Protecting your private information is our priority. This Statement of Privacy applies to https://knesko.com/ and KNESKO, LLC (“Knesko Skin,” “we,” “our,” or “us”) and governs our data‑collection and data‑use practices. By using the Knesko Skin website or signing up for promotions and newsletters, you consent to the data practices described in this Statement.

Legal Bases for Processing (EEA/UK visitors)
We process your Personal Information only when we have a lawful basis to do so under the General Data Protection Regulation (“GDPR”) or UK GDPR—i.e., (i) your consent, (ii) performance of a contract with you, (iii) compliance with a legal obligation, or (iv) our legitimate interests that do not override your fundamental rights.

Collection of your Personal Information

Knesko Skin collects the following categories of information:

• Identifiers – such as name, postal address, telephone number, e‑mail address, IP address, device identifiers.

• Commercial information – products purchased, returned, or considered; payment card details (collected and processed securely by Shopify Payments).

• Internet / electronic activity data – browser type, referring pages, time‑stamps, pixel tags, cookie identifiers (see “Cookies & Similar Technologies” below).

• User‑generated content – information you post on reviews, public message boards or social media when you tag us.

• Sensitive information – only where strictly necessary (e.g., allergy details you voluntarily supply during a skincare consultation).

We do not knowingly collect data from children under 13. If you are under 13, please ask a parent or guardian to assist you.

Cookies & Similar Technologies

We and our partners (Shopify, Klaviyo, Google Analytics, Meta Platforms, etc.) use cookies and pixels to:

• remember your cart and preferences,

• analyse site traffic and performance,

• show you relevant ads.

You may disable cookies via your browser settings or the “Cookie Settings” link in our site footer; doing so may limit certain site features.

Do Not Track & Global Privacy Control (GPC)

Our site honours GPC signals. When your browser sends a GPC header, we treat it as an opt‑out of the “sale” or “sharing” of data for cross‑context behavioural advertising under the California Consumer Privacy Act (“CCPA”) as amended by CPRA.

Use of your Personal Information

We use Personal Information to:

• fulfil and manage your orders, returns, or exchanges;

• send transactional or marketing communications (you may opt‑out at any time);

• personalise your onsite and advertising experience;

• improve our products and services;

• detect, investigate, and prevent fraud or security incidents; and

• comply with legal obligations.

We do not sell or rent customer lists. We share data only with trusted service providers (Shopify, Klaviyo, ShipStation, payment processors, carriers, IT and analytics partners) under written contracts that require them to keep your information confidential and to process it solely on our behalf.

International Data Transfers

We are a U.S.‑based company that relies on Shopify’s recognised transfer mechanisms (Standard Contractual Clauses and, where applicable, UK Addendum) to lawfully transfer Personal Information from the EEA, UK or Switzerland to the United States and other jurisdictions.

Retention of Personal Information

We keep Personal Information only as long as necessary for the purposes set out in this Policy (e.g., for the life of your account, plus any period required by law for tax, accounting, or audit purposes). When data is no longer needed, we securely delete or anonymise it.

Security of your Personal Information

We secure Personal Information through administrative, technical and physical safeguards, including:

• TLS/SSL encryption of data in transit,

• tokenised payment processing through Shopify Payments,

• firewalls, access‑controls and multi‑factor authentication,

• regular penetration testing and staff privacy training.

No internet transmission or storage system is guaranteed 100 % secure, but we follow ISO‑27001‑aligned best practices.

Your Privacy Rights

Depending on where you live, you may have the right to:

• Access the Personal Information we hold about you;

• Correct or update inaccurate data;

• Delete your Personal Information;

• Restrict or object to certain processing;

• Port your data to another provider;

• Opt‑out of targeted advertising or the “sale/share” of data;

• Withdraw consent at any time (this will not affect prior processing); and

• Lodge a complaint with your local data‑protection authority.

To exercise any of these rights, please email privacy@kneskoskin.com or write to us (address below). We will verify your identity and respond within the timeframe required by applicable law.

Opt‑Out & Unsubscribe

You may opt‑out of marketing emails at any time by clicking “Unsubscribe” in the footer of our emails or by contacting us at newsletter@kneskoskin.com. Transactional messages (e.g., order confirmations) will still be sent.

Changes to this Statement

We may update this Privacy Policy periodically to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the revised Policy with an “Effective Date” above and, where required, seek your consent to material changes.

Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact:

Data Protection Officer
KNESKO, LLC
107 N Reino Rd #401
Thousand Oaks, CA 91320
United States
Email: privacy@kneskoskin.com

_________________

Effective as of May 25, 2018