Privacy Policy

We collect both personal and non-personal information.

A. Non-Personal Information

Non-personal information is information that does not identify you individually or cannot be directly associated with you. This may include data that has been de-personalised by removing unique identifiers or combined with information from other users to form aggregated data.

B. Personal Information

Personal information is information that can reasonably be used to identify you, either directly or indirectly.

We collect information from and about you both directly, when you provide it to us, and automatically when you use the Site.

A. Information You Provide

We collect information that you provide when you make enquiries using our contact form, complete a transaction, enter a promotion, sign up to receive communications, or create an account on the Site. This may include any information you submit, as well as copies of your correspondence with us.

When you purchase goods or services through the Site, you provide personal information that is used to process your order. Payment information is processed by third-party payment providers. While you may choose not to provide certain personal information, this may limit your ability to use some features of the Site or complete transactions.

We may use the technologies described below to collect data when you visit the Site.

A. Cookies

Cookies are small text files stored on your device when you visit a website. They are widely used to make websites function properly, improve performance, and provide information to site owners or third parties. Cookies allow us and our service providers to recognise your device, make your visits easier, and improve your experience on the Site.

Cookies may be classified as either “session cookies” or “persistent cookies.” Session cookies are deleted when you close your browser, while persistent cookies remain on your device until they expire or are deleted.

For more information about cookies, you can visit www.allaboutcookies.org.

B. How We Use Cookies

1. Essential Cookies – Essential cookies are necessary for the Site to function and cannot be disabled. They enable core functionality such as navigation and access to secure areas of the Site.
We use cookies to remember items in your shopping cart and to enable essential site functionality.
These cookies do not collect information used for marketing purposes and do not store personally identifiable information. If you block or disable these cookies, some parts of the Site may not function properly.

2. Analytics Cookies – We use analytics tools (such as Google Analytics) to understand how visitors use the Site. These cookies collect aggregated, anonymised information and may be processed by third-party providers. You can learn more about how Google processes data at: www.google.com/policies/privacy/partners/. To opt out, visit: https://tools.google.com/dlpage/gaoptout/.

3. Targeting / Marketing Cookies – These cookies may be set by advertising partners (such as Google or Meta) and are used to build a profile of your interests and show relevant advertisements on other websites. If you disable these cookies, you may experience less personalised advertising.

Below is a representative list of cookies used on the Site:

C. WHAT ARE YOUR CHOICES REGARDING COOKIES?

Most browsers allow you to control cookies through their settings, including deleting cookies or blocking them entirely. You can manage cookies through your browser settings or by clearing your browsing data.

For guidance on managing cookies in common browsers, visit:

• Google Chrome

• Microsoft Edge

• Mozilla Firefox

• Apple Safari

• Opera

To learn more about managing cookies for other browsers, visit the browser developer’s website.

You can also opt out of Google Analytics by visiting: https://tools.google.com/dlpage/gaoptout/

For information about opting out of interest-based advertising, you can visit: networkadvertising.org/choices, aboutads.info/choices, or www.youronlinechoices.eu.

Please note that if you block or disable cookies, some features of the Site may not function correctly.

We use the information you provide and the information we collect to operate the Site, improve your experience, and provide the products and services you request. This may include delivering a more personalised experience, responding to enquiries, processing transactions, and providing relevant information about our products and services, where permitted.

We may also combine information you provide with information collected from other users to help us evaluate and improve our products and services.

We may contact you with service-related communications (such as order updates) and, where you have opted in, marketing communications about products, offers, or updates. We will only send marketing communications where permitted by applicable law and will honour all opt-out or unsubscribe requests.

If you do not wish for us to use your information in this way, please see Section 8 below.

A. Payments

We use third-party payment providers (such as Stripe or similar services) to securely process transactions. When you make a purchase, your payment information is transmitted directly to the payment provider and is handled in accordance with their privacy policy. We do not store full payment card details on our servers.

B. Order Fulfillment & Shipping

To deliver your order, we share your name, shipping address, and contact details with delivery and logistics providers.

A. General

We may disclose aggregated information about users of the Site that does not identify any individual.

We may disclose personal information that we collect or that you provide:

• to service providers, business partners, affiliates, contractors, and distributors that support our operations;

• to a buyer or successor in the event of a merger, sale, restructuring, or transfer of some or all of our assets;

• to fulfil the purpose for which the information was provided;

• for any other purpose disclosed at the time the information is collected, or with your consent.

We may also disclose personal information where required to comply with applicable laws, regulations, legal processes, or governmental requests, or where we believe disclosure is necessary to protect our rights, property, or safety, or that of our customers or others.

A. Do Not Track

The Site does not respond to web browser Do Not Track (DNT) signals.

B. Tracking Technologies

You can set your browser to refuse some or all cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of the Site may not function properly.

This section is included to comply with the California Consumer Privacy Act of 2018 (CCPA) and related California laws. Capitalised terms used but not defined here have the meanings set out in this Privacy Policy or under applicable law.

A. Personal Information Collected

Below are categories of personal information recognized by the CCPA along with examples (provided by the CCPA) of types of personal information in each category:

Identifiers – real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers

CA Customer Records Statute Categories – name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information

Protected Class Characteristics – age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information)

Commercial Information – records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies

Biometric Information – genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data

Internet / Network Activity – browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement

Geolocation Data – physical location or movements

Security Data – audio, electronic, visual, thermal, olfactory, or similar information

Professional / Employment-Related Information – current or past job history or performance evaluations

Non-Public Education Information – education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records

Inferences Drawn from Other Personal Information – profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes

B. Exclusions

You may request that RoseSkinCareProducts.com correct any inaccurate personal information we have.

C. Sources

We collect personal information:

• directly from you when you provide it;

• indirectly through your interactions with the Site; and

• from communications you send to us.

D. Use of Personal Information

We use personal information as described in Section 5, including for commercial and business purposes.

E. Disclosure of Personal Information

We may disclose personal information as described in Section 5. The table below outlines the categories of personal information collected, their sources, the purposes for which they are used, and the categories of third parties with whom they may be shared.

F. Sale of Personal Information

We do not sell personal information, including that of individuals under 18 years of age.

G. Use of Personal Information

We use the personal information we collect in the ways described in Section 5.  We may use the personal information for commercial purposes as well as business purposes.

H. California Rights for Access and Portability

Subject to certain exceptions, you have the right to request certain information about our collection, use, and/or disclosure of your personal information over the past 12 months. After receipt of a verifiable consumer request from you, we will disclose to you the categories of personal information collected, categories of sources for the categories of personal information collected, business or commercial purpose for collecting such personal information, categories of third parties with whom we shared such personal information, and specific pieces of personal information collected about you.

I. California Rights for Deletion

Subject to certain exceptions, you may request that we delete Personal Information about you that we have collected and retained.

J. Non-Discrimination

You have the right not to receive discriminatory treatment for the exercise of your privacy rights under the CCPA.

K. Opt-Out

You have the right not to have your information disclosed, shared, or sold. If you are a California resident and wish to exercise this right, please contact us at the contact information set forth in Section 16, below.

L. California Request Process

If you reside in California, only you or someone legally authorized to act on your behalf may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may make a verifiable consumer request for access or data portability no more than twice within a 12-month period. Such a request must provide sufficient information to allow us to reasonably verify that you are (or are an authorized representative of) the person about whom we collected the personal information and describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to it.

Please note that we cannot respond to your request or provide you with information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account on our Site. We will only use personal information provided in a verifiable consumer request to verify your identity or authority to make the request. If you reside in California, you may exercise your personal information rights by submitting verifiable consumer requests in one or more of the following manners:

1. If you are a California resident, you may make verifiable requests to exercise your personal information rights via the online request portal found here.

2. If you prefer to submit your verifiable request to exercise your personal information rights by phone, you may contact us by submitting a request using any of the contact information set forth in Section 8, below.

M. Verifying Requests

We will confirm receipt of your request within the time period prescribed by the CCPA and/or its regulations, let you know how we will process the request, and let you know our verification process and anticipated timeframe for response. We may try to verify your request by asking you to provide certain information and matching it to the information the Site maintains about you. We will request at least two data points about you. Depending on the nature of your request, we may require more data points to match and/or may require you to sign a declaration confirming under penalty of perjury that you are the consumer whose personal information is the subject of the request.

N. Authorized Agent

If you are a California resident, you may designate an authorized agent to make requests on your behalf to exercise your personal information rights. The authorized agent must be registered with California’s Secretary of State. The authorized agent making any request on your behalf to know or delete certain personal information about you must submit a copy of the written permission you granted them to act as authorized agent or a copy of the document showing you granted them a power of attorney for this purpose. If the authorized agent does not have a power of attorney in compliance with California’s probate law, you must also directly verify your identity with us . If adequate proof is not presented, we may deny the request.

O. Response Timing and Format

We aim to respond to verified requests within 45 days, as required by applicable law. If additional time is needed, we will inform you of the reason and expected timeframe.

We will respond to you by mail or electronically, at your option. Any disclosures we provide will relate only to the 12-month period preceding receipt of your verifiable request.

If we are unable to respond to your request, we will explain why, where applicable. If we cannot verify your identity in connection with a request for specific pieces of personal information, we will notify you and instead treat the request as one for categories of personal information.

If we deny a request due to a legal exception, we will explain the basis for that decision. Where we cannot verify identity in connection with a request relating to disclosure of categories of information, we will provide general information about our data practices.

If we cannot verify the identity of an individual requesting deletion of personal information, we may deny the request and treat it as a request to opt out of sale, where applicable.

We are not required to provide specific personal information where doing so would create a substantial, articulable, and unreasonable risk to security.

For data portability requests, we will provide personal information in a portable format. We do not charge a fee for processing requests unless they are excessive, repetitive, or manifestly unfounded. If a fee is required, we will explain the reason and provide a cost estimate before proceeding.

If you reside in the European Economic Area (EEA), the following provisions apply to you:

A. Access

You may request access to your personal information, including:

• the purposes for which it is used;

• the categories of personal information processed; and

• the recipients to whom it has been disclosed.

B. Correction

You may request that we correct any inaccurate or incomplete personal information we hold about you.

C. Right to Be Forgotten

You may request that we delete your personal information where it is no longer necessary for the purposes for which it was collected, or where we are otherwise required to do so under applicable law.

D. Withdraw Consent

Where we rely on your consent to process personal information, you may withdraw that consent at any time.

E. Restriction

You may request that we restrict or suspend the processing of your personal information in certain circumstances.

F. Object

You may object to our processing of your personal information where such processing is based on legitimate interests or used for direct marketing purposes.

G. Copies and Portability

You may request a copy of your personal information in a structured, commonly used, and machine-readable format, and may request that it be transferred to another controller where technically feasible.

A. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, including providing our services, maintaining your account, completing transactions, and complying with legal and regulatory obligations.

• Order and transaction data may be retained for up to 6–7 years to comply with accounting and tax requirements.

• Account information is retained while your account remains active, and may be deleted upon request.

• Marketing data is retained until you withdraw your consent or unsubscribe from communications.

• Technical and usage data may be retained for a shorter period for analytics, security, and site functionality purposes.

When data is no longer required, we take reasonable steps to securely delete or anonymise it.