Last Updated: January 20, 2026

Privacy Policy and Cookie Notice

Thank you for visiting the EM Cosmetics website. This Privacy Policy and Cookie Notice ("Policy") explains how EM Cosmetics LLC ("EM Cosmetics," "we," "us," or "our") collect, protect, share, and use your information as part of our technology platforms, including, without limitation, our company websites, web pages, sponsored social media platforms, and mobile sites (the "Sites").

By using this Site, you agree to our privacy policy and cookie notice, our terms of use, and you consent to the practices described.

This Site is for use by residents of the United States and all information collected is held on servers located in the United States.

Applicable Laws

This Privacy Policy applies to residents of the United States and is designed to comply with:

• California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA)
• California Invasion of Privacy Act (CIPA)
• Virginia Consumer Data Protection Act (VCDPA)
• Colorado Privacy Act (CPA)
• Connecticut Data Privacy Act (CTDPA)
• Utah Consumer Privacy Act (UCPA)
• Texas Data Privacy and Security Act (TDPSA)
• Oregon Consumer Privacy Act (OCPA)
• Montana Consumer Data Privacy Act (MCDPA)
• Children's Online Privacy Protection Act (COPPA)
• Telephone Consumer Protection Act (TCPA)
• CAN-SPAM Act

---

1. Information We Collect

1.1 Information You Provide Directly

You may visit and browse this Site without providing personally identifiable information about yourself. However, this may limit your ability to receive certain features, products, or services from us.

If you choose to register with us, we will ask you for your first name, last name, email address, and a password. Depending upon what activities you engage in on the Sites, we may also collect other personal information such as:

• Identifiers: Name, email address, phone number, mailing address, postal address, unique personal identifier, IP address, account name
• Commercial Information: Purchase history, products viewed, wishlist items, shopping cart contents
• Payment Information: Credit/debit card details, billing address (processed securely through Shopify Payments — we do NOT store full card numbers)
• Account Information: Username, password, account preferences, loyalty program information
• Communication Content: Messages you send us, reviews, feedback, customer service inquiries
• Demographic Information: Age, gender, zip code, product preferences (optional)

1.2 Information Collected Automatically

When you visit our Sites, we and our service providers automatically collect certain information:

Site Usage Information: EM Cosmetics and its third-party service providers use various technologies that passively or automatically collect information about how the Sites are accessed and used ("Usage Information"), including:

• Browser type and version
• Device type and operating system
• Application version
• Pages served to you and time spent on each page
• Referring URLs and exit pages
• Preceding page views
• Use of features or applications on the Sites
• Click patterns and scroll behavior

Device Identifiers: We automatically collect an IP address or other Unique Identifier Information ("Device Identifier") for the computer, technology, or other device ("Device") you use to access the Sites. A Device Identifier is a number that is automatically assigned to your Device when you access a website or its servers. We may use a Device Identifier to administer the Sites, help diagnose problems with our servers, analyze trends, track users' web page movements, help identify you and your shopping cart, and gather broad demographic information for aggregate use.

1.3 Cookies and Similar Technologies

Cookies: Like many websites, we use "Cookies," which are data files placed on a Device when it is used to visit the Sites to facilitate site navigation and to personalize your experience, including tailoring advertisements. Cookies may also be used to associate you with social networking sites like Facebook and Twitter and, if you so choose, enable interaction between your activities on the Sites and your activities on such social networking sites.

Types of Cookies We Use:

• Essential Cookies: Required for site functionality (shopping cart, checkout, account login)
• Analytics Cookies: Help us understand how visitors use our Sites (aggregated, anonymized data)
• Marketing Cookies: Used to deliver relevant advertisements — deployed only with your consent
• Preference Cookies: Remember your settings and preferences

If you would prefer not to accept cookies, you can change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; or set your browser to automatically not accept any cookies. However, please be aware that some features and services on our Sites may not work properly because we may not be able to recognize and associate you with your account.

Pixel Tags or Web Beacons: We also use web beacons or pixel tags, which are transparent graphic images placed on a web page or in an email and indicate that a page or email has been viewed or tell your browser to get content from another server. These may provide confirmation to us when you open an email from us.

1.4 Information From Third Parties

We may receive information about you from third parties that feature our products or promotional offers if you opt-in to receive information from us. You may also choose to participate in a third-party application or social media site through which you allow us to collect (or the third party to share) information about you, including Usage Information and Personal Information.

---

2. How We Use Your Information

EM Cosmetics uses the information we collect about you for a variety of business purposes, including:

• Process and Fulfill Orders: To process your transactions, ship products, and provide customer service
• Communicate With You: To send you order confirmations, shipping updates, and respond to inquiries
• Marketing (with consent): To send promotional emails, newsletters, and special offers (you can opt-out at any time)
• SMS Marketing (with explicit consent): To send text messages about orders, promotions, and offers (message and data rates may apply)
• Personalize Your Experience: To customize product recommendations and content to your preferences
• Improve Our Services: To analyze usage patterns and improve our Sites, products, and services
• Security and Fraud Prevention: To protect our Sites, customers, and business from fraudulent or malicious activity
• Legal Compliance: To comply with legal obligations and respond to lawful requests
• Administer Promotions: To run contests, sweepstakes, and other promotional activities

---

3. We Do NOT Sell or Share Your Personal Information

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), "sale" means disclosing personal information to a third party for monetary or other valuable consideration. "Sharing" means disclosing personal information to a third party for cross-context behavioral advertising purposes.

We do neither.

While we work with service providers (like Shopify for e-commerce, Klaviyo for email marketing, and Gorgias for customer service), these are contractually obligated service providers who process data only on our behalf and under our instructions — NOT sales or sharing under CCPA/CPRA.

Third Parties Providing Services on Our Behalf

We may share your personal information with third parties that perform functions on our behalf (or on behalf of our partners) such as:

• Service providers that host or operate our Sites (Shopify)
• Payment processors (Shopify Payments)
• Email marketing providers (Klaviyo)
• Customer service platforms (Gorgias)
• Shipping and fulfillment partners
• Analytics providers (in aggregated/anonymized form)

These service providers are contractually bound to use personal information only for the purposes for which it was disclosed and in accordance with this Privacy Policy.

---

4. Your Privacy Rights

Depending on your state of residence, you may have the following rights regarding your personal information:

4.1 Rights for All U.S. Residents

• Access: Request a copy of the personal information we have collected about you
• Deletion: Request that we delete your personal information (subject to certain exceptions)
• Opt-Out of Marketing: Unsubscribe from promotional emails and SMS at any time
• Do Not Discriminate: We will not discriminate against you for exercising your privacy rights

4.2 Additional Rights for California Residents (CCPA/CPRA)

• Right to Know: Request disclosure of the categories and specific pieces of personal information we collected, the sources, the purposes, and the third parties with whom we share it
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: EM Cosmetics does NOT sell or share your data, so there is nothing to opt out of in this regard
• Right to Limit Use of Sensitive Personal Information: You can direct us to limit our use of sensitive personal information to purposes necessary to provide services (EM Cosmetics does NOT use sensitive personal information for advertising or profiling)
• Right to Non-Discrimination: We will not deny goods or services, charge different prices, or provide different quality because you exercised your rights

4.3 Additional Rights for Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana Residents

• Right to Access: Confirm whether we are processing your personal data and access such data
• Right to Correct: Correct inaccuracies in your personal data
• Right to Delete: Delete personal data provided by or obtained about you
• Right to Data Portability: Obtain a copy of your personal data in a portable and usable format
• Right to Opt-Out: Opt out of targeted advertising, sale of personal data, or profiling (EM Cosmetics does NOT engage in these practices)

4.4 Authorized Agent

You may designate an authorized agent to submit requests on your behalf. If you use an authorized agent, we may require:

• Written authorization signed by you permitting the agent to act on your behalf
• Verification of your identity directly with us
• Confirmation that you provided the agent with permission to submit the request

To designate an authorized agent, please contact us at ops@emcosmetics.com with the subject line "Authorized Agent Request."

4.5 Appeal Process

If we deny your privacy request, you have the right to appeal our decision. To appeal, please contact us at ops@emcosmetics.com within 60 days of receiving the denial, with the subject line "Privacy Request Appeal." We will respond to your appeal within the timeframe required by applicable law (typically 45-60 days).

Right to Contact Attorney General: If your appeal is denied, or if you are not satisfied with our response, you have the right to file a complaint with the Attorney General of your state:

• Virginia: Virginia Attorney General Consumer Protection
• Colorado: Colorado Attorney General
• Connecticut: Connecticut Attorney General
• Montana: Montana Attorney General Consumer Protection
• Oregon: Oregon Attorney General

4.6 How to Submit a Request

To exercise any of your privacy rights, you may:

• Email us: ops@emcosmetics.com
• Call us: (818) 710-0700
• Mail us: EM Cosmetics LLC, Attn: Privacy Team, 1554 18th St, Santa Monica, CA 90404

We will verify your identity before processing your request. For access or deletion requests, we will ask you to provide information that matches information we have on file (such as email address associated with an order). We will respond within the timeframe required by applicable law (typically 45 days, with a possible extension of an additional 45 days if necessary).

---

5. CCPA/CPRA Data Categories Disclosure

In the preceding 12 months, EM Cosmetics has collected and disclosed the following categories of personal information:

Category	Examples	Collected	Sold/Shared	Disclosed for Business Purpose
A. Identifiers	Name, email, phone, address, IP address	Yes	No	Yes (service providers)
B. Personal Information (Cal. Civ. Code § 1798.80(e))	Name, address, credit card number	Yes	No	Yes (payment processors)
C. Protected Classification Characteristics	Age (if provided)	Limited	No	No
D. Commercial Information	Purchase history, products viewed	Yes	No	Yes (service providers)
E. Biometric Information	None	No	No	No
F. Internet/Network Activity	Browsing history, interactions with Sites	Yes	No	Yes (analytics)
G. Geolocation Data	Approximate location (from IP)	Yes (imprecise)	No	Yes (shipping)
H. Audio, Video, Electronic	Customer service calls (if recorded)	Limited	No	No
I. Professional/Employment	None	No	No	No
J. Education Information	None	No	No	No
K. Inferences	Product preferences	Yes	No	No
L. Sensitive Personal Information	Account login credentials	Yes (passwords hashed)	No	No

Sensitive Personal Information

EM Cosmetics may collect the following categories of sensitive personal information:

• Account login credentials (username and password — passwords are stored in hashed/encrypted form)
• Payment card information (processed by Shopify Payments, not stored on our servers)

We do NOT use or disclose sensitive personal information for purposes other than those necessary to provide our services and fulfill transactions you request.

Consent for Sensitive Data: By creating an account or completing a purchase, you provide your explicit consent for us to process your sensitive personal information (such as account credentials and payment details) solely for the purposes of account management and transaction fulfillment. You may withdraw this consent at any time by deleting your account or contacting us at ops@emcosmetics.com.

6. Data Retention

We retain personal information for as long as necessary to:

• Provide the services you requested
• Maintain your account (if you have one)
• Comply with legal obligations (such as tax and accounting requirements)
• Resolve disputes and enforce our agreements

Typical retention periods:

• Order information: 7 years (for tax/accounting purposes)
• Marketing consent: Until you unsubscribe
• Account information: Until you delete your account
• Analytics data: 26 months (aggregated/anonymized)

---

Data Protection Assessments

EM Cosmetics conducts and documents Data Protection Assessments (DPIAs) for processing activities that present a heightened risk of harm to consumers, including the processing of sensitive personal information. These assessments weigh the benefits of processing against the potential risks to consumer rights and help ensure our practices align with applicable privacy laws.

7. Cookies and Tracking Technologies

Our Sites use cookies and similar tracking technologies to provide functionality, remember your preferences, and analyze how you use our Sites. For a detailed explanation of the cookies we use, please see Section 1.3 above.

How to Control Cookies

• Browser Settings: Most browsers allow you to control cookies through their settings. Consult your browser's help documentation.
• Opt-Out of Analytics: You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
• Advertising Opt-Outs: Visit Digital Advertising Alliance or Network Advertising Initiative.

Do Not Track Disclosure

Some browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. EM Cosmetics does not currently respond to DNT signals. However, EM Cosmetics does NOT engage in cross-context behavioral advertising, so there is no tracking activity to cease.

We DO honor Global Privacy Control (GPC) signals as described in Section 4.2 above.

---

8. Data Security

We use reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, use, or disclosure. These include:

• SSL/TLS encryption for data transmission
• Secure payment processing through Shopify Payments (PCI-DSS compliant)
• Password hashing and encryption
• Access controls limiting employee access to personal information
• Regular security assessments

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

Incident Response and Breach Notification

In the event of a data breach that compromises personal information, EM Cosmetics will:

• Take prompt steps to identify, contain, and remediate the incident
• Assess the scope and impact of the breach on affected individuals
• Provide timely notification to affected individuals and relevant regulatory authorities in accordance with applicable state and federal law
• Offer appropriate remediation measures where warranted, such as credit monitoring services

Notifications will include a description of the incident, the types of information involved, steps we are taking in response, and recommendations for affected individuals to protect themselves.

---

9. Children's Privacy

10. SMS/Text Marketing

If you opt-in to receive SMS/text marketing communications from us, you consent to receive recurring automated marketing text messages at the phone number you provide. Message frequency varies. Message and data rates may apply.

SMS Consent Terms

• Consent is not a condition of purchase. You do not need to consent to SMS marketing to make a purchase.
• You can opt-out at any time by replying STOP to any message. You will receive a one-time confirmation message.
• Text HELP for assistance.
• We do not share your phone number with third parties for their marketing purposes.
• Compatible carriers: AT&T, T-Mobile, Verizon, Sprint, and most major U.S. carriers.

For more information, view our Terms of Use or contact us at ops@emcosmetics.com.

---

11. Third-Party Services

Our Sites may contain links to third-party websites or services that are not owned or controlled by EM Cosmetics. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party websites you visit.

Service Providers

We use the following categories of service providers:

• E-commerce Platform: Shopify (hosting, checkout, payment processing)
• Email Marketing: Klaviyo (marketing emails, automated flows)
• Customer Service: Gorgias (helpdesk, customer support)
• Analytics: Google Analytics (aggregated website analytics)
• Shipping: Various carriers for order fulfillment
• Advertising: Meta, Pinterest, TikTok (conversion tracking — subject to consent)

These service providers are contractually obligated to process your data only as necessary to provide their services and in accordance with this Privacy Policy.

---

12. Advertising

We may use third-party advertising companies to serve ads on other websites based on your visits to our Sites. This may involve cookies or similar technologies to collect information about your browsing activity.

Important: We do NOT sell or share your personal information with advertisers. Any advertising-related data collection is subject to your consent and can be controlled through your browser settings or advertising opt-out tools.

Opt-Out Options

• Browser settings: Block or delete cookies
• Global Privacy Control (GPC): Enable GPC in your browser
• Digital Advertising Alliance: optout.aboutads.info
• Network Advertising Initiative: optout.networkadvertising.org

---

13. Consent to Processing of Information

This Site is governed by and operated in accordance with the laws of the United States, and is intended for the enjoyment of residents of the United States. EM Cosmetics makes no representation that this Site is governed by or operated in accordance with the laws of any other nation.

If you are located outside of the United States, please be aware that information we collect will be transferred to and processed in the United States. By using our Sites, or providing us with any information, you consent to the collection, processing, maintenance, and transfer of such information in and to the United States.

---

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you by:

• Posting the updated policy on our Sites with a new "Last Updated" date
• Sending an email notification (for significant changes)

We encourage you to review this Privacy Policy periodically for the latest information on our privacy practices.

---

15. Our Commitment to Fair Practices

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

EM Cosmetics LLC
Attn: Privacy Team
1554 18th St, Santa Monica, CA 90404

Email: ops@emcosmetics.com
Phone: (818) 710-0700

For California residents: You can contact the California Office of the Attorney General if you believe your privacy rights have been violated: oag.ca.gov/privacy

---

© 2026 EM Cosmetics LLC. All rights reserved.
This Privacy Policy is effective as of January 20, 2026.