Privacy Policy

01Who we are

ZUVIE is the trading name of Julian Bender, the data controller responsible for your personal data.

If you have any questions regarding this Privacy Policy, please contact us at support@zuvieskin.com.

02What information we collect

Depending on how you interact with our website, we may collect:

03How we collect your information

We collect information when you:

• visit our website
• place an order
• subscribe to emails
• contact customer support
• participate in promotions
• interact with our advertising

04How we use your information

We process your personal data to:

• fulfil orders
• process payments
• deliver products
• provide customer support
• improve our website
• prevent fraud
• comply with legal obligations
• send marketing communications (only where permitted)

05Lawful basis for processing

If you are in the United Kingdom, under the UK GDPR we rely on one or more of the following legal bases:

• Performance of a contract
• Legal obligation
• Legitimate interests
• Consent (where required)

If you are in the United States, US privacy law does not work through “lawful bases” in the same way. We apply the same standard to you regardless: we collect what we need for the purposes listed in section 04, and nothing beyond it.

06Email marketing

If you choose to subscribe to our newsletter or marketing communications, we may send you updates about new products, offers, educational content and company news.

You may unsubscribe at any time using the unsubscribe link included in every email.

We use Klaviyo to manage email communications. For more information: klaviyo.com/legal/privacy

07SMS notifications

When you subscribe to ZUVIE text messages, we collect your mobile number, your consent record and subscription preferences, and information about message delivery and your responses. We use this information to manage your subscription and send the messages described when you sign up, including the serum launch notification.

We use Klaviyo and telecommunications providers to operate this service. These providers may process the information needed to manage subscriptions and deliver messages on our behalf.

SMS opt-in data and consent records are not sold or shared for third-party marketing or advertising. We share them only with providers that help operate this text-message service. The advertising and audience-sharing activities described elsewhere in this policy exclude these SMS records.

You can withdraw your SMS consent by replying STOP. SMS signup is optional and is not a condition of purchase.

08Shopify

Our online store is hosted by Shopify Inc. Shopify processes your information in order to:

• process orders
• process payments
• host our website
• manage customer accounts

For more information: shopify.com/legal/privacy

09Meta Pixel

We use the Meta Pixel to understand how visitors use our website and to improve our advertising. The Meta Pixel may collect information including:

• pages viewed
• products viewed
• purchases
• browser information
• device information

This information may be used to measure advertising effectiveness and create relevant audiences.

We should be straight with you about how this works right now: there is no cookie banner on our site, so the Meta Pixel loads when you arrive rather than after you have agreed to it. We would rather write that down than describe a consent step that does not exist.

If you do not want it running, you have three ways out. Block trackers in your browser or with an extension. Use your browser's setting to reject third-party cookies. Or email support@zuvieskin.com and we will opt you out on our side and keep you out of our advertising audiences.

For more information: facebook.com/privacy/policy

We also send some of the same visit and order information to Meta directly from our servers (Meta's Conversions API), so ad measurement still works when a browser blocks the Pixel. The email opt-out above covers this too.

When you reserve or join the list, we also tell Meta that a sign-up happened, together with a scrambled (hashed) version of your email address and first name, so we can see which ads lead to sign-ups. This comes from your browser through the Pixel, and a copy may be passed to Meta through the server connection described above. For this, Meta only receives your email in hashed form. In your browser, an ad or tracking blocker stops the Pixel, as described above. If your browser sends a Global Privacy Control signal, or you have opted out of sharing on our site, we do not send your hashed email address or first name to Meta from your visit or with your sign-up.

Ads on Meta. We may upload a scrambled (hashed) version of your email address to Meta to show you relevant ads, or to leave you out of ads that don't apply to you. Meta uses it only to match it to its own accounts and then deletes it, under its Custom Audience terms. It never gets your email in readable form. To opt out, email support@zuvieskin.com with the subject "No ad matching" and we will leave you out of every upload from then on. If you are in the United Kingdom, we use your email only to leave you out of ads, based on our legitimate interest, unless you have agreed to more.

10Google Ads

We also use the Google tag from Google Ads to measure whether our ads on Google lead to reservations. When you arrive from a Google ad, Google adds a click ID to the page address and the Google tag stores it in a cookie on your browser. When you reserve, the tag tells Google that a reservation happened, together with a coded reference to it and your email address, which the Google tag scrambles (hashes) in your browser before it is sent, so Google can match the reservation to an ad click. Google does not get your name, your order or your payment details from us. Like any website request, Google also receives your IP address and browser information.

The Google tag does not load if your browser sends a Global Privacy Control signal or if you have opted out of sharing on our site. You can also email support@zuvieskin.com to opt out. We will record your request and stop sending your information to Google wherever we control it. Because the Google tag runs in your browser, the surest way to stop it is the opt-out on our site, a Global Privacy Control signal, or blocking cookies. You can also control ad personalization from Google at adssettings.google.com.

For more information: policies.google.com/privacy

11Cookies

We use cookies to:

• operate our website
• remember your preferences
• analyse website traffic
• improve user experience
• measure advertising performance

Essential cookies are required for the website to function. Analytics and advertising cookies, including the Meta Pixel, are set when you arrive, not after you agree to them, because there is currently no consent banner asking you. If we add one, this page will say so on the day it goes up.

That also means there is no cookie settings panel here we could send you to. What does work: block or delete cookies in your browser settings, use a tracker blocker, or email support@zuvieskin.com and we will opt you out on our side.

We sometimes show different versions of a page to see which works better. Your browser stores which version you saw, and we record it with your sign-up.

12Sharing your information

We only share your information where necessary. This may include:

• Shopify
• payment providers
• delivery companies
• Klaviyo
• Meta
• Google
• analytics providers
• professional advisers
• government authorities where legally required

We do not sell your personal information, and we never have.

To be precise rather than flattering: when the Meta Pixel runs, or when we report a sign-up to Meta from our servers, information about your visit or sign-up goes to Meta so we can measure our ads and build audiences. Under California law that counts as “sharing” for cross-context behavioural advertising, even though no money changes hands. Email us and we will switch it off for your record.

13International transfers

We are based in Germany and sell in the United States, so your information will normally be processed outside your own country, including by service providers in the United States and the European Economic Area.

Where UK or EU data protection law requires it, we ensure appropriate safeguards are in place for those transfers.

14Data retention

We keep personal information only for as long as necessary to:

• fulfil orders
• comply with legal obligations
• resolve disputes
• enforce agreements

15Your rights in the United Kingdom

Under the UK GDPR you may have the right to:

• access your information
• correct inaccurate information
• erase your information
• restrict processing
• object to processing
• withdraw consent
• request data portability

To exercise these rights please contact support@zuvieskin.com.

Exercising your rights is free of charge. We respond to all requests within one month, as required by law.

16Your rights in the United States

Privacy rights in the US depend on your state. If you live in California, Colorado, Connecticut, Virginia, Texas or another state with a comprehensive privacy law, you may have the right to:

• know what personal information we hold about you and how we use it
• request a copy of it
• correct it
• have it deleted
• opt out of targeted advertising and of any “sale” or “sharing” of your information
• not be treated differently for exercising any of these rights

We do not make this depend on which state you live in. Email support@zuvieskin.com with “Privacy request” in the subject line and we will action it for you, wherever in the US you are.

That includes opting out of targeted advertising. One email and it is off for you. We do not knowingly collect information from anyone under 16, and we do not sell personal information.

17Complaints

If you believe your information has been handled incorrectly, tell us first at support@zuvieskin.com and we will try to put it right.

In the United Kingdom, you may also contact the Information Commissioner's Office (ICO): ico.org.uk

In the United States, you may contact the Attorney General of your state, or the Federal Trade Commission: reportfraud.ftc.gov

18Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page.