Privacy Policy

Effective Date: January 15th, 2025

Your privacy matters. This Privacy Policy explains how Dermaly (“we,” “us,” or “our”) collects, uses, protects, and shares your personal information when you interact with our website (Dermaly.store), purchase our products, or communicate with us.

This policy applies globally and complies with regulations such as the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), and General Data Protection Regulation (GDPR).

1. What We Collect

We collect personal data when you:

  • Make a purchase

  • Subscribe to our newsletter

  • Contact support

  • Leave a review

  • Join a promotion or campaign

This may include:

  • Name, email, phone number

  • Shipping and billing addresses

  • Order/payment details (processed securely through Shopify and third-party platforms)

We also collect technical data like:

  • IP address, browser/device type, session activity

  • Shopping behavior, ad interactions

  • Location data (approximate)

Some information may be shared with us from platforms like Shopify, Meta, Google, or third-party apps we use for fulfillment and marketing.

2. How We Use Your Information

We use your information to:

  • Fulfill and ship orders

  • Provide customer support

  • Send order updates and promotions

  • Improve your website experience

  • Optimize advertising and reduce fraud

We process your data based on:

  • Your consent

  • Contractual obligations

  • Legitimate business interests

  • Legal compliance

3. When We Share Your Data

We only share your personal data with trusted service providers, including:

  • Shopify (store platform)

  • Payment processors

  • Shipping & fulfillment partners

  • Customer service and email platforms

  • Marketing and analytics providers (like Meta and Google)

We do not sell your personal data. All partners follow strict confidentiality and data protection agreements.

4. Your Rights

Depending on your location, you may have the right to:

  • Access or delete your data

  • Correct inaccurate information

  • Opt out of marketing or targeted advertising

  • Withdraw consent or restrict processing

To exercise your rights, email dermalycontact@gmail.com.

 We’ll verify your identity before processing any request and will never penalize you for asserting your privacy rights.

5. Cookies & Tracking

We use cookies and similar technologies to:

  • Save preferences

  • Track site performance

  • Deliver relevant ads

You can manage cookie preferences in your browser. Learn more here: Shopify Cookie Policy.
We also respect Global Privacy Control (GPC) signals where required.

6. Data Security & Retention

We protect your data using SSL encryption, access controls, and regular audits.
Your data is only retained as long as needed for legal, operational, or support purposes.

7. Children’s Privacy

We don’t knowingly collect data from children under 13. If we become aware of such data, we will delete it promptly.

8. International Transfers

If you're outside the U.S., your data may be processed in the United States or other countries. We use legal safeguards (like Standard Contractual Clauses) to ensure your data remains protected.

9. Policy Updates

We may update this policy as laws or business needs change. When we do, we’ll revise the “Effective Date” above. We encourage you to review this page periodically.

10. Contact Us

If you have questions or wish to make a privacy-related request, reach out to:

📧 dermalycontact@gmail.com
📍 Dermaly, USA