1. Who We Are

This Privacy Policy describes how House of Lashes, LLC ("House of Lashes," "we," "us," or "our") collects, uses, and discloses personal information through www.houseoflashes.com (the "Site") and when you shop with us or contact us. Our contact details are in Section 15.

2. Personal Information We Collect

We may collect the following categories of personal information:

•        Identifiers, such as name, email address, postal address, phone number, account login, IP address, and device or cookie identifiers

•        Customer records, such as billing and shipping information. Payment card information is processed by our payment providers.

•        Commercial information, such as products viewed, purchased, or returned

•        Internet and network activity, such as pages viewed and interactions with the Site, our emails, and our ads

•        Approximate geolocation, derived from IP address

•        Customer support content, such as messages and chat conversations

•        Inferences, such as preferences drawn from the information above

•        Sensitive personal information, limited to health details you may provide when reporting a product reaction

3. Sources

We collect personal information directly from you, automatically through cookies and similar technologies when you use the Site, and from service providers and advertising, affiliate, and analytics partners.

4. How We Use Personal Information

We may use personal information to operate the Site; process and fulfill orders, returns, and subscriptions; manage accounts; provide customer support, including through AI-assisted chat; send marketing communications; administer promotions and programs; analyze and improve our products and the Site; deliver and measure advertising; secure the Site and prevent fraud; respond to product reports and comply with legal obligations; and for other purposes disclosed when we collect the information.

5. Cookies and Similar Technologies

We and our partners use cookies, pixels, tags, and similar technologies for Site functionality, analytics, and advertising. You can manage cookie preferences through the cookie settings link in our footer, and opt out of sale or sharing through the "Do Not Sell or Share My Personal Information" link in our footer. We process Global Privacy Control signals as opt-out requests as required by law.

6. How We Disclose Personal Information

We may disclose personal information to:

•        Service providers that perform services for us, such as e-commerce, payment processing, email and text messaging, customer support and chat, reviews, returns, shipping and fulfillment, Site personalization and search, consent management, and tax compliance

•        Advertising, affiliate, and analytics partners

•        Our affiliates

•        Government authorities and others where required by law or to protect rights and safety

•        A buyer or successor in connection with a merger, acquisition, financing, or sale of assets

Shopify. Our store is hosted by Shopify. We may use Shopify features that rely on information about your interactions with our store, other merchants, and Shopify. For those features, Shopify is responsible for processing your personal information, including responding to requests to exercise your rights. See the Shopify Consumer Privacy Policy for more information.

7. Sale and Sharing of Personal Information

We make personal information available to advertising and analytics partners for cross-context behavioral advertising and measurement. Under California law, this may be considered a "sale" or "sharing." You can opt out using the "Do Not Sell or Share My Personal Information" link in our footer or by enabling Global Privacy Control in your browser.

We do not sell or share mobile phone numbers collected through our text message program, or text message opt-in status or consent, with third parties or affiliates for their marketing purposes.

We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

In the preceding 12 months, we collected the categories of personal information in Section 2 from the sources in Section 3 for the purposes in Section 4, and disclosed, sold, or shared them as follows:

8. AI-Assisted Chat

Chat on the Site may be answered by an automated AI assistant provided by a service provider. Chat conversations are recorded and processed by us and our service providers to respond to you and to operate and improve the service. Please do not share health or other sensitive information in chat.

9. Your California Privacy Rights

If you are a California resident, you have the right to know and access, delete, and correct your personal information; to opt out of the sale or sharing of your personal information; and not to receive discriminatory treatment for exercising these rights. We do not use or disclose sensitive personal information for purposes that require offering a right to limit under California law.

To request to know, access, delete, or correct your personal information, email info@houseoflashes.com. We will verify your identity before responding. To opt out of sale or sharing, use the "Do Not Sell or Share My Personal Information" link in our footer or enable Global Privacy Control. You may use an authorized agent. If we deny your request, you may appeal by replying to our response.

Notice of Financial Incentive

We may offer discounts, rewards points, or other benefits in exchange for your personal information, including identifiers (such as email address and phone number), commercial information (such as purchase history and rewards activity), and inferences (such as beauty and lash preferences from quiz responses), when you sign up for email or text messages, complete a quiz, or enroll in our rewards program. The terms of each offer are shown when it is presented and may change. You opt in by submitting the signup form or quiz or by enrolling in the program, and you may withdraw at any time by unsubscribing, replying STOP, leaving the rewards program, or emailing info@houseoflashes.com. We estimate that the value of your information is approximately equal to the value of the benefit offered, based on the expected revenue from subscribers, quiz participants, and program members compared with the cost of offering the benefit.

10. Other U.S. State Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, and obtain a copy of your personal information, and to opt out of targeted advertising, the sale of personal information, and certain profiling. Submit requests as described in Section 9. If we decline your request, you may appeal by replying to our response. Washington and Nevada consumers should also see our Consumer Health Data Privacy Policy.

11. Retention

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, using the following criteria for each category:

•        Identifiers, customer records, and commercial information: the duration of your account or relationship with us, plus the period needed to fulfill orders, process returns, meet tax and accounting requirements, and resolve disputes.

•        Internet and network activity and approximate geolocation: as long as needed for Site security, analytics, and advertising, subject to your opt-out rights.

•        Customer support content and sensitive personal information: as long as needed to address your inquiry and meet product-safety and cosmetic adverse event recordkeeping requirements.

•        Inferences: while you remain on our marketing lists or have an account with us.

12. Security

We use reasonable safeguards designed to protect personal information. No method of transmission or storage is completely secure.

13. Children

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

14. International Users

EEA and UK. If you are in the European Economic Area or the United Kingdom, we process personal information to perform our contract with you, for our legitimate interests in operating and improving our business, with your consent where required, and to comply with legal obligations. You may have rights to access, correct, delete, restrict, or object to processing of your personal information, to data portability, and to withdraw consent, and you may complain to your local data protection authority.

Transfers. Personal information may be transferred to and processed in the United States and other countries, using safeguards required by law where applicable.

Canada. Questions about our handling of personal information can be sent to our privacy contact at info@houseoflashes.com.

15. Changes and Contact

We may update this Privacy Policy by posting a new version with a new effective date.

House of Lashes, LLC
44 Montgomery Street, Suite 300
San Francisco, CA 94104
info@houseoflashes.com

Effective date: October 23, 2026