Privacy policy

This policy explains what personal data Cloudverg LLC ("we") collects and how we use it. We follow the EU/UK GDPR, the California Consumer Privacy Act, India's Digital Personal Data Protection Act and the US Children's Online Privacy Protection Act (COPPA).

What we collect

Order data: name, email, shipping address and phone number, used to deliver your order.
Account data: email, name, birth year and a securely hashed password.
Payment data is handled entirely by Stripe. We never see or store your full card number.
Newsletter: your email, only if you sign up.
Sign in with OneLifeVibe (optional): when you choose it, OneLifeVibe tells us your OneLifeVibe user ID, your verified email address, your name, your OneLifeVibe session ID and whether you signed in with Google. We keep the link between the two accounts, that session ID and the signed sign-in token, which we use only to sign you out. We send nothing to OneLifeVibe when you sign in.
Connected assistants (optional): if you connect a OneLifeVibe assistant and give consent, it can read only your own orders through the tools we document. It never sees addresses or payment details.

What we don't do

We don't sell your personal data or use third-party advertising trackers.
We use only essential cookies (your session and shopping bag) and privacy-friendly, cookieless analytics.
The Beauty Mirror uses your camera only after you tap Start. Face detection and the optional shade finder (an estimate of skin depth and undertone used to suggest colours) run entirely in your browser: no images or video, and no face or colouring data, are sent to us or stored.

Young people

Our site is not directed at children under 13, and we do not knowingly collect personal data from anyone under 13. Accounts require you to be at least 13. If you are under 18, please shop with a parent or guardian's permission. In the EU, if you are under 16, a parent or guardian must agree before you join our newsletter. If you believe a child under 13 has given us data, contact us and we will delete it.

Sharing

We share only what is needed with: Stripe (payments), our fulfilment partners (name, address and phone to ship your parcel) and Cloudflare (hosting and security). If you use Sign in with OneLifeVibe, OneLifeVibe handles that sign-in under its own privacy policy.

Your rights

You can request access, correction, deletion or a copy of your data, or object to processing, by emailing Support@OneLifeVibe.com. You may also complain to your local data protection authority.

Retention

Order records are kept for as long as tax law requires (typically 6-10 years). Account and newsletter data is deleted on request.