Privacy policy.

Last updated: September 22, 2026

This Privacy Policy explains how Tidepool Beauty LLC ("Tidepool Beauty", "we", "us") collects, uses and shares personal information when you visit tidepoolbeauty.shop (the "Site"), buy from us, or contact us. It applies to information collected online through the Site and by email. By using the Site you agree to the practices described here.

1. Who we are

Tidepool Beauty LLC is a retailer of cosmetics and skincare based at 2216 Eastern Ave #20, Gallipolis, OH 45631, United States. We are the business responsible for the personal information described in this policy. You can reach us at help@tidepoolbeauty.shop or (740) 645-5357.

2. Information we collect

Information you give us

• Order information: name, email address, phone number, shipping and billing address, the products you buy and your order history.
• Payment information: card details are entered into and processed by our payment processor, Stripe. We receive only limited information from Stripe, such as the card brand, the last four digits, expiration month and year, the billing ZIP code and whether the payment succeeded. We do not receive or store your full card number or security code.
• Communications: messages you send us through the contact form or by email, including any details about your skin you choose to share when asking for product advice.
• Newsletter: the email address you give us when you sign up for updates.

Information collected automatically

• Device and usage data: IP address, browser type, device type, operating system, referring page, pages viewed, and the date and time of your visit.
• Cart data: the contents of your bag are stored in your own browser's local storage so they persist between visits. This data stays on your device until you check out or clear it.
• Fraud-prevention signals: Stripe may collect device and browsing information on checkout pages to detect and prevent fraud, as described in section 4.

Information from others

We may receive information from shipping carriers (delivery status, address corrections) and from Stripe (payment outcome and fraud risk assessments).

3. How we use information

Purpose	Information used
Process and ship your order, send order and shipping confirmations, handle returns and refunds	Order, contact and limited payment information
Take payment and prevent fraudulent transactions	Payment, device and order information
Answer questions and provide customer support	Contact information and communications
Send marketing emails you have asked for	Email address, purchase history (to avoid sending irrelevant offers)
Run, secure and improve the Site, fix errors and understand which pages are useful	Device and usage data
Comply with law, tax and accounting obligations, and enforce our Terms	Order and payment records

We do not sell your personal information, and we do not use it to make decisions that produce legal or similarly significant effects about you based solely on automated processing.

4. Payments and Stripe

We use Stripe, Inc. ("Stripe") to process card payments. When you pay, your card number, expiration date and security code are sent directly to Stripe over an encrypted (TLS) connection. Stripe is certified to PCI DSS Level 1, the highest level of certification in the payments industry.

Stripe processes payment information as an independent controller for certain purposes, including fraud prevention, complying with financial regulations and improving its services. To detect fraud, Stripe may collect information about the device and browser you use during checkout. Stripe's handling of your information is described in the Stripe Privacy Policy, and you can learn more about Stripe's fraud-prevention data use at stripe.com/legal/privacy-center.

We keep a record of each transaction (amount, date, items, the last four digits and brand of the card, and the Stripe transaction ID) so we can issue refunds, answer billing questions and meet our tax and accounting obligations.

5. How we share information

We share personal information only with the service providers we need to run the store, and only for the purposes above:

• Payment processing: Stripe, as described in section 4.
• Shipping: USPS, UPS or FedEx receive your name, shipping address and phone number to deliver your order.
• Hosting and email: our website host and our email delivery provider, which process data on our behalf under contract.
• Legal and safety: when required by law, subpoena or court order, or when we believe disclosure is needed to protect our rights, prevent fraud or protect someone's safety.
• Business transfers: if Tidepool Beauty is involved in a merger, acquisition or sale of assets, customer information may be transferred as part of that transaction, subject to this policy.

The brands whose products we sell do not receive your personal information from us.

6. Cookies and similar technologies

The Site uses a small number of technologies that are strictly necessary for it to work: browser local storage for your bag, and session storage to show your order confirmation. Stripe sets cookies on checkout to process payments securely and prevent fraud. We do not use third-party advertising cookies or cross-site tracking pixels. You can clear local storage and cookies in your browser settings at any time; doing so empties your bag.

Some browsers send a "Global Privacy Control" (GPC) or "Do Not Track" signal. Because we do not sell or share personal information for cross-context behavioral advertising, there is nothing for these signals to switch off, but we treat a GPC signal as a valid opt-out request where the law requires.

7. How long we keep information

We keep order and transaction records for seven years to meet tax and accounting requirements. Customer-service messages are kept for up to two years after the last contact. Newsletter addresses are kept until you unsubscribe. Server logs are deleted after 90 days. When information is no longer needed, we delete or anonymize it.

8. Your privacy rights

Depending on where you live, you may have the right to:

• know what personal information we hold about you and receive a copy of it;
• correct inaccurate information;
• delete your personal information, subject to the records we must keep by law;
• opt out of marketing emails at any time; and
• not be treated differently for exercising any of these rights.

To make a request, email help@tidepoolbeauty.shop or call (740) 645-5357. We will confirm receipt within 10 business days and respond within 45 days. To protect your information we will verify your identity by matching the email address and order details we have on file. You may use an authorized agent; we will ask for proof that the agent is permitted to act for you.

9. California residents

If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, "CCPA"), gives you the rights listed in section 8, plus the rights to limit the use of sensitive personal information and to opt out of the sale or sharing of personal information.

• Categories collected in the last 12 months: identifiers (name, email, address, IP address); customer records (phone, billing address, limited card information); commercial information (purchase history); internet activity (pages viewed on our Site); and geolocation derived from IP address at city level.
• Sources: you, your device, Stripe and shipping carriers.
• Business purposes: the purposes listed in section 3.
• Disclosed for business purposes to: payment processors, shipping carriers, hosting and email providers.
• Sale or sharing: we have not sold or shared personal information for cross-context behavioral advertising in the last 12 months, and we have no actual knowledge of selling or sharing the information of consumers under 16.
• Sensitive personal information: we do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA.

Under California's "Shine the Light" law, California residents may ask once a year whether we disclosed personal information to third parties for their direct marketing. We do not.

10. Residents of other US states

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with consumer privacy laws have similar rights to access, correct, delete and obtain a copy of their information, and to opt out of targeted advertising, sale and profiling. We honor these requests for all US customers regardless of state. If we decline your request, you may appeal by replying to our decision with the subject line "Privacy appeal"; we will respond within 45 days. If you are not satisfied with the outcome, you may contact your state attorney general.

11. Marketing emails

We send marketing emails only if you opt in at checkout or through the newsletter form. Every marketing email includes an unsubscribe link, and you can also unsubscribe by emailing help@tidepoolbeauty.shop. We will still send transactional messages about your orders.

12. Security

The Site is served over HTTPS. Card data is handled by Stripe and never touches our servers. Access to order information is limited to the staff who need it to fulfill orders and help customers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; if we learn of a breach affecting your information, we will notify you as required by law.

13. Children

The Site is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above, and if the changes are significant we will notify customers by email or with a notice on the Site before they take effect.

15. Contact us

Tidepool Beauty LLC
2216 Eastern Ave #20, Gallipolis, OH 45631
Email: help@tidepoolbeauty.shop
Phone: (740) 645-5357 (Monday to Friday, 9 am - 5 pm Eastern)