Privacy Policy

Last updated: September 18, 2026

Chrysalis Skin Lab is a brand of The Chrysalis Emporium LLC. We are committed to protecting your privacy and the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and protect your information. By using our website, https://chrysalisskinlab.com/ ("the Website"), you consent to this Privacy Policy.

1. Information We Collect

a. Personal information such as your name, email address, shipping address, billing address, and telephone number when you make a purchase.

b. Non-personal information such as IP address, browser type, device information, and approximate location based on IP address, to improve the Website and your experience.

c. Information about how you use the Website, including pages viewed, products viewed, items added to your cart, links clicked, and how you arrived at the site.

d. Information you choose to tell us about your skin, when you fill in a kit feedback form, leave a review, or email us.

2. How We Use Your Information

a. Order fulfillment. To process and ship your orders.

b. Communication. Order confirmations, shipping updates, and responses to inquiries.

c. Marketing. With your consent, promotional material and offers.

d. Advertising and measurement. To find out whether the ads we pay for lead to sales, and to show our ads to people who have already visited the Website. Section 4 explains how this works and how to turn it off.

e. Product development. Feedback you give us about your skin helps us decide what to make next. We look at this in aggregate and we do not attach your name to it when we do.

3. Data Sharing

We do not sell or rent your personal information for money.

We do share information with companies that help us run the business, and with advertising platforms as described in Section 4. Some privacy laws, including California's, treat sharing information for targeted advertising as a "sale" or a "share" even when no money changes hands. We would rather tell you that plainly than rely on a technicality.

The companies we share information with are:

• Shopify, which hosts the Website and processes orders
• Payment processors, which handle your card details directly. We never see or store your full card number
• Shipping carriers, which need your address to deliver your order
• Meta and TikTok, for advertising and measurement, as described in Section 4
• Google and Pinterest, for analytics and advertising
• Klaviyo for email, Judge.me for product reviews, AfterShip for delivery tracking, and GOAFFPRO for our affiliate program

We may also disclose information to authorities when required by law or to protect our rights or someone's safety.

We do not sell your personal information to data brokers.

4. Advertising Technologies

We advertise on Meta (Facebook and Instagram) and on TikTok, and we use tools from both companies to measure our advertising.

Meta Pixel and Meta Conversions API. The Meta Pixel records actions you take on the Website, such as viewing a product, adding to cart, and completing a purchase, and sends them to Meta. We also use the Meta Conversions API, which sends the same kind of information from our server rather than from your browser. Because it runs server side, it continues to work even when a browser blocks tracking scripts.

TikTok Pixel and TikTok Events API. These work the same way.

What we share with them. Alongside those actions, we share identifiers that allow Meta and TikTok to match the activity to an account. These can include your name, email address, phone number, city, state, postal code, country, and IP address. Email addresses and phone numbers are hashed before they are sent, meaning they are converted into a scrambled string rather than sent in readable form.

Why. Two reasons. To know whether an ad we paid for actually led to a sale, and to show our ads to people who have visited the Website before. The second one is what the law calls cross-context behavioral advertising.

How to opt out.

• At the source. Meta lets you limit how your off-platform activity is used, under Settings, then Accounts Centre, then Your information and permissions. TikTok has equivalent controls under Settings and privacy, then Ads.
• In your browser. Most browsers let you block third-party cookies. This stops the pixel but not the server-side APIs, which is why the options below matter more.
• Global Privacy Control. Some browsers and extensions send an automatic opt-out signal to every site you visit. We honour it.
• Ask us. Email us and we will stop sharing your information with advertising partners. You do not need to give a reason, and it will not affect your order or your ability to buy from us.

5. Your Rights

You may:

a. Request access to the information we hold about you b. Request corrections or deletion c. Opt out of marketing communications at any time d. Opt out of targeted advertising, as described in Section 4 e. Ask us not to share your information with advertising partners

To make a request, email us at the address in Section 10. We will respond within forty five days. We may need to verify your identity first, usually by confirming details from an order you placed. We will not treat you differently for exercising any of these rights.

For California residents. The California Consumer Privacy Act applies to businesses above certain size thresholds, and we are a small business that does not currently meet them. We are offering you these rights anyway.

For anyone outside the United States. We are a US business and we do not currently target customers outside the US. If you order from us, your information will be processed in the United States.

6. Security

We use Shopify's infrastructure, which encrypts data in transit and holds payment card industry certification. Access to customer information is limited to the people who need it to fulfil your order.

No system is perfectly secure, and we would rather say that than promise something we cannot guarantee.

7. How Long We Keep Your Information

Order records are kept for seven years, because tax and accounting rules require it. Email list information is kept until you unsubscribe. Website analytics and advertising information are kept according to each provider's own schedule, generally between two and twenty six months.

8. Cookies

We use cookies and similar technologies for three purposes.

Essential cookies keep the Website working, remember what is in your cart, and keep you logged in. The Website cannot function without these.

Analytics cookies tell us which pages people visit and where they leave, so we can fix what is not working.

Advertising cookies are the ones described in Section 4.

You can manage cookies in your browser settings. Blocking analytics and advertising cookies will not stop you from shopping with us.

9. Children's Privacy

The Website is not intended for children under 16, and we do not knowingly collect their information. If you believe a child has given us information, email us and we will delete it.

10. Changes and Contact

We may update this policy. Check the "Last updated" date at the top for the latest version. If a change is significant, we will say so on the Website rather than quietly editing.

The Chrysalis Emporium LLC PO Box 880342, San Diego, CA 92168 info@chrysalisskinlab.com

Thank you for trusting Chrysalis Skin Lab with your information.