Privacy Policy

This Privacy Policy explains how SkinVault, Inc. (“SkinVault,” “we,” “us” or “our”) collects, uses, discloses and safeguards your personal information when you use the SkinVault website and services (the “Service”). By using the Service, you consent to the practices described here.

1. Information We Collect

We collect the following categories of information:

• Account information — such as your name, email address and any credentials you create when registering.
• Order and payment information — when you place an order, payment is processed by Stripe. We receive limited transaction details (such as confirmation status and the last four digits of a card) but do not store full payment-card numbers on our servers.
• Usage and analytics data — including pages viewed, features used, referring URLs, device and browser type, approximate location derived from IP address, and timestamps.
• Cookies and similar technologies — as described in our Cookie Policy.
• Communications — information you provide when you contact support or correspond with us.

2. How We Use Your Information

• To provide, operate, maintain and improve the Service;
• To process orders and demonstrate checkout via Stripe;
• To authenticate users and secure accounts;
• To respond to inquiries and provide customer support;
• To analyze usage, monitor performance and develop new features;
• To detect, prevent and address fraud, abuse and security incidents; and
• To comply with legal obligations and enforce our terms.

3. Legal Bases for Processing (GDPR)

If you are in the European Economic Area or the United Kingdom, we process your personal data under one or more of the following legal bases:

• Performance of a contract — to provide the Service and process your orders;
• Legitimate interests — to secure, analyze and improve the Service, where not overridden by your rights;
• Consent — for non-essential cookies and certain communications, which you may withdraw at any time; and
• Legal obligation — to comply with applicable law.

4. How We Share Information

We do not sell your personal information. We share it only as described below:

• Payment processing — with Stripe, to process and verify transactions, subject to Stripe’s own privacy policy;
• Service providers — with analytics, hosting and infrastructure vendors who process data on our behalf under appropriate safeguards;
• Legal and safety — when required by law, legal process, or to protect the rights, property or safety of SkinVault, our users or others; and
• Business transfers — in connection with a merger, acquisition or sale of assets, with notice where required.

5. Cookies

We use cookies and similar technologies to operate the Service, remember your preferences and understand usage. For details and your choices, see our Cookie Policy.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, to comply with our legal obligations, resolve disputes and enforce our agreements. When data is no longer needed, we delete or anonymize it.

7. Security

We implement reasonable administrative, technical and organizational measures designed to protect your information, including encryption in transit and restricted access. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

We are based in the United States and may process your information in countries other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards, such as standard contractual clauses, to protect it in accordance with applicable law.

9. Your Rights

Depending on your location, you may have rights regarding your personal information, including the right to:

• Access, correct or delete your personal data;
• Object to or restrict certain processing;
• Request portability of your data;
• Withdraw consent where processing is based on consent; and
• For California residents (CCPA/CPRA): know what personal information is collected, request deletion, and opt out of any “sale” or “sharing” of personal information (we do not sell your data).

To exercise these rights, contact us at support@skinvault.com. We will respond consistent with applicable law. You also have the right to lodge a complaint with your local data-protection authority.

10. Children’s Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

12. Contact

For privacy questions or requests, contact us at support@skinvault.com or write to SkinVault, Inc., 123 Market Street, Suite 400, Wilmington, DE 19801, USA. See also our Contact page.