Privacy policy

This policy covers noviembreskin.com and any order you place through it. We are a small skincare brand, not an advertising company: we collect what an order needs and what tells us whether our marketing works, and nothing else.

What we collect

You give us

• Name, email, shipping and billing address, phone number.
• Order contents and history.
• Anything you write to us in an email, a DM or a review.

Collected automatically

• IP address, browser and device type, operating system.
• Pages you visited, what you clicked, how you arrived, how long you stayed.
• Cookies and similar identifiers — see our Cookie policy.

What we never see

Your full card number. Payments are handled by Shopify and its payment processors. Card details go to them, not to us. We see the last four digits and whether the charge succeeded.

Why we use it

• To take payment, ship your order, and handle returns and subscriptions.
• To answer you when you write to us.
• To send order and subscription emails. These are not marketing and you cannot opt out of them while you have an active order.
• To send marketing email, only if you asked for it. Every one has an unsubscribe link that works immediately.
• To measure advertising — which ad led to which order, in aggregate.
• To detect fraud and to comply with tax and accounting law.

We do not sell your personal information for money.

Who else sees it

Who	What for
Shopify	Store, cart, checkout, order and subscription records
Payment processors	Taking payment and preventing fraud
Shipping carriers	Your name and address, to deliver the parcel
Email provider	Sending order and marketing email
Meta and other ad platforms	Measuring which ads produce orders
Analytics	Aggregate traffic and behaviour on the site

Each of these is bound to use the data only to provide that service. We also disclose information where the law requires it, or to protect our rights or someone's safety.

Advertising and tracking

We use advertising pixels, including Meta's, to know which campaigns lead to orders. Depending on your jurisdiction, sharing data with ad platforms for targeted advertising may count as a "sale" or "share" even though no money changes hands. You can opt out — see your rights below — and you can also refuse advertising cookies through the banner or your browser.

Your rights

Wherever you live, you may ask us to:

• Tell you what we hold about you, and give you a copy.
• Correct it.
• Delete it, except what we must legally keep — tax records, for one.
• Stop using it for marketing or targeted advertising.

Email hello@imnoviembre.com. We will not charge you, will not make it difficult, and will not treat you differently for asking. We may need to confirm your identity first, which usually means replying from the address on the order.

California residents have these rights under the CCPA/CPRA, and you may use an authorised agent. Residents of the EU and UK have them under the GDPR, and may also complain to their supervisory authority.

How long we keep it

Order records for as long as tax and accounting law requires. Marketing contacts until you unsubscribe. Support emails for two years. Analytics in aggregate.

Security

The site runs over HTTPS and payment data never touches our systems. No system is perfectly secure, so we do not claim it is; if a breach ever affected your data we would tell you and the relevant authority as the law requires.

Children

This site is for adults. We do not knowingly collect information from anyone under 16. If you believe a child has given us information, write to us and we will delete it.

Changes

If we change this policy we update the date at the top of the page. Material changes get an email to anyone on our list.

Contact