Privacy policy

# Privacy Policy

Last updated: June 9, 2026

1. Who we are

UrBeauty ("UrBeauty," "we," "us," or "our") operates the online store at urbeauty.store. The legal entity behind the brand is Vijayalakshmi Dhanaraju, located at Creek Hollow Ave, Zachary, Louisiana 70791, United States. We sell cosmetics directly to customers in the United States.

This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and the rights you have over your information.

2. Information we collect

We collect personal information in the following categories.

Account information. Name, email address, password (stored hashed), and any preferences you set on your account.

Order information. Billing address, shipping address, phone number, items purchased, order value, and order history.

Payment information. Card details and payment confirmations are processed by our payment providers (Shopify Payments, PayPal, and other gateways enabled at checkout). We do not store full card numbers on our servers.

Browsing information. Pages viewed, products clicked, search terms, time on site, and referral source.

Device information. IP address, approximate location derived from IP, browser type, operating system, device identifiers, and cookie identifiers.

Communications. Messages you send to urbeautysupport@gmail.com, reviews you submit, and responses to surveys or marketing emails.

3. Why we use your information

We use personal information to:

  • Process and ship your orders, including transmitting necessary details to our supplier and shipping partners
  • Communicate about orders, returns, and customer service requests
  • Detect and prevent fraud, abuse, and unauthorized access
  • Personalize your shopping experience and product recommendations
  • Send marketing emails when you have opted in (you can opt out at any time)
  • Run, analyze, and improve our store
  • Comply with legal obligations including tax, accounting, and consumer protection laws

4. Who we share information with

We share personal information only as needed, with the following categories of recipients:

  • Shopify Inc. — our e-commerce platform, which hosts our store and processes orders
  • AutoDS and supplier partners — to fulfill your order, we transmit your name, shipping address, contact details, and items ordered to AutoDS, which routes the order to a third-party supplier (often outside your country)
  • Payment processors — Shopify Payments, PayPal, and other gateways you select at checkout
  • Shipping carriers — for delivery and tracking
  • Marketing and analytics providers — Meta (Facebook/Instagram), Google, and TikTok pixels for advertising measurement and retargeting; Google Analytics or similar for website analytics
  • Email service providers — for transactional and marketing emails
  • Professional advisors and authorities — when required by law or to enforce our Terms

We do not sell personal information for money. Some of our advertising partnerships may be considered "sale" or "sharing" of personal information under California law (see Section 9).

5. International transfers

Your information may be transferred to and processed in countries other than your home country, including the United States and the country where your supplier is located.

6. Retention

We keep order records for as long as necessary to fulfill the purposes set out in this policy, including legal, tax, and accounting requirements. As a general rule:

  • Order and tax records: 7 years
  • Account information: until you delete your account, then up to 30 days in backups
  • Marketing data: until you unsubscribe, then up to 30 days in backups
  • Browsing and device logs: up to 24 months

7. Security

We use Shopify's PCI-compliant infrastructure, encryption in transit (HTTPS), access controls, and supplier contracts to protect your information. No system is perfectly secure, but we take security seriously and will notify you and the relevant authorities if a breach affects your data, as required by law.

8. Children

UrBeauty is not directed at children. We do not knowingly collect information from anyone under 16. If you believe a child has provided us with personal information, contact urbeautysupport@gmail.com and we will delete it.

9. Your privacy rights by region

United States — California (CCPA / CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, disclose, and "sell" or "share"
  • Delete personal information we hold about you, subject to legal exceptions
  • Correct inaccurate personal information
  • Opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising — use the "Do Not Sell or Share My Personal Information" link in our footer
  • Limit the use of sensitive personal information
  • Non-discrimination for exercising your rights

To make a request, email urbeautysupport@gmail.com with the subject "California Privacy Request." We will verify your identity using order or account information and respond within 45 days.

United States — Other states

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and Texas (TDPSA) have similar rights, including access, deletion, correction (where applicable), and opt-out of targeted advertising and sale. Use the same email above and identify your state.

10. Cookies and tracking

We use cookies and similar technologies for essential site functions, analytics, and advertising. When you visit urbeauty.store you will see a consent banner where you can accept, reject, or customize categories. You can change your preferences at any time by clicking the "Cookie Preferences" link in our footer.

Categories we use:

  • Strictly necessary — cart, checkout, login, security
  • Analytics — page views, traffic sources, performance
  • Advertising — Meta, Google, TikTok pixels for ad measurement and retargeting

11. Contact and complaint routes

For any privacy question or to exercise your rights:

Email: urbeautysupport@gmail.com (mark subject "Privacy Request") Postal: Vijayalakshmi Dhanaraju, Creek Hollow Ave, Zachary, Louisiana 70791, United States

If we cannot resolve your concern, you have the right to complain to:

  • California: California Privacy Protection Agency — cppa.ca.gov
  • Other US states: your state attorney general's consumer protection division