Privacy Policy

Personal Information We Collect or Process

“Personal information” means information that identifies or can reasonably be linked to you or another person. It does not include anonymized or de-identified data. Depending on how you interact with the Services, where you live, and as permitted or required by law, we may collect or process:

• Contact details (name, billing/shipping address, phone, email).
• Financial information (payment card/account numbers, payment details, transaction confirmations).
• Account information (username, password, preferences, settings).
• Transaction information (items viewed, added to cart/wishlist, purchased, returned, exchanged or cancelled; past orders).
• Communications you send us (e.g., customer support messages).
• Device information (device, browser, network, IP address, identifiers).
• Usage information (how and when you navigate or interact with the Services).

Personal Information Sources

• Directly from you (account creation, checkout, messages, forms).
• Automatically via the Services (your device and cookies or similar technologies).
• Service providers acting on our behalf (technology, payments, analytics, support, fulfillment).
• Partners or third parties as permitted by law.

How We Use Your Personal Information

• Provide, tailor & improve the Services (process payments, fulfill orders, manage accounts, shipping/returns, reviews, personalizing recommendations).
• Marketing & advertising (email, SMS, postal mail; showing ads on our Services or other sites based on activity and preferences).
• Security & fraud prevention (authenticate accounts, detect/investigate abuse or unlawful activity, protect public safety).
• Communicating with you (support, order updates, account notices).
• Legal reasons (comply with law, respond to lawful requests, enforce terms and policies).

How We Disclose Personal Information

• With Shopify and service providers (IT, payments, analytics, support, cloud, fulfillment, shipping).
• With business & marketing partners to deliver ads/marketing; they use data per their own privacy notices. Depending on where you live, you may have the right to opt out of targeted advertising.
• With your direction or consent (e.g., shipping, social login/widgets).
• Within our corporate group or affiliates.
• For business transactions & legal purposes (merger, bankruptcy, subpoenas/warrants, enforce terms, protect rights and users).

Relationship with Shopify

Our Store is hosted by Shopify, which collects and processes personal information about your access to and use of the Services to provide and improve them. Information you submit may be transmitted to and shared with Shopify and third parties (which may be located in other countries) to operate and improve the Services. Shopify may also use certain personal information for enhanced features that combine data across merchants. In those cases, Shopify is responsible for such processing and for requests to exercise rights regarding that processing.

Learn more: Shopify Consumer Privacy Policy • Exercise rights with Shopify: Shopify Privacy Portal

Cookies & Similar Technologies

We use cookies, pixels and similar tools to operate the site, measure performance, understand usage, and personalize content and ads. You can manage browser cookie settings and, where required by law, we will request your consent before using non-essential cookies. For interest-based advertising, you may also opt out via your device settings or industry tools (e.g., AboutAds).

Third-Party Websites & Links

The Services may link to third-party sites or platforms. Please review their privacy and security policies. We are not responsible for those sites or for information you make public on third-party platforms.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from anyone under the age of majority in your jurisdiction. If you are a parent or guardian and believe a child provided personal information, please contact us to request deletion. As of this policy’s effective date, we do not have actual knowledge that we “sell” or “share” personal information of individuals under 16 years of age.

Security & Retention of Your Information

No security measures are perfect, and information sent over the Internet may not be secure in transit. Please avoid using unsecure channels for sensitive information. We retain personal information for as long as necessary to provide the Services, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements.

Your Rights & Choices

Depending on where you live, you may have some or all of the following rights (subject to limitations):

• Access / Know the personal information we hold about you.
• Delete personal information we maintain about you.
• Correct inaccurate personal information.
• Portability (receive a copy and request transfer in certain cases).
• Marketing choices (unsubscribe at any time via our email footer; transactional emails may still be sent).

If you reside in the UK or EEA, you may also: object to or restrict certain processing, and withdraw consent where processing is based on consent (without affecting prior lawful processing). To exercise rights available on the Services or by law, contact us using the details below. For data processed by Shopify, see the Shopify Privacy Policy or Shopify Privacy Portal.

We may need to verify your identity and, where permitted by law, may process requests via an authorized agent with appropriate proof. We do not discriminate for exercising privacy rights.

Complaints

If you have concerns about our handling of your personal information, please contact us first (details below). Depending on where you live, you may have the right to appeal our decision or lodge a complaint with your local data protection authority. For EEA authorities, see the official list of supervisory authorities.

International Transfers

We may transfer, store and process personal information outside the country where you live. If we transfer personal information out of the EEA or UK, we rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses (or UK equivalents), unless the destination offers an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. We will post the revised version on this page, update the “Last updated” date, and provide notice as required by law.

Contact

Questions or requests? Email hello@nacre-beauty.com or write to:
NACRE BEAUTY
353 Lexington Avenue, 4th Floor PMB261
New York, NY 10016, USA

For data protection purposes, NACRE BEAUTY is the data controller of your personal information.