Privacy Policy

When you place an order: your name, email address, phone number, shipping address, billing address, the items you bought, and the IP address the order was placed from.

We never receive, store or log your full card number, expiry or security code. Those are entered directly into an encrypted field hosted by our PCI DSS Level 1 certified card vault and are replaced with a token before they reach our systems. We can see only the card brand, the last four digits, and the issuing country.

When you browse: standard server logs and privacy-respecting analytics covering pages viewed, approximate region and device type. We do not run advertising trackers or third-party marketing pixels on this site.

To take payment, to ship your order, to answer your support messages, to process returns and refunds, and to meet our accounting and anti-fraud obligations.

Your IP address and the billing address you supply are used to verify the payment and to defend against fraudulent card use. This is a legitimate interest and a condition of accepting card payments.

We email you about your order. We only email you marketing if you explicitly opt in, and every marketing email has a one-click unsubscribe.

Our shipping carriers, so they can deliver your order. Our payment provider, so your card can be charged and refunded. Our email provider, so you receive your confirmation and tracking. Our accountants and, where legally required, the authorities.

That is the complete list. We do not sell personal information, we do not rent mailing lists, and we do not share your data with advertisers or data brokers.

Order records are kept for seven years because tax and accounting rules require it. Support correspondence is kept for two years. Analytics data is aggregated and cannot be linked back to you after 14 months.

Email support@sorexskincare.com to get a copy of everything we hold on you, to correct it, or to have it deleted. We respond within 30 days and there is no charge.

Deletion requests are honoured except for order records we are legally required to retain. We will tell you exactly what we had to keep and why.

If you are a California resident, you have the rights described under the CCPA/CPRA, including the right to know, delete, and opt out of sale — we do not sell data, so there is nothing to opt out of.

We use only the cookies needed to keep your bag and your session working. There are no advertising or cross-site tracking cookies on this site, which is why you are not being asked to dismiss a consent banner.

Questions about this policy: support@sorexskincare.com · +1 (954) 806-8385.