Privacy policy
Last updated: 2026-08-22
We're a small business and we treat your data the way we'd want ours treated: we collect the minimum, we don't sell it, and we use it only to take care of your order.
What we collect
- When you order: your name, shipping address, email and phone — what's needed to charge, ship and keep you posted.
- When you message us on WhatsApp, email or Instagram: whatever you send, including your number or handle.
- When you browse: your browser stores your language preference and your cart locally (in localStorage). That never leaves your device and we don't see it.
What we don't collect
We never see or store your card number. Payment is handled by Stripe on its own secure page. We don't use advertising pixels and we don't sell data to anyone.
How we use it
- To prepare, charge and ship your order.
- To answer your messages and fix any problem with an order.
- To meet legal obligations, including handling reports of adverse reactions to a cosmetic product.
- If you ask us to, to tell you about new products. We never send promotions without your permission, and you can tell us to stop at any time.
Who we share it with
- Stripe — processes payment and receives your name, email and shipping address to do so. Stripe's privacy policy.
- The carrier (USPS, UPS or another) — receives your name, address and phone to deliver the package.
- Vercel — hosts this site and, like any server, logs basic technical data such as IP address for security and performance.
- WhatsApp / Meta, Instagram — if you contact us there, their own privacy policy applies.
Cookies and analytics
This site uses no tracking or advertising cookies. If we add an analytics tool in the future to see which pages are visited, we'll use a privacy-respecting one (that doesn't identify you personally) and say so here.
How long we keep it
We keep order information for as long as the law requires for accounting and warranty purposes (typically up to 7 years). Messages are kept while they're useful for helping you. You can ask us to delete anything we're not required to keep.
Your rights
You can ask us at any time to: see the data we hold about you, correct it, delete it, or stop messaging you. Email hello@nickysglow.com and we'll respond within 30 days. If you live in California or another state with its own privacy law, those rights apply to you too, and we won't treat you differently for exercising them.
Children
This site is intended for adults. We don't knowingly collect data from children under 13. If you believe a child has sent us data, email us and we'll delete it.
Security
The site is served over HTTPS. Payment happens on Stripe, which is PCI-DSS compliant. Even so, no system is 100% secure; if we detect an incident affecting your data, we'll let you know.
Changes
If we change this policy, we update the date above. Significant changes are announced on the site.
Contact
Controller: Nicky's Glow. Email: hello@nickysglow.com. You can also use this address to report any adverse reaction to a product.