Privacy Policy

Template — requires legal review. This document is a starting template prepared from how the store software actually works. It has not been reviewed by a lawyer. Check every statement against your actual practices and have it reviewed before launch.

This Privacy Policy explains how femmeelixir, the operator of https://femmeelixir.com ("femmeelixir", "we", "us"), collects, uses, discloses and keeps personal information, and the choices and rights you have, including under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA) and other US state privacy laws. Information about skin and health is also covered by our separate Consumer Health Data Privacy Policy. Cookies are described in our Cookie Policy.

Our store and our AI consultant are intended for people aged 16 and over.

1. Notice at collection — summary

The table below summarizes the categories of personal information we collect, why we collect them and how long we keep them. More detail follows in the sections below. We do not sell personal information and we do not share it for cross-context behavioral advertising.

Category (CCPA)	Examples	Why we collect it	How long we keep it
Identifiers	Name, email address, account id, order number, the display name you choose for journal comments, random cookie ids	Account, orders, customer service, security, consent records	While your account exists; order records as required by law (section 10)
Customer records	Shipping and billing address, phone number (optional)	Delivering orders, payment, customer service	As above
Commercial information	Orders, returns and refunds, shopping bag, wishlist, reviews	Selling and delivering products, returns, your order history	As above
Internet or electronic activity	Messages to the AI consultant, journal comments and "Was this helpful?" answers, quiz answers and results, consent choices, sign-in sessions and comments (shortened browser details, a keyed hash of your IP address)	Operating the consultant, the journal and quizzes, moderation, security, fraud prevention, proving your privacy choices	Section 10
Inferences	Product suggestions based on what you tell the consultant, your quiz answers or your skin profile; a quiz result such as a skin type	Recommendations you ask for	Only while the underlying data is kept
Sensitive personal information	Account password (stored only as a secure hash); skin profile details such as skin concerns, allergies, sensitivities, pregnancy or breastfeeding (also when saved from a match quiz); reports of reactions to a product	Sign-in; recommendations you ask for, only with your consent; product safety	Until you delete them or your account (section 10)

We do not collect precise geolocation, biometric information, government identification numbers or payment card numbers.

2. Information we collect and where it comes from

• Account: email address, password (stored only as a secure hash), name, optional phone number, saved addresses, wishlist and saved routines. You also confirm that you are at least 16; we do not collect your date of birth.
• Orders and checkout (also as a guest): email, name, shipping and billing address, optional phone number, items, prices, taxes, shipping method, payment status, tracking number and order history, plus your agreement to our Terms of Sale and the age confirmation.
• Payment: payment is handled by the payment method you choose (for example, bank transfer). We receive a confirmation that the payment was made. If a card payment processor is connected, card details are entered with the processor and never reach our servers; we receive only a payment reference and status.
• Skin profile (optional, only with your consent): skin type, concerns, sensitivity, preferences, budget, ingredients you avoid or are allergic to and, if you choose to tell us, pregnancy or breastfeeding. The profile is encrypted in our database.
• AI consultant: the messages you send, the replies and the products shown. See section 4.
• Contact form and reaction reports: name, email, optional order number, subject and message. If you report a reaction to a product, the message may contain health information; we use it to respond and to meet our product safety obligations.
• Reviews: the name you display, your rating and text.
• Journal comments, reactions and reports and quizzes: see sections 5 and 6.
• Newsletter: your email address and when you confirmed the subscription.
• Privacy requests: your email, the type of request, details you provide and, for an authorized agent, the agent's details.
• Automatically from your device: cookies and similar technologies listed in our Cookie Policy; for sign-in sessions and consent records, a shortened browser description (user agent) and a keyed hash of your IP address — we do not store your raw IP address in these records. Our hosting and security providers process IP addresses to deliver and protect the site.
• From service providers: payment confirmations and delivery status.

Providing information is voluntary, but we need your email and shipping details to process an order and your email to answer a message.

3. How we use information

• to create and manage your account, process and deliver orders, handle returns and refunds and provide customer service;
• to operate the AI consultant and give the recommendations you ask for;
• to send transactional emails (order confirmation, shipping, password reset, privacy request updates);
• to send marketing emails, only if you opted in and confirmed by email (section 12);
• to keep the store secure, prevent fraud and abuse, and debug errors;
• to measure and improve the consultant using de-identified data (section 4);
• to record and honor your privacy choices and to comply with legal obligations (tax, accounting, consumer and product safety law).

If the EU or UK GDPR applies to you, we rely on the following legal bases: performance of a contract (account, orders), consent (skin profile, saved chat history, newsletter, optional cookies), legitimate interests (security, fraud prevention, improving the store with de-identified data) and legal obligations (tax and accounting records).

4. The AI consultant

• The consultant is an AI system, not a person, and it does not give medical advice. See the AI Consultant Disclaimer.
• Model provider: to generate replies, your messages, the conversation so far, product information from our catalog and — only if you saved one and allowed its use — your skin profile are sent to our AI model provider, Anthropic, PBC, which processes them on our behalf as a service provider. [Confirm the data retention and no-training terms of the current Anthropic agreement before launch.]
• Search provider: to find matching products and articles, short search phrases that the consultant writes based on the conversation (for example, "gentle serum for dry skin") are converted into numerical vectors by Voyage AI, our service provider. Your full messages, name or email are not sent to Voyage AI.
• Without an account or without consent to save history: the conversation is kept for the current consultant session (24 hours by default) and then deleted.
• Saved history (optional): if you are signed in and turn on "save chat history", conversations are kept in your account until you delete them, withdraw consent or delete your account.
• Improving the consultant: we keep de-identified records (messages with email addresses, phone numbers and similar details masked, tool usage, feedback and safety events) for up to 12 months to measure quality and safety. They are not linked to your account.
• We do not use the consultant to make decisions that produce legal or similarly significant effects about you.

5. Journal comments and reactions

• Comments (signed-in customers only): the display name you choose (never your email address), the text, replies, the date and the moderation status, and — only for spam and abuse handling — a keyed hash of your IP address and a shortened description of your browser (user agent). We do not store your raw IP address. The IP hash and browser description are deleted automatically 90 days after the comment is posted; the comment itself stays.
• Moderation: by default every comment is reviewed by our team before it appears; our staff receive an email notice with the comment so they can review it. We record the moderation decision and, for rejected comments, the reason (for example "medical claim" or "personal data"). Readers can report a comment; we keep the report (reason and optional details) and who sent it so we can handle it, and we may block an account that repeatedly breaks the community guidelines in our Terms of Use. Please do not put health details or other personal information in a public comment.
• Deleting: you can delete your own comments in your account at any time; the text is erased and only a "deleted" placeholder remains where others replied. If you delete your account, your comments stay but are shown as from "Deleted user", without your name, IP hash or browser details, and your reactions, reports and any comment block are deleted. If we delete an article, its comments and reactions are deleted with it.
• "Was this helpful?" reactions: if you are signed in, your answer is linked to your account; if not, the strictly necessary cookie __Host-fe_rx holds a random id and we store only a hash of that id with your answer, so that each browser is counted once and can change its answer. We show only totals. Reactions are kept while the article exists or until you delete your account.

6. Quizzes

We offer match quizzes (for example "What's your skin type?") and knowledge quizzes (for example "How well do you know SPF?"). The server calculates the result from your answers.

• Without an account: your answers and result are stored for at most 30 days, linked only to a random link kept in your browser tab (fe-quiz in sessionStorage; we store only a hash of it), so you can reopen the result or save it after signing in. Then they are deleted automatically. Answers to sensitive questions (for example pregnancy, breastfeeding or medication) are sent to our server only to calculate your result and are never stored with a quiz attempt; they stay only in your browser tab. We keep aggregated counts (how many people started or finished a quiz, which answers and results were chosen) that contain no personal information.
• Signed in: your results and your non-sensitive answers are kept in your quiz history ("My quizzes" in your account) so you can see them again, until you delete a result there or delete your account. Sensitive answers are not stored with them either.
• Saving to your skin profile: a match quiz result is added to your skin profile only if you are signed in, choose "Save to my skin profile" and give the same separate consent as for the skin profile (it is never pre-checked). Only then are your answers to sensitive questions sent again from your browser and stored, encrypted, in your skin profile. See section 7 and our Consumer Health Data Privacy Policy.
• The AI consultant uses a quiz result as context only when you ask it from the result page ("Ask the consultant"), for your own result (an anonymous result for 24 hours).
• Measuring quizzes: if you are signed in and buy a product that a quiz recommended to you within a few days (7 by default), we link that order to the quiz so we can report how well quizzes help; staff see only totals.
• Results and recommendations are general cosmetic information, not a diagnosis or medical advice.

7. Sensitive personal information and consumer health data

Information about your skin, allergies, sensitivities, pregnancy or breastfeeding, answers to match quizzes about your skin, and reports of reactions to products may be health information under state law. We store it in your account only with your separate, explicit consent (or, for a reaction report, a question you type into the consultant or a quiz you take, because you choose to send it to us to get an answer — see sections 4 and 6), we use it only to provide what you asked for and to meet our safety obligations, and we never sell it or use it for advertising. You can view, change or delete your skin profile and withdraw consent at any time in your account; withdrawing consent deletes the profile. Because we use sensitive personal information only for these purposes, we do not use it to infer characteristics about you. Residents of Washington, Nevada and other states with consumer health data laws should also read our Consumer Health Data Privacy Policy.

8. How we disclose information

We disclose personal information only to service providers and contractors that process it on our behalf under contracts limiting their use of it, and where required by law:

Recipient	What they receive	Purpose
Hosting and infrastructure providers (servers in the United States) and Cloudflare, Inc.	All data stored by the store; IP addresses and technical request data	Hosting, content delivery, security, backups
Anthropic, PBC	Consultant conversations and, with your consent, your skin profile	Generating consultant replies
Voyage AI	Short search phrases written by the consultant; catalog and article texts	Product and article search
DHL	Name, shipping address, phone number and email for the parcel	Delivery and tracking
Payment provider or bank [name the provider before launch]	Order amount, order number and the payment details you give it	Taking payments and refunds
Email delivery provider [name the provider before launch]	Email address and email content	Sending transactional and, with consent, marketing emails
Cloudflare, Inc. (Turnstile), when enabled	Technical data of the anti-spam check	Protecting forms (including journal comments) against spam
Professional advisers, authorities, a buyer of the business	As needed	Legal compliance, protecting rights and safety, a merger or sale of the business

We do not use analytics, advertising or social media tracking tools on the store. If we add any, we will update this policy and the Cookie Policy first and load them only with your consent.

9. Sale and sharing; Global Privacy Control

We do not sell personal information and we do not share it for cross-context behavioral advertising or use it for targeted advertising. We have not done so in the past 12 months. You can still record an opt-out at any time, without an account, on Your Privacy Choices ("Do Not Sell or Share My Personal Information"); if you are signed in, it is saved to your account. We treat a Global Privacy Control (GPC) signal sent by your browser as a valid opt-out of sale and sharing for that browser (and for your account if you are signed in), and the site shows that the signal is honored. We do not knowingly sell or share personal information of consumers under 16.

10. How long we keep information

Information	Retention
Account, addresses, wishlist, saved routines	Until you delete your account. Deletion starts immediately (sign-in is closed) and is completed after a 72-hour grace period.
Orders	As long as tax and accounting law requires [period to be confirmed by counsel, typically 7 years]. When you delete your account or your data, your name and contact details in the order are removed; amounts, taxes and the minimum needed for accounting are kept.
Skin profile	Until you delete it, withdraw consent or delete your account.
Consultant conversations	Not saved: the session lasts 24 hours by default. Saved with your consent: until you delete them or your account. De-identified quality and safety records: 12 months.
Journal comments	While the article exists, until you delete them or, without your name, after you delete your account. IP hash and browser details: 90 days after posting.
Comment reports and comment blocks	While the comment exists or until you delete your account; a temporary block ends on its end date.
"Was this helpful?" reactions	While the article exists or until you delete your account; cookie __Host-fe_rx: 13 months.
Quiz attempts without an account	Up to 30 days, then deleted; aggregated counts without personal information are kept.
Quiz history (signed in)	Until you delete a result in "My quizzes" or delete your account. Results saved to your skin profile: as for the skin profile.
Guest shopping bag	30 days after your last visit; checkout sessions not completed: 30 days.
Newsletter subscription	Until you unsubscribe; unconfirmed sign-ups are deleted after 7 days.
Contact messages and reaction reports	As long as needed to handle them and to meet product safety record-keeping obligations [period to be confirmed by counsel].
Privacy requests	At least 24 months, as required for records of consumer requests.
Consent records	As long as needed to prove your choices [period to be confirmed by counsel]; on account deletion the browser details and IP hash are removed.
Sign-in session records	30 days after the session ends.
Email delivery log	90 days.
Data export files ("Download my data")	7 days.
Backups	Up to 30 days.

11. Your rights and how to use them

Depending on where you live, you may have the right to know what personal information we collect, use and disclose; to access it and get a portable copy; to correct it; to delete it; to opt out of sale, sharing and targeted advertising; to limit the use of sensitive personal information; to withdraw consent; and to appeal our decision. We will not discriminate against you for using these rights.

• In your account (Privacy and data): "Download my data" (a JSON and HTML file, ready by email; it includes your journal comments, reactions and reports and your quiz history with your answers), "Delete my account", "My comments" and "My quizzes" (delete single comments or quiz results), consents for the skin profile and saved chat history, and the sale/sharing opt-out.
• Without an account: the privacy request form — we email you a link to confirm the request comes from you.
• By email: [email protected].

We verify requests by confirming control of the email address used with us and may ask for more information if needed. You may use an authorized agent; we will ask for proof of the agent's authority and may ask you to confirm your identity directly. We respond within 45 days and tell you if we need an extension (up to 45 more days, where the law allows). If we decline your request, you can appeal by replying to our decision or emailing [email protected] with the subject "Privacy appeal"; we answer appeals within the period required by your state's law, and if we deny the appeal you may contact your state Attorney General.

12. Marketing emails

We send marketing emails only if you opted in (the box is never pre-checked) and then confirmed by clicking the link in our confirmation email. Every marketing email contains a one-click unsubscribe link and our postal address. Unsubscribing does not affect transactional emails about your orders or requests.

13. Children

The store is not directed to children. You must be at least 16 to create an account, place an order or use the consultant. We do not knowingly collect personal information from children under 16; if you believe a child has given us information, contact us and we will delete it.

14. Security

We use encryption in transit (HTTPS), application-level encryption of skin profiles, hashed passwords, two-factor authentication and audit logs for staff, and access limited to staff who need it. No system is perfectly secure; if a breach affects your information we will notify you as required by law.

15. Visitors outside the United States

The store serves customers in the United States and our systems are located in the United States. If you visit from elsewhere, your information is processed in the United States. If the GDPR applies to you, you also have the rights to object to and restrict processing and to lodge a complaint with your data protection authority.

16. Changes to this policy

We post changes on this page with a new version and effective date; earlier versions stay available below. For material changes we will notify you by email or on the site and, where required, ask for your consent again.

17. Contact

femmeelixir

Email: [email protected]