Privacy Policy

Effective Date: September 1, 2024

1. Introduction
At Skin by Kim, we are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and how we protect it. This policy also outlines your rights under the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable laws.

2. Information We Collect
We collect personal information that you voluntarily provide to us when you use our website, make a purchase, sign up for a consultation, or contact us. This may include:

• Name
• Email address
• Phone number
• Shipping address
• Payment details (credit card information, billing address, etc.)
• IP address and browsing behavior
• Information related to your skin type and preferences

Additionally, when you make a purchase through our online store, we use **Stripe** as our payment processor. Stripe may collect your payment information directly, including your card number, expiration date, CVV code, and billing address, to process your payment. We do not store this sensitive payment information on our servers.

3. How We Use Your Information
The information we collect is used for the following purposes:

• To process and fulfill your orders
• To provide personalized skincare recommendations
• To improve our website and services
• To communicate with you, including sending promotional emails (with your consent)
• To comply with legal obligations and protect our rights
• To analyze and understand how our services are used
• To securely process your payments through Stripe

We may combine information we collect from different sources to improve our services and personalize your experience.

4. Sharing Your Information
We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

• To trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you (e.g., payment processors like Stripe, shipping companies)
• To comply with legal requirements, such as responding to a subpoena or court order
• In connection with a business transfer, such as a merger or acquisition
• To protect the rights, property, or safety of Skin by Kim, our customers, or others

We ensure that any third parties with whom we share your data comply with applicable data protection laws and only use your data for the specific purposes outlined above.

5. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your experience, analyze website traffic, and deliver targeted advertising. Cookies are small files that a website or its service provider transfers to your computer’s hard drive through your web browser (if you allow) that enables the site’s or service provider’s systems to recognize your browser and capture and remember certain information.

• Types of Cookies We Use: We use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your device until you delete them).
• Your Choices: You can choose to disable cookies through your browser settings. However, disabling cookies may affect your experience on our website.
• Stripe Cookies: Stripe may place cookies on your device for the purpose of fraud prevention and to ensure secure payment transactions. For more information, please refer to Stripe’s Cookie Policy.

For more information on how we use cookies and how you can manage your preferences, please see our Cookie Policy.

6. Data Security
We implement a variety of security measures to protect your personal information, including encryption, firewalls, and secure socket layer (SSL) technology. Stripe uses its own security measures to ensure your payment details are safe. However, please be aware that no method of internet transmission or electronic storage is 100% secure. We strive to use commercially acceptable means to protect your personal information, but we cannot guarantee its absolute security.

7. Your Rights
Depending on your jurisdiction, you may have certain rights regarding your personal information. These rights could include the ability to:

• Request access to the personal information we hold about you.
• Request corrections to any inaccuracies in your personal information.
• Request the deletion of your personal information, subject to certain exceptions.
• Object to certain types of processing of your personal information.
• Request the transfer of your personal data to another entity.
• Withdraw consent where processing is based on consent.

To inquire about or exercise these potential rights, you can contact us at [email protected]. Please note that we may not be able to fulfill all requests, depending on the specific circumstances and applicable laws.

8. International Data Transfers
Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country. We ensure that any transfer of your personal data is subject to appropriate safeguards, such as standard contractual clauses approved by the European Commission or other lawful mechanisms.

9. Retention of Your Information
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal, regulatory, or internal policy requirements. Once your information is no longer needed, we will securely delete or anonymize it. Stripe retains your payment information as per their own retention policies, which you can review in their Privacy Policy.

10. Children's Privacy
Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information as soon as possible. If you believe we might have any information from or about a child under 16, please contact us at [email protected].

11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this policy. We encourage you to review this Privacy Policy periodically to stay informed about our privacy practices.

12. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us at [email protected].