Privacy Policy

1. Information We Collect

We collect the following categories of personal information:

• Identity & Contact: Name, email address, phone number, shipping and billing address.
• Payment Information: Processed securely via Stripe. Full card numbers are never stored on our servers.
• Order History: Products purchased, order amounts, fulfillment status, and related communications.
• Browsing & Analytics: Pages visited, products viewed, session data, and conversion events collected via our internal analytics system.
• Wholesale Account Data: Business name, reseller certificates, tax IDs, and wholesale application information.
• Uploaded Files: Reseller certificates or other documents you submit as part of a wholesale application.
• Communications: Emails, support tickets, and inquiry form submissions.

2. How We Use Your Information

• Processing and fulfilling your orders, including shipping and delivery.
• Communicating with you about order status, invoices, and shipping updates.
• Managing wholesale accounts, pricing, and business relationships.
• Improving our website, products, and customer experience through analytics.
• Sending marketing communications (with your consent) such as product announcements and promotions.
• Complying with legal obligations, including tax reporting and record keeping.
• Preventing fraud and ensuring the security of our platform.

3. Third-Party Services

We share data with the following third-party services only as necessary to operate our business:

4. Cookies & Tracking

• Essential Cookies: Session cookies for authentication and cart functionality. These are required for the site to operate.
• Analytics: Our internal analytics system tracks page views and conversion events. Google Analytics (when active) collects anonymous browsing data.
• Shopping Listing Attribution: When you reach our shop from a free Google product listing, Google adds a tracking marker to the link (a srsltid value in the web address). It lets Google report, in aggregate, which listings led to an order. It carries no personal information and is not used for advertising.
• Google Customer Reviews: If you choose to opt in on the order confirmation page, your order number, email address, destination country, and estimated delivery date are shared with Google so it can invite you to review your purchase. Participation is entirely optional.
• No Advertising Cookies: We do not use third-party advertising cookies or sell data to advertising networks.

Cookie preferences can be managed at the browser level. To opt out of Google Analytics specifically, install Google's official opt-out browser add-on at tools.google.com/dlpage/gaoptout. Disabling cookies in your browser will also prevent analytics tracking, though this may affect site functionality. To exercise your data rights, submit a data request.

5. Data Retention

• Order Records: Retained indefinitely for tax, legal, and accounting purposes.
• Analytics Data: Retained for 14 months in Google Analytics (Google's default), then automatically purged.
• Abandoned Cart Data: Retained for 90 days, then automatically deleted.
• Account Data: Retained for the duration of your account plus 30 days after deletion request.
• Communications: Email records are retained for 24 months for customer service purposes.

6. Your Rights

You have the right to:

• Request a copy of the personal data we hold about you.
• Request correction of inaccurate personal data.
• Request deletion of your personal data (subject to legal retention requirements).
• Opt out of marketing communications at any time.
• Opt out of Google Analytics tracking at any time by installing the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout) or by disabling cookies in your browser settings.

To exercise any of these rights, email us at wholesale@sovereignskincare.com. We will respond within 30 days.

7. CCPA / GDPR

California Residents (CCPA): You have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell your personal information.

EU/EEA Residents (GDPR): You have additional rights including data portability, the right to restrict processing, and the right to lodge a complaint with a supervisory authority. Our legal basis for processing is contractual necessity (order fulfillment) and legitimate interest (analytics, fraud prevention).

8. Children's Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will take steps to delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the site after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights: