Legal

Privacy Policy

Last updated: October 28, 2025

Overview

Laya Cosmetics (“Laya,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, purchase our products, or use our services.

By using our website or services, you consent to the practices described in this policy.

Section 1: Information We Collect

Information You Provide:

Name, email address, phone number, and shipping/billing address
Payment and transaction details
Account login credentials
Communications sent to support (inquiries, reviews, feedback)

Information Collected Automatically:

Device information (browser type, operating system, IP address)
Browsing behavior (pages visited, time spent, links clicked)
Cookies and similar tracking technologies

Information from AI-Powered Tools:

If you use our AI skin analysis or recommendation tools, we may collect images you voluntarily upload and information you provide about your skin type, concerns, or preferences.

Section 2: How We Use Your Information

We use your information to:

Process and fulfill orders
Communicate about orders, inquiries, or accounts
Provide personalized product recommendations
Operate and improve AI-powered tools and features
Send promotional emails and marketing communications (with consent)
Analyze website usage and improve services
Prevent fraud and ensure security
Comply with legal obligations

Section 3: AI Tools & Image Data

Our optional AI-powered features (such as skin analysis) may require you to upload photos or provide personal details.

How your data is handled:

We do not store any images you upload or capture using our AI tools
All photos are processed in real-time and automatically deleted immediately after you exit the page or close the tab
Images are used only to generate personalized recommendations during your session
Images are not sold, shared, or retained

Third-party AI processing:

AI features are powered by third-party artificial intelligence services
Input data is transmitted to these services for processing
Third-party providers may temporarily retain data for up to 55 days for security monitoring, abuse prevention, and service integrity, not for AI training
Users should avoid submitting sensitive information (government IDs, financial details, health records) through AI tools

Our AI tools provide cosmetic guidance only, not medical advice, diagnosis, or treatment.

Section 4: Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience, analyze site traffic, and personalize content.

Types of cookies we use:

Essential cookies for website functionality
Analytics cookies to understand visitor behavior
Marketing cookies for relevant advertisements

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.

Section 5: Sharing Your Information

We do not sell your personal information. We may share your data with:

Service providers (payment processors, shipping carriers, email platforms, hosting providers)
AI service providers powering skin analysis features under confidentiality agreements
Legal authorities when required by law or to protect our rights

All third parties are required to handle your data securely and only for the specified purposes.

Section 6: Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

If you request account or data deletion, we will remove your information within a reasonable timeframe, unless retention is required by law.

Section 7: Data Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, or misuse. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Section 8: Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate or incomplete data
Request deletion of your personal data
Opt out of marketing communications
Request your data in a portable format

To exercise your rights, please contact us at the email below.

Section 9: Children's Privacy

Our website and services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will take steps to delete it promptly.

Section 10: Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites.

Data collected directly by us is deleted immediately when you exit or close the tab. Data from third-party services integrated on our site is deleted within 24 hours.

Section 11: International Transfers

Your information may be transferred to and processed in countries other than your own. By using our services, you consent to such transfers.

Section 12: Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

Section 13: Contact Us

For questions about this Privacy Policy or to exercise your data rights, contact us at: support@laya-cosmetics.com