THE CORD Skincare — Privacy Policy

Effective date: November 11, 2025

This Privacy Policy explains how THE CORD Skincare, Inc. ("we," "us," "our") collects, uses, shares, and protects your personal information when you visit or make a purchase from our website and storefront powered by Shopify (the "Site"). By using the Site, you agree to the practices described here.

1) Who we are & how to contact us

• Controller: THE CORD Skincare, Inc.
• Contact: support@thecordskincare.com
• Postal address: 2206 Ansel, Irvine CA 92618

2) What we collect

We collect information to operate the Site, fulfill orders, provide customer support, and improve our products and marketing. Categories include:

• Identity & contact data: name, email, phone, billing and shipping addresses.
• Account data: passwords (hashed by Shopify), order history, preferences, saved items.
• Order & transaction data: items purchased, order value, currency, payment method (card details are processed by payment providers; we do not store full card numbers).
• Device & usage data: IP address, device/browser info, pages visited, referring/exit pages, time stamps, approximate location (from IP), and interactions with our Site and emails.
• Marketing data: email/SMS opt-ins, campaign engagement, preferences.
• User-generated content: product reviews, Q&A, support messages.
• Optional wellness/skin-profile data (if you choose to provide it): skin type, skin goals, product sensitivities, routine details, lifestyle factors from questionnaires or quizzes.

Sources

• Directly from you (checkout, forms, support).
• Automatically via cookies, pixels, and similar tech.
• From service providers and marketing/analytics partners (Shopify, Google, Meta, Twilio), consistent with your settings.

3) How we use your information (purposes)

• Store operations & fulfillment: process orders, payments, returns, customer support, fraud prevention.
• Personalization & recommendations: tailor content and product suggestions (including using optional skin-profile data if you provide it).
• Marketing & analytics: measure performance, run ads/retargeting, improve Site and campaigns.
• Compliance & security: audits, legal obligations, enforcing policies, preventing misuse.

Legal bases (where required)

• Contract: to provide the Site and fulfill orders you place.
• Legitimate interests: to improve and protect our services, run analytics/marketing (balanced against your rights).
• Consent: for email/SMS marketing in applicable regions and for processing optional wellness/skin-profile data.
• Legal obligation: tax, accounting, and compliance.

4) Optional wellness / skin-profile data (not medical data)

If you opt to share skin-related or wellness information (e.g., skin type, sensitivities, goals), we use it only to personalize cosmetic product recommendations and content.

• Not medical data: Our products and questionnaires are cosmetic and wellness-oriented, not medical. We do not provide diagnoses or medical advice, and we are not a HIPAA-covered entity.
• Use & storage: processed within our ecommerce stack (e.g., Shopify apps/CRM) and retained only as long as needed for personalization and your account history.
• Your choices: you can skip these questions, delete entries, or ask us to erase them. We do not sell or share this category of data for cross-context behavioral advertising.

5) Cookies, analytics, and ads

We use cookies, pixels, and similar technologies to run the store, keep your cart, analyze traffic, and measure/serve ads. Partners may include Shopify & Shopify Analytics, Google Analytics, Meta (Facebook/Instagram) Pixel, and Twilio.

Your controls

• Use our cookie banner/preferences to manage non-essential cookies.
• Adjust ad settings on Google and Meta platforms.
• Browser tools can block cookies; some features (like checkout) may break without certain cookies.
• Where required by law, we honor Global Privacy Control (GPC) signals for opt-outs of "sale"/"sharing" under US state laws.

6) Shopify & other processors

We run on Shopify, which processes your personal information to provide the ecommerce platform, checkout, and related services. Payment data is processed by Shopify Payments or other payment providers you select. We also use vendors for hosting, email/SMS, analytics, customer support, reviews, and fraud prevention under appropriate contracts.

7) Where we process data (international transfers)

• Fulfillment location: Although our products are manufactured in Korea, all inventory is imported, warehoused, and shipped from the United States. Your order and customer data are processed primarily in the United States.
• Korea (limited business data only): Certain limited business data—such as supplier or manufacturing information—may be processed or stored in Korea solely for supply-chain management. Customer personal data is not stored in Korea for fulfillment or marketing.
• Other transfers: Some processors may operate globally and transfer data as needed under appropriate safeguards (e.g., contractual clauses).

8) How we share information

• Service providers/processors that help us operate the Site, fulfill orders, run marketing, and provide analytics/support.
• Advertising and analytics partners (e.g., Google, Meta) to measure and improve ad performance—this may be deemed a "sale" or "sharing" under certain US state laws; you can opt out via cookie preferences and GPC.
• Authorities or third parties when required by law or to protect rights, safety, and security.
• Business transfers: in connection with a merger, acquisition, or asset sale, subject to ongoing protections.

We do not sell your personal information for money.

SMS / Text Messaging

Mobile opt-in information and SMS consent are not shared with third parties or affiliates for marketing purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

9) Data retention

• Orders & tax records: typically 7–10 years to satisfy legal obligations.
• Marketing data: until you opt out or after a period of inactivity (commonly 24 months), subject to system limits.
• Account data & wellness/skin-profile entries: until you delete your account or request deletion, or after inactivity based on our retention schedule.

10) Security

We use administrative, technical, and physical safeguards appropriate to the type of information processed (e.g., encryption in transit, access controls). No system is 100% secure; please use unique, strong passwords and keep your account details confidential.

11) Your privacy choices & rights

Depending on where you live, you may have rights to access, correct, delete, port, opt out of "sale"/"sharing," limit use of sensitive data, withdraw consent, and appeal a denial.

How to exercise: Contact us at privacy@thecordskincare.com. We may verify your request. You can also adjust cookies via our banner and send a GPC signal from your browser.

12) Children's privacy

Our Site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child provided personal information, contact us to delete it.

13) Third-party links & apps

The Site may link to third-party sites or apps. Their privacy practices are governed by their own policies. Review those policies before providing data to them.

14) Changes to this Policy

We may update this Policy to reflect operational, legal, or regulatory changes. We will post the updated version with a new effective date. Material changes will be highlighted where required.

Contact us

Email: support@thecordskincare.com
Address: 2206 Ansel, Irvine CA 92618 USA