Privacy Policy
Welcome to the CoreLash website! CoreSpace LLC ("CoreLash", "we", "our", or "us") respects your privacy and is committed to protecting it through this Privacy Policy. This Policy explains how we collect, use, and disclose your information when you access or use our website, products, and services.
By using www.corelash.com, you agree to the terms of this Privacy Policy.
1. HOW WE COLLECT INFORMATION
We collect information from you directly when you interact with our Website, and from other sources as described in more detail below, including:
Information You Provide to Us
-
Account Creation: When you create an account, we may collect your name, email, and password. Optionally, you may add profile details such as a photo, eye color and shape, skin tone, product preferences, and other personalized info.
-
Purchases: We collect information related to your purchases, including your name, email, shipping address, and phone number. Payment data is handled by third-party payment processors; we do not store your card details.
-
Customer Communications: When you contact us for support or marketing updates, we collect your email, phone number, or other contact information. We may also send text notifications regarding new products or offers with your permission.
-
Surveys and Reviews: If you participate in surveys, contests, or post reviews, we may collect and display your submitted information.
-
Biometric Data: With your explicit consent, we may use facial geometry data (e.g., around your eye) for virtual try-on features. We do not collect iris or retina data; we delete biometric data within three years of last use.
Information Generated from Use of the Website:
-
We automatically collect technical data from your browser or device, including IP address, browser type, location, device identifiers, and other usage stats like page views, clicks, and errors.
-
We use cookies, pixel tags, and similar technologies to recognize devices, analyze performance, provide personalized content, and prevent fraud.
-
Categories of cookies include:
-
Operationally Necessary: To operate the website and prevent fraud.
-
Performance-Related: To understand how users interact with the site.
-
Functionality-Related: To remember preferences and enhance features.
-
Advertising- or Targeting-Related: To show relevant ads via third-party platforms.
-
Operationally Necessary: To operate the website and prevent fraud.
Information from Other Sources:
-
We may supplement your data with third-party sources such as Shopify, Google Analytics, Facebook, Hotjar, TikTok, and Pinterest to improve our services and marketing.
-
Our site may include social sharing tools and referral features that allow you to share content or invite others to our site. Only provide contact info for individuals you know and have consent from.
2. HOW INFORMATION MAY BE USED
We may use your personal information in a variety of ways, including but not limited to:
-
Setting up and managing your user account;
-
Delivering, operating, and maintaining our Website and related services;
-
Supporting secure login and access to your account on our Website;
-
Fulfilling transactions and delivering purchased products to you;
-
Answering your questions and handling your service-related communications;
-
Sending you important notices, updates, and alerts about our services;
-
Sharing promotional content and marketing materials via email or text message, when you have opted in;
-
Tailoring our content and product suggestions to fit your interests and preferences;
-
Performing studies, testing features, and collecting feedback to enhance our offerings;
-
Assessing and enhancing the overall effectiveness of our operations, which includes internal reviews, auditing, and accounting;
-
Innovating and launching new products, features, and campaigns;
-
Managing and facilitating your participation in any promotional activities, such as giveaways or limited-time offers;
-
Meeting legal and regulatory requirements and upholding our Terms of Service;
-
Safeguarding our systems against fraudulent activities, identity theft, or other unauthorized behavior;
-
Ensuring the security and reliable performance of our Website and infrastructure;
-
Displaying relevant advertisements and promotional messages customized to your interests;
-
Anonymizing or summarizing personal data for research, analytics, and reporting purposes.
Automated Decision Making: We may utilize automated tools, including algorithms and profiling, to provide customized experiences and product suggestions. Such decisions are made in compliance with legal standards and will not significantly impact you unless specifically authorized or required by law or agreement.
Aggregated Information: We may compile and combine data from multiple users to produce anonymized or aggregated insights for internal reporting, product development, and business planning.
3. HOW INFORMATION MAY BE SHARED
We do not sell your personal information. However, we may share it in the following situations:
-
With Service Providers: We work with trusted companies that help us run our website and deliver services—like sending emails, processing payments, or shipping products. These companies only get the information they need to do their jobs.
-
With Other Users: If you leave a review or post something publicly on our site, other visitors can see it.
-
With Advertising Partners: We may work with third-party advertisers who use cookies and other tracking tools to show you ads that match your interests. These partners might collect details about your browsing behavior and device.
-
With Integrated Tools (APIs/SDKs): Some features on our site use third-party tools that may collect certain information. For details, feel free to reach out to us.
-
During Business Changes: If our business is ever sold, merged, or reorganized, your information might be shared with the new owner as part of that process.
-
With Your Permission: If you give us clear permission, we may share your data in the ways you agree to.
- For Legal Reasons or Safety: We may share your information if we’re legally required to, or if it helps us prevent fraud, respond to security issues, protect our business, or keep users safe.
4. NOTICE TO CALIFORNIA RESIDENTS / YOUR CALIFORNIA PRIVACY RIGHTS
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). These rights include:
Right to Know: You have the right to request information about the categories and specific pieces of personal information we collect, use, disclose, and retain.
-
Right to Delete: You may request that we delete your personal information, subject to certain legal exceptions.
-
Right to Correct: You may ask us to correct inaccurate personal information that we maintain about you.
-
Right to Opt Out of Sale/Sharing: Although we do not sell your personal information, you have the right to opt out of the sale or sharing of your personal data for cross-context behavioral advertising.
-
Right to Limit Use and Disclosure of Sensitive Personal Information: If we collect sensitive personal data, you may have the right to limit its use or disclosure to that which is necessary to perform the requested services.
-
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise any of these rights, you or your authorized representative may contact us at support@corelash.com. We may need to confirm your identity before fulfilling your request, and we will respond in accordance with relevant laws.
Refer-a-Friend and Incentive Programs: We may run special promotions that let you earn rewards—such as discounts, credits, or promotional items—when you refer others to CoreLash. These programs may ask you to provide certain personal details, like your name or your friend's email address. When your referral joins or makes a purchase, both you and the referred person may receive a benefit. Taking part in these programs is completely optional. The reward offered reflects how valuable these referrals are to us and will be clearly explained at the time you choose to participate.
5. SUPPLEMENTAL NOTICE FOR NEVADA RESIDENTS
Nevada law allows residents to opt out of the sale of personal information. CoreLash does not currently sell personal information. To submit such a request, email support@corelash.com.
6. YOUR CHOICES
You have several options when it comes to how we handle your personal information:
Email Preferences You can unsubscribe from marketing emails by clicking the link at the bottom of any promotional message. However, we may still send you important account or order-related messages even if you opt out of marketing.
Cookies and Tracking Tools Most browsers allow you to manage how cookies are used. You can set your browser to reject all cookies or alert you when one is being sent. Keep in mind that disabling cookies may affect how certain parts of our website work.
Interest-Based Ads To reduce targeted ads, you can use tools like the Network Advertising Initiative’s Opt-Out page at http://www.aboutads.info. You may still see ads, but they won’t be as tailored to your interests.
Text Messaging If you’ve opted in to receive texts from us, you can stop them anytime by replying STOP. Standard message and data rates may apply.
Your Privacy Rights Depending on where you live, you may have the right to:
-
Access the personal data we have about you;
-
Request a copy or transfer of your data;
-
Ask us to correct inaccurate or incomplete information;
-
Ask us to delete your data;
-
Object to or restrict how we use your data;
-
Withdraw your consent for data use (where applicable).
To use any of these rights, just contact us through the information listed in the “Contact Us” section. We’ll respond according to relevant laws and won’t treat you unfairly for making a request.
7. RETENTION AND SECURITY
We retain your personal data only for as long as necessary to meet the reasons we collected it, such as providing our services, answering your questions, complying with legal duties, resolving conflicts, or enforcing our policies.
To protect your data, we implement a variety of security measures, including administrative, technical, and physical safeguards. That said, no system is completely immune to security threats. While we work hard to secure your information, we cannot promise absolute protection from unauthorized access or data loss, and we are not liable for such incidents to the extent permitted by law.
You are responsible for keeping your password secure and monitoring access to your account. If you suspect any unauthorized activity or believe your information has been compromised, please contact us right away. If we detect a security breach, we may inform you through our website, by email, or by another appropriate method as required by law.
8. CHILDREN
Our Website is designed for use by individuals who are 18 years of age or older. We do not intentionally collect personal information from anyone under 18. If you are under 18, please do not create an account, make a purchase, or share any personal details such as your name, address, or email with us.
If you are a parent or legal guardian and believe your child may have provided personal information through our Website without your approval, please contact us using the details listed in the “Contact Us” section. Should we become aware that we have received personal information from someone under 18, we will promptly deactivate the account and delete the data, unless we are legally obligated to retain it.
9. LINKS TO THIRD-PARTY WEBSITES
Our website may contain links to third-party websites. We are not responsible for the privacy practices of such sites. Please review their privacy policies independently.
10. INTERNATIONAL JURISDICTIONS
Our Website is hosted in the United States and is governed by U.S. laws. If you access our services from outside the U.S., please be aware that your personal data will be transferred to and processed in the United States in accordance with this Privacy Policy. We strive to protect your data in compliance with applicable privacy laws.
For users located in the European Economic Area (EEA), the United Kingdom, or Switzerland, if your personal data is transferred to a country not recognized as providing an adequate level of data protection, we may rely on Standard Contractual Clauses or other lawful mechanisms to ensure your data is adequately protected.
If you have questions about how we handle international data transfers, please contact us using the information provided in the “Contact Us” section below.
11. CONTACT US
If you have any questions or comments about this Privacy Policy or our practices, please contact us at:
CoreSpace LLC (CoreLash)
Email: support@corelash.com