Introduction

At Elyria Skincare, transparency isn’t just about ingredients — it extends to how we handle your personal information.

This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have. We believe you deserve to understand exactly how your information is treated.

If you have any questions after reading this policy, please contact us at elyriaskincare@gmail.com or WhatsApp: +92 331 6056888. We’re here to help.


1. WHO WE ARE

Company Name: Elyria Skincare
Business Type: E-commerce Skincare Brand
Location: Pakistan
Website: www.elyriaskincare.com
Contact Email: elyriaskincare@gmail.com
Contact Phone/WhatsApp: +92 331 6056888

Data Controller: Elyria Skincare is the data controller responsible for your personal information collected through our website, mobile applications, social media, and other channels.


2. WHAT INFORMATION WE COLLECT

We collect information you provide directly to us and information collected automatically when you use our services.

2.1 Information You Provide to Us:

Account Information:

  • Full Name
  • Email Address
  • Phone Number
  • Shipping Address
  • Billing Address
  • Password (encrypted)

Order Information:

  • Products purchased
  • Order amount
  • Payment method (not card details — see Section 2.3)
  • Delivery preferences
  • Order history

Communication Information:

  • Messages sent via contact forms
  • WhatsApp conversations
  • Email correspondence
  • Customer service inquiries
  • Product reviews and ratings
  • Survey responses

Marketing Preferences:

  • Newsletter subscription status
  • Communication preferences
  • Product interests

Optional Information:

  • Date of birth (for birthday offers)
  • Skin type and concerns (for product recommendations)
  • Gender (optional)
  • Referral source (“How did you hear about us?”)

2.2 Information Collected Automatically:

Device and Browser Information:

  • IP address
  • Browser type and version
  • Device type (mobile, desktop, tablet)
  • Operating system
  • Screen resolution
  • Referring website

Usage Data:

  • Pages visited
  • Products viewed
  • Time spent on site
  • Click behavior
  • Search queries on our website
  • Shopping cart activity (including abandoned carts)

Location Data:

  • General location based on IP address (city/region level)
  • Precise location (only if you grant permission for delivery estimation)

Cookies and Tracking Technologies:

  • Session cookies (essential for shopping cart)
  • Analytics cookies (Google Analytics)
  • Marketing cookies (Facebook Pixel, if applicable)
  • Preference cookies (language, currency)

2.3 Payment Information:

We do not store your complete credit/debit card information on our servers.

For Online Payments:

  • Payment processing is handled by secure third-party payment gateways
  • They collect: card number, expiry date, CVV, cardholder name
  • We only receive: transaction confirmation, last 4 digits of card, transaction ID

For Cash on Delivery:

  • No payment information is collected in advance
  • Cash handling at delivery is between you and the courier

Payment Gateways We Use:

  • [Your payment gateway names, e.g., JazzCash, EasyPaisa, Stripe, etc.]
  • Each has their own Privacy Policy (links provided at checkout)

3. HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

3.1 Order Processing and Fulfillment:

  • Process and complete your orders
  • Arrange shipping and delivery
  • Send order confirmations and updates
  • Handle returns and exchanges
  • Process refunds
  • Manage customer accounts

3.2 Customer Service:

  • Respond to your inquiries and support requests
  • Provide product information and recommendations
  • Resolve complaints and disputes
  • Follow up on incomplete orders or abandoned carts

3.3 Marketing and Communications:

  • Send promotional emails (only if you’ve subscribed)
  • Share new product launches and offers
  • Send personalized product recommendations
  • Conduct surveys and gather feedback
  • Birthday wishes and special occasion offers (if you’ve provided your birth date)

You can opt out of marketing emails at any time by clicking “Unsubscribe” at the bottom of any email or contacting us.

3.4 Website Improvement and Analytics:

  • Analyze website usage patterns
  • Improve website functionality and user experience
  • Test new features
  • Troubleshoot technical issues
  • Monitor website performance

3.5 Fraud Prevention and Security:

  • Detect and prevent fraudulent transactions
  • Verify customer identity
  • Protect against unauthorized access
  • Secure our systems and data
  • Comply with legal obligations

3.6 Legal Compliance:

  • Comply with applicable laws and regulations
  • Respond to legal requests and court orders
  • Enforce our Terms and Conditions
  • Protect our rights and property

4. LEGAL BASIS FOR PROCESSING (GDPR-Style Compliance)

We process your personal data based on the following legal grounds:

Contract Performance:

  • Processing orders and delivering products (necessary to fulfill our contract with you)

Legitimate Interests:

  • Improving our website and services
  • Fraud prevention and security
  • Marketing to existing customers (where permitted)
  • Business analytics

Consent:

  • Marketing emails (you can withdraw consent anytime)
  • Non-essential cookies (you can manage via cookie settings)
  • Optional data like birth date and skin concerns

Legal Obligation:

  • Tax and accounting records
  • Responding to legal requests
  • Compliance with consumer protection laws

5. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information to third parties. We share your information only in the following circumstances:

5.1 Service Providers:

We share data with trusted third-party service providers who help us operate our business:

Courier and Delivery Services:

  • TCS, Leopards, Trax, PostEx (or other courier partners)
  • Shared Data: Name, phone number, delivery address, order details
  • Purpose: Product delivery and shipment tracking

Payment Processors:

  • [Your payment gateway names]
  • Shared Data: Transaction amount, payment method, billing information
  • Purpose: Processing payments securely

Email Service Providers:

  • MailChimp, ConvertKit, or similar platforms
  • Shared Data: Email address, name, purchase history
  • Purpose: Sending order confirmations, newsletters, promotional emails

Analytics Providers:

  • Google Analytics
  • Shared Data: Device information, usage data, anonymized behavior
  • Purpose: Website analytics and improvement

Social Media Platforms:

  • Facebook, Instagram, TikTok (for ads and analytics)
  • Shared Data: Email address (hashed), website activity
  • Purpose: Targeted advertising and campaign measurement

Customer Support Tools:

  • WhatsApp Business, Help desk software
  • Shared Data: Contact information, conversation history
  • Purpose: Customer service and support

All service providers are contractually obligated to:

  • Protect your data
  • Use it only for the specified purpose
  • Not share it with others
  • Delete or return it when no longer needed

5.2 Business Transfers:

If Elyria Skincare is acquired by or merged with another company, your personal information may be transferred to the new owner as part of the business assets. We will notify you via email and/or website notice before your information is transferred.

5.3 Legal Requirements:

We may disclose your information if required by law or in response to:

  • Court orders or legal processes
  • Government or regulatory requests
  • Law enforcement investigations
  • Protection of our legal rights or property
  • Emergency situations involving safety or security

5.4 With Your Consent:

We may share your information with other parties if you give us explicit permission (e.g., sharing your review with your name on our website or social media).


6. COOKIES AND TRACKING TECHNOLOGIES

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us remember your preferences and improve your experience.

Types of Cookies We Use:

Essential Cookies (Always Active):

  • Shopping cart functionality
  • Login session management
  • Security features
  • Cannot be disabled (required for website to function)

Analytics Cookies (Optional):

  • Google Analytics (website traffic and behavior)
  • Helps us understand how visitors use our site
  • Can be disabled via cookie settings

Marketing Cookies (Optional):

  • Facebook Pixel, Google Ads (if applicable)
  • Remarketing and targeted advertising
  • Can be disabled via cookie settings or ad blockers

Preference Cookies (Optional):

  • Language and currency preferences
  • Display settings
  • Can be disabled but may affect user experience

Managing Cookies:

Browser Settings: You can control cookies through your browser settings:

  • Google Chrome: Settings → Privacy → Cookies
  • Safari: Preferences → Privacy → Cookies
  • Firefox: Options → Privacy → Cookies

Cookie Consent: On your first visit, you’ll see a cookie consent banner. You can:

  • Accept all cookies
  • Reject non-essential cookies
  • Customize your preferences

Third-Party Tools:

  • Google Analytics Opt-out: [Link]
  • Facebook Ad Preferences: [Link]

7. DATA SECURITY

We take data security seriously and implement industry-standard measures to protect your information:

Technical Safeguards:

  • SSL/TLS encryption for data transmission (HTTPS)
  • Encrypted database storage
  • Secure payment gateways (PCI-DSS compliant)
  • Regular security audits and updates
  • Firewall protection
  • Access controls and authentication

Organizational Safeguards:

  • Limited employee access (need-to-know basis)
  • Confidentiality agreements with staff and partners
  • Regular security training
  • Incident response procedures

What We Don’t Store:

  • Full credit/debit card numbers (only last 4 digits)
  • Card CVV codes
  • Unencrypted passwords

However, please note: No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for keeping your account password confidential.


8. DATA RETENTION

We retain your personal information only as long as necessary for the purposes outlined in this policy or as required by law.

Retention Periods:

Account Information:

  • Active accounts: Retained while account is active
  • Inactive accounts: Deleted after 3 years of inactivity (with prior notice)

Order Information:

  • Retained for 5 years (for accounting, tax, and legal compliance)
  • Transaction records: 7 years (as per financial regulations)

Marketing Data:

  • Retained until you unsubscribe or request deletion
  • Unsubscribed contacts: Retained in suppression list (to prevent re-subscription)

Website Analytics:

  • Google Analytics: 26 months (default setting)
  • Internal analytics: 2 years

Customer Service Records:

  • Chat/email history: 3 years
  • Complaint records: 5 years

After Retention Period:

  • Data is securely deleted or anonymized
  • Some aggregated, anonymized data may be kept for statistical purposes

9. YOUR RIGHTS

You have the following rights regarding your personal information:

9.1 Right to Access:

You can request a copy of all personal data we hold about you.

How to request:

  • Email: elyriaskincare@gmail.com with subject “Data Access Request”
  • Include: Full name, email address, phone number (for verification)
  • We’ll respond within 30 days with a downloadable file

9.2 Right to Rectification:

You can update or correct inaccurate information.

How to update:

9.3 Right to Erasure (“Right to be Forgotten”):

You can request deletion of your personal data.

Limitations:

  • We may retain data required for legal compliance (e.g., tax records)
  • Order history for 5 years (legal requirement)
  • Data in backups (deleted during next backup cycle)

How to request:

9.4 Right to Restriction:

You can request that we stop processing your data in certain circumstances.

9.5 Right to Data Portability:

You can request a copy of your data in a machine-readable format (CSV/JSON).

9.6 Right to Object:

You can object to:

  • Marketing communications (unsubscribe anytime)
  • Automated decision-making
  • Processing based on legitimate interests

9.7 Right to Withdraw Consent:

If we process data based on consent, you can withdraw it anytime (doesn’t affect past processing).

To Exercise Your Rights:

  • Email: elyriaskincare@gmail.com
  • WhatsApp: +92 331 6056888
  • Subject: “Privacy Rights Request – [Your Name]”
  • Include: Nature of request, account email, phone number (for verification)
  • Response time: Within 30 days

10. CHILDREN’S PRIVACY

Elyria Skincare’s products and services are intended for adults aged 18 and above.

We do not knowingly collect personal information from children under 18.

If you are under 18:

  • Please do not create an account or make purchases
  • Do not submit any personal information
  • Ask a parent or guardian to make purchases on your behalf

If we discover that we’ve collected information from a child under 18:

  • We will delete it promptly
  • We will not use or share the information

If you are a parent/guardian and believe your child has provided us with personal information, please contact us immediately at elyriaskincare@gmail.com and we will delete it.


11. INTERNATIONAL DATA TRANSFERS

Our Operations:

  • Our servers and data storage are primarily located in Pakistan
  • Some service providers may store data outside Pakistan (e.g., cloud hosting, email services)

Data Transferred to:

  • Google (USA) — Analytics, Cloud Storage
  • MailChimp (USA) — Email Marketing (if applicable)
  • Payment Gateways — May process internationally

Protection Measures:

  • Service providers comply with international data protection standards
  • Contractual agreements require data protection
  • Encryption during transmission

Your Rights: If your data is transferred internationally, you retain all the rights outlined in Section 9.


12. THIRD-PARTY LINKS

Our website may contain links to third-party websites, including:

  • Social media platforms (Facebook, Instagram, TikTok)
  • Payment gateways
  • Courier tracking sites
  • Partner websites

Please note:

  • These third parties have their own privacy policies
  • We are not responsible for their privacy practices
  • We encourage you to read their policies before providing information

13. MARKETING COMMUNICATIONS

What You’ll Receive (if subscribed):

  • New product launches
  • Special offers and discounts
  • Skincare tips and educational content
  • Order updates (always sent, even if unsubscribed from marketing)

How We Personalize:

  • Based on your purchase history
  • Based on products you’ve viewed
  • Based on your skin type/concerns (if provided)

How to Opt-Out:

  • Click “Unsubscribe” at the bottom of any email
  • Email us: elyriaskincare@gmail.com
  • Update preferences in your account settings
  • WhatsApp: Send “STOP” to +92 331 6056888

Note: Even if you unsubscribe from marketing emails, we will still send:

  • Order confirmations
  • Shipping notifications
  • Account-related messages
  • Customer service responses

14. AUTOMATED DECISION-MAKING

We may use automated systems for:

Product Recommendations:

  • Based on browsing history and past purchases
  • You can ignore recommendations; they don’t affect your access to products

Fraud Detection:

  • Automated screening for suspicious transactions
  • May result in order holds for verification
  • You can contact us to resolve any issues

Pricing:

  • Prices are set by us, not automated algorithms
  • No dynamic pricing based on your profile

You have the right to:

  • Request human review of automated decisions
  • Contest decisions
  • Express your point of view

15. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

  • Changes in our practices
  • New legal requirements
  • New features or services
  • Customer feedback

When we make changes:

  • We’ll update the “Last Updated” date at the top
  • For significant changes, we’ll notify you via:
    • Email to your registered address
    • Prominent notice on our website
    • Banner notification when you log in

Your continued use of our services after changes means you accept the updated policy.

We encourage you to review this policy periodically.


16. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information:

Email: elyriaskincare@gmail.com
WhatsApp: +92 331 6056888
Phone: +92 331 6056888
Address: [Your business address, if you have one]

Response Time: We aim to respond within 48 hours (business days).

For Data Protection Inquiries: Please use subject line: “Privacy Inquiry – [Your Name]”

For Rights Requests: Please use subject line: “Privacy Rights Request – [Type of Request]”


17. PAKISTAN-SPECIFIC INFORMATION

Data Protection Law in Pakistan:

  • Pakistan does not currently have comprehensive data protection legislation similar to GDPR
  • We voluntarily comply with international best practices
  • We follow principles outlined in the Prevention of Electronic Crimes Act (PECA) 2016
  • We comply with all applicable Pakistani laws regarding consumer rights and data handling

Local Authorities:

  • Pakistan Telecommunication Authority (PTA)
  • Federal Investigation Agency (FIA) Cybercrime Wing

Your Rights Under Pakistani Law:

  • Right to file complaints with FIA Cybercrime for data misuse
  • Consumer protection under relevant Pakistani consumer laws
  • Right to legal recourse through Pakistani courts

18. GLOSSARY

Personal Information: Information that identifies you as an individual (name, email, phone, address).

Data Controller: The entity (Elyria Skincare) that determines how and why personal data is processed.

Data Processor: Third parties (like couriers, email providers) who process data on our behalf.

Cookies: Small text files stored on your device by websites.

IP Address: A unique numerical identifier assigned to your internet connection.

SSL/TLS: Security protocols that encrypt data transmitted between your browser and our website.

PCI-DSS: Payment Card Industry Data Security Standard — security standards for handling card payments.

GDPR: General Data Protection Regulation — European data protection law (we follow similar principles).

Anonymization: Removing identifying information from data so individuals cannot be identified.


📋 QUICK SUMMARY (Not Legally Binding — Full Policy Above Applies)

What we collect:

  • Name, email, phone, address (when you order)
  • Payment info (processed securely, not stored by us)
  • Website usage data (to improve experience)

Why we collect it:

  • Process and deliver your orders
  • Communicate with you
  • Improve our website
  • Send marketing (only if you subscribe)

Who we share with:

  • Couriers (to deliver orders)
  • Payment processors (to process payments)
  • Email service (to send updates)
  • Analytics (to improve website)

Your rights:

  • Access your data
  • Correct inaccuracies
  • Delete your account
  • Opt-out of marketing
  • Export your data

Contact us: elyriaskincare@gmail.com | +92 331 6056888


ACKNOWLEDGMENT

By using Elyria Skincare’s website, products, or services, you acknowledge that you have read, understood, and agree to this Privacy Policy.

If you do not agree with this policy, please do not use our services.


Last Updated: May 11, 2026
Version: 1.0
Effective Date: May 11, 2026


🤍 OUR COMMITMENT

At Elyria, transparency isn’t optional — it’s foundational.

Just as we disclose every ingredient in our products, we’re transparent about how we handle your data.

Your trust matters. Your privacy matters.

If you ever have concerns, we’re here to listen and help.

— Team Elyria
Science That Feels Like Paradise. 🤍

Shopping cart

0
image/svg+xml

No products in the cart.

Continue Shopping

Welcome to the gold standard of dermatological care at Elyria Skincare — where science meets skin.           🚚 Unlock free standard shipping across Pakistan on every purchase of PKR 4,000 or more. ✨          Experience high-performance skincare formulated with precision and delivered with excellence.