and encourage you to read their privacy policies before providing them with your personal information.

Examples of third-party services we use include, without limitation:

• Google Analytics & Google Ads — for analytics and advertising;
• Stripe — for secure payment processing;
• WordPress, WooCommerce, Elementor, Yoast SEO — Site infrastructure and SEO;
• Cloudflare — security, content delivery and email obfuscation;
• TranslatePress — multilingual translation;
• Complianz — cookie consent management.

08.Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, tax or reporting requirements.

• Order records: retained for as long as required by U.S. tax and accounting laws (typically 7 years);
• Marketing data: retained while you are opted in, plus a reasonable period after opt-out for compliance purposes;
• Browsing & analytics data: typically retained for 14–26 months in line with industry standards;
• Customer service interactions: retained for a reasonable period to provide ongoing support and quality assurance.

When data is no longer needed, we will securely delete or anonymize it.

09.Data Security

We implement administrative, technical and physical security measures designed to protect your personal information from unauthorized access, alteration, disclosure or destruction. These measures include SSL/TLS encryption, secure hosting environments, restricted access to data, and regular security reviews.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information using industry-standard practices, we cannot guarantee absolute security. If you have reason to believe your interaction with us is no longer secure, please contact us immediately.

10.International Data Transfers

EcoSkin Supplies is based in the United States, and our servers and service providers may be located in the U.S. or other countries. If you are accessing the Site from outside the United States, please be aware that your information may be transferred to, stored and processed in the United States, where data protection laws may differ from those in your country.

By using the Site, you consent to the transfer of your information to the United States and to the processing of that information as described in this Privacy Policy.

11.Your Rights (CCPA / GDPR)

Depending on your location, you may have certain rights regarding your personal information:

For all users

• Access: request a copy of the personal data we hold about you;
• Correction: request correction of inaccurate or incomplete information;
• Deletion: request deletion of your personal data, subject to legal retention requirements;
• Withdrawal of consent: withdraw your consent for marketing communications at any time.

For California residents (CCPA / CPRA)

• Right to know what personal information we collect, use, disclose and sell (we do not sell);
• Right to delete personal information we have collected;
• Right to opt out of the sale or sharing of personal information (we do not sell);
• Right to non-discrimination for exercising your rights.

For EEA / UK residents (GDPR)

• Right to data portability;
• Right to object to processing based on legitimate interests;
• Right to restrict processing under certain circumstances;
• Right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, please contact us at [email protected]. We will respond within the timeframe required by applicable law (typically 30 days). We may need to verify your identity before processing your request.

12.Children’s Privacy

The Site is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information without parental consent, please contact us at [email protected] and we will take steps to delete such information.

13.Do Not Track Signals

Some browsers offer a “Do Not Track” (DNT) feature that signals websites you visit not to track your activity. Currently, there is no industry standard for how websites should respond to DNT signals, and we do not respond to DNT signals at this time. You can manage your tracking preferences through our cookie consent banner.

14.Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. The updated version will be posted on this page with a revised “Last updated” date. For significant changes, we will provide more prominent notice (such as a banner on the Site or an email notification).

Your continued use of the Site after changes are posted constitutes your acceptance of the revised Policy. We encourage you to review this page periodically.

15.Contact Us

If you have any questions, comments, requests or concerns regarding this Privacy Policy or how we handle your personal information, please contact us: