Privacy policy

United States Privacy Policy
Effective Date: January, 2019
Last updated: Oct 10, 2025

By accessing or using Timeless Skin Care, LLC’s (“Timeless,” “we, us, or our”) Site and our Services (both defined below), you agree to be bound by the terms set forth in this Privacy Policy (“Policy”). This Policy may change from time to time (see Section 12 below “Updates to Our Policy”). Your continued use of this Site and our Services after we make changes is deemed to be acceptance of those changes, so please check the Policy periodically for updates.

1. Scope of This Policy

This Policy applies to our practices of collecting, using, maintaining, selling, and disclosing personal information:

Through our website www.timelessha.com ("Site") any email, text, and other electronic messages between you and us, and when you interact with our advertising on third-party websites and mobile applications.
Through our offline practices and any products and services we provide. This Policy refers to our Site and offline practices collectively as our “Services.”
Of former, current, and prospective customers; vendors; B2B contacts; officers, owners, directors, contractors, employees, beneficiaries, emergency contacts, and job applicants.

Our collection, use, and disclosure of personal information about individuals will vary depending upon the circumstances and our relationship to such individual. This Policy is intended to describe our overall privacy and data protection practices.

This Policy also describes the rights of individuals regarding their personal information, which may vary depending on the individual’s state of residency. The descriptions below regarding our collection, use, and disclosure of your information apply equally regardless of our relationship with you, unless noted otherwise.

Our Site may include links to third party websites, services, and applications. These links are provided solely as a convenience to you and are not an endorsement of the content of such sites. This Policy does not apply to those sites, as we have no control over or responsibility for third parties’ collection or use of your information. These third-party sites may have their own privacy policies that you should review.

2. Personal Information We Collect

We use the term “personal information” in this Privacy Policy to describe information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual. We do not consider personal information to include information that has been aggregated and/or otherwise de-identified such that it does not identify a specific individual, or information that is publicly available.

A. Sources of Personal Information

The sources from which we collect personal information depends on our relationship or interaction with the specific individual. Our sources include:

Directly from you. For example, when you request products and services from us, participate in an offer or promotion, engage with us via our social media pages, complete a skincare questionnaire, or communicate with us via email, text, or phone. Similarly, when you enter into a business-to-business relationship with us, or apply for a job.
Indirectly from you. We automatically collect information about you when you use our Services, Site, or connect to our network. The type of information that we collect varies depending on the settings of your web browser or device, but it may include: the pages you view on our Site; the date and time you access our Site; how long you were on our Site; the type of web browser you are using (for example, Firefox or Chrome); the type of device you are using (for example, whether you are using a mobile device); your Internet Protocol address; and device IDs (including device advertising identifiers). With your permission, we will collect your device’s location information to help you identify available properties near your location; you may disable this feature through your device’s settings. Our vendors and/or third parties may also track your online behavior through links that you click on our Site. We may associate this information with the personal information that we collect about you, such as whether and when you logged into your account.
Social media. If you choose to comment, message, or purchase through our social media (e.g., Twitter, Facebook, Instagram, etc.); if you post or comment on business review sites; or if you engage with a separate app or website that communicates with our Services. In many cases you can control what personal information you share with us through privacy settings available on those third-party social media services.
Outside companies that provide data to support activities such as fraud prevention, background search, marketing, human resources, workforce management, providing products and services, completing transactions, supporting our everyday operations, or business management and development.
Friends and family. To the extent you provide us with contact information for friends or other people you would like us to contact, you represent to us that you have their permission to share that information with us. This applies to emergency contacts and beneficiaries as well.

B. Categories of Personal Information We Collect

Identifiers. For example, name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.
Other Personal Information. For example, name, signature, Social Security Number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information. (Some personal information included in this category may overlap with other categories.)
Protected Characteristics. For example, age (40 years or older), race, color, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, and veteran or military status.
Commercial Information. For example, records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Biometric Information. For example, physiological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, faceprints, keystroke, gait, or other physical patterns.
Internet or Network Activity. For example, browsing history, search history, IP address, operating system, browser type, information on a consumer’s interaction with a website, application, or advertisement.
Geolocation Data. For example, physical location or movements.
Sensory Data. For example, audio, visual, similar information from photographs, images, videos, and recordings of your voice.
Professional or Employment Related Information. For example, current or past job history or performance evaluations, information from background checks, resumes, or personnel files.
Inferences. For example, a profile reflecting a person’s preferences, characteristics, predispositions, behavior, attitudes, abilities, and aptitudes.
Sensitive Personal Information. For example, Social Security number, driver’s license, state identification card, or passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation data; racial or ethnic origin, religious or philosophical beliefs, ; and biometric data.

3. How We Use Your Personal Information

We may use your personal information for one or more of the following purposes:

provide products, services, customer support and information you request from us, and otherwise communicate with you regarding your requests to us;
create, maintain, customize, and secure your account with us;
process and analyze account transactions and payments, notify you about them, audit them if needed;
facilitate our business-to-business relationships and contracts;
supporting our everyday operations, including to meet risk, legal, financial, and compliance requirements;
evaluating employment applications and workforce performance;
supporting employment, infrastructure, and human resource management;
drug testing, background checks, conducting investigations, and handling worker compensation claims – all within the employment context;
providing payroll, benefits, reimbursements, and support to our workforce;
maintain the security and integrity of the Services, our technology, infrastructure, physical locations, assets and business; engage in detection and prevention of fraud or other illegal activities and debugging;
enforce our Terms and Conditions, including to prevent potential breaches;
respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;
test, personalize, develop and improve our Services and Site;
advertise and market our products and Services, and the products and services of our business partners, to you, including by presenting tailored content and advertisements;
evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our users, online visitors, business contacts or employees is among the assets transferred;

Operate, evaluate and improve our business (including developing new products and services; managing our communications; analyzing our products; performing data analytics; and performing accounting, auditing and other internal functions); and
Comply with applicable legal requirements, relevant industry standards and our policies.

4. How Long We Retain Your Personal Information

Based on contractual requirements and/or legal requirements, personal information is maintained for a specified period of time, as required by legal, regulatory, or industry requirements. Additional information such as emails, and vendor agreements are maintained for business purposes for an indefinite amount of time. Interest lists are maintained for an indefinite amount of time. Depending on state and local laws, we keep personnel records for the statutorily required amount of time. The timeframe generally starts when our relationship with you ends.

5. Personal Information We Disclose

We may disclose your personal information, as follows:

With suppliers we disclose Identifiers, Other Personal Information, Internet or Network Activity, Geolocation Data, and Professional or Employment Related Information.
With account servicing systems, payment processors, and fraud prevention vendors we disclose Identifiers, Other Personal Information, Protected Characteristics, Commercial Information, Biometric Information, Internet or Network Activity, Geolocation Data, Sensory Data, Professional or Employment Related Information, Inferences, and Sensitive Personal Information.
With shipping providers we disclose Identifiers, Other Personal Information, and Geolocation.
With word processing, communication applications, and calendar providers we disclose Identifiers, Other Personal Information, Protected Characteristics, Commercial Information, Biometric Information, Internet or Network Activity, Geolocation Data, Sensory Data, Professional or Employment Related Information, Inferences, and Sensitive Personal Information.
With advisors such as lawyers, accountants, auditors, banks / lenders, insurers, and consultants we disclose Identifiers, Other Personal Information, Protected Characteristics, Commercial Information, Biometric Information, Internet or Network Activity, Geolocation Data, Sensory Data, Professional or Employment Related Information, Inferences, and Sensitive Personal Information.
With data analytics, network monitoring services, website hosts, and incident response providers we disclose Identifiers, Other Personal Information, Protected Characteristics, Biometric Information, Internet or Network Activity, Geolocation Data, Sensory Data, Professional or Employment Related Information, Inferences, and Sensitive Personal Information.
With government entities, regulatory agencies, and law enforcement agencies or as otherwise legally required we disclose Identifiers, Other Personal Information, Protected Characteristics, Commercial Information, Biometric Information, Internet or Network Activity, Geolocation Data, Sensory Data, Professional or Employment Related Information, Inferences, and Sensitive Personal Information.
With insurance, benefits, and payroll providers we disclose Identifiers, Other Personal Information, Protected Characteristics, Biometric Information, Internet or Network Activity, Geolocation Data, Professional or Employment Related Information, Inferences, and Sensitive Personal Information.
With marketing providers we disclose Identifiers, Other Personal Information, Protected Characteristics, Commercial Information, Internet or Network Activity, Geolocation Data, Inferences, and Sensitive Personal Information.
With successor entities. We reserve the right to disclose or transfer your personal information to a successor entity in the event of a corporate merger, consolidation, sale of assets or other corporate changes respecting our business.

Selling and Sharing Personal Information

As applicable to California residents only, you have the right to opt-out of the “selling” or “sharing” of your personal information. California law defines “sharing” as renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a consumer’s personal information by the business to a third party for cross‐context behavioral advertising, whether or not for monetary or other valuable consideration.

With our advertising providers, we “share” Identifiers, Other Personal Information, Internet or Network Activity, Geolocation, and Inferences.
We do not otherwise “sell” personal information.

See below in Section 6(B) for instructions on how to opt out of “sharing” of your personal information or target advertising.

Our Site is not aimed at minors and we do not knowingly “sell” or “share” the personal information of, or target advertising to, minors under 18 years of age without affirmative authorization.

6. Your Rights and Choices

We offer you certain choices in connection with the personal information we collect from you, such as how we use the information, and how we communicate with you.

A. Email Opt-Out

You can opt out of email marketing communications by clicking on the unsubscribe link within the marketing emails you receive from us. Opting out in this manner does not limit our ability to communicate with you by email regarding your product and service requests to us (e.g., sending you an confirming a new order).

B. California Privacy Requests

California provides its residents with specific privacy rights, including the Right to Know, Right to Delete, Right to Correct, Right to Opt-Out, Right to Limit the Use of Sensitive Personal Information, and Right to Non-Discrimination. This section describes those rights and how to exercise them, if applicable.

Right to Know

You have the right to request that we disclose certain information to you about our collection, use, and disclosure of your personal information (“Request to Know”). Once we receive and verify your Request to Know, then depending on your request, we will disclose to you either:

Categories of Personal Information Collected, Disclosed, Sold, and/or “Shared,” or
The specific pieces of personal information we collected about you.

Right to Delete

You have the right to request that we delete your personal information (“Request to Delete”). Once we receive and verify your Request to Delete, we will delete your personal information from our records, unless an exemption or exception applies.

Right to Correct

You have the right to request that we correct your inaccurate personal information (“Request to Correct”). Once we receive and verify your Request to Correct, we will use commercially reasonable efforts to correct your inaccurate personal information in our records.

Right to Limit the Use of Sensitive Personal Information

You have the right to direct a business that collects your Sensitive Personal Information to limit its use to uses which are necessary to perform the services or provide the goods reasonably expected. However, we only use Sensitive Personal Information to provide the goods and services requested by you (including employment); to prevent, detect, and investigate security incidents; to resist malicious, deceptive, fraudulent, or illegal actions and to prosecute those responsible for such actions; to ensure people’s physical safety; to perform services on our behalf; to verify or maintain the quality or safety of our products, services, and devices.

Right to Opt-Out

As discussed above in Section 5: Sharing Personal Information, you have the right to opt-out of the “sharing” of your personal information for cross-context behavior advertising.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. Unless permitted by the state privacy laws, we will not:

Deny you goods or services.
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
Provide you a different level or quality of goods or services.
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

C. How to Submit a Privacy Request

To make a Request to Know, Request to Delete, Request to Correct, or Withdrawal of Consent by emailing us at support@timelessha.com. Be sure to include enough information to verify your identify, state who you are to us (for example: B2B contact, customer, or website visitor), and provide detail about your type of request.

If you are submitting a Request to Delete but want to stay enrolled in our Email Program (see Section 8 below) or our Reward Program (see Program Terms), that must be stated in your Request.

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. When you submit a request, we will take steps to verify your request by requiring you to log into your account or by matching the information provided by you with the information we have in our records.

Authorized Agents

Before we can respond to a Request to Know, Request to Delete, or Request to Correct submitted by an authorized agent, we need to confirm not only that person or entity’s authority to act on behalf of a consumer and verify the identity of the authorized agent. If you are authorized to submit a request on behalf of someone else, please email us at support@timelessha.com and provide the following information:

1. To verify your authorization, please attach a copy of one or more of the following to your request email:

written permission from the person who is the subject of the request, or
power of attorney

2. To verify your identity, please attach copies of the following to your request email:

valid government issued ID (not expired), and
a utility bill, bank statement (redacted) or similar documentation to verify your name and address.

3. You will also be required to verify the identity of the person for whom you are submitting the request, identify that person’s relationship to us, and provide sufficient information about the specific request.

Opt Out of “Sharing”

To opt out of "sharing” for cross-contextual behavioral advertising or targeted advertising, in a frictionless manner, use Global Privacy Control (GPC). Each browser and device will need to be setup separately. Learn more about how to enable GPC by visiting www.globalprivacycontrol.org/.

7. Additional California Notices

Do Not Track Notice

Under California law, website and online service operators are required to disclose how they respond to web browser “do not track” signals or other similar mechanisms that provide consumers the ability to exercise choice regarding the collection of personal information about a consumer’s online activities over time and across third-party websites. We currently do not change our tracking practices in response to “do-not-track” signals but see above in Section 5(C) to learn how to enable Global Privacy Control signals.

Shine the Light Disclosure

As provided by California Civil Code § 1798.83, California residents that have an established business relationship with us can opt out of the disclosure of covered personal information to third parties for their direct marketing purposes (if any). Requests to opt out may be submitted by contacting us at support@timelessha.com.

8. Notice of Financial Incentive / Loyalty Program

We offer an email program that provides certain benefits such as promotions, discounts, and exclusive offers (the “Email Program”) and a similar product review program (the “Review Program”). When you sign up for the Email Program and/or Review Program, we will ask you to provide your email address and may collect additional information such as your name and any photos you upload in support of the product review. Because the Email Program and the Review Program involve the collection of personal information, they might be interpreted as a “financial incentive” program under state privacy laws. The value of your personal information to us is related to the value of the free or discounted products or services that you obtain in connection with the Email Program and the Review Program, and it is based on the expense related to offering you free or discounted products or services.

You can sign up for the Email Program by visiting the link on the bottom of our site. You may withdraw from participating in the Email Program at any time by emailing support@timelessha.com or calling (800) 231-3705. The Review Program is not ongoing so you can choose to not participate by declining to give future product reviews. You may also unsubscribe from any marketing emails you receive from us by clicking the “unsubscribe” link in our emails. If you withdraw or unsubscribe, we will no longer be able to send you promotions, discounts, and exclusive offers. Additionally, if you submit a Request to Delete (as described above in Section 6(C)), it will result in withdrawal from the Email Program, unless you state an express intent to stay enrolled. You are free to re-enroll.

For details on our Reward Program, see our Program Terms.

9. Washington Health Privacy Notice

If you are a Washington resident, the following disclosures are provided to you pursuant to the Washington MY Health MY Data Act. For the purpose of this section, the phrase “Health Data” means information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. Physical health status can include individual health conditions or treatment.

Categories of Health Data We Collect from You

If you take our SkinCare Quiz on our Site, we collect information concerning your skin condition, type, and preferences when you provide the information to us.

Why Do We Collect Health Data

We collect health data to provide you with product recommendations.

Sharing Health Data

We share your Health Data with service providers that are contractually limited on their use of health data and who to provide us with analytic services relating our SkinCare Quiz. We do not sell Health Data.

How to Exercise Your Washington Consumer Rights

You have a right to submit a Request to Know or Request to Delete. These Requests can be made by emailing us at support@timelessha.com.

You also have the Right to Appeal. Appeals can be submitted to support@timelessha.com. Be sure to include the information necessary for us to evaluate your appeal.

10. Nevada and Connecticut Health Privacy Notice

If you are a Nevada resident, the following disclosures are provided to you pursuant to Nevada’s health data privacy law (SB 370). For the purpose of this section, the phrase “Health Data” means personally identifiable information that is linked or reasonably capable of being linked to a consumer and is used by a regulated entity to identify the health status of the consumer.

If you are a Connecticut resident, the following disclosures are provided to you pursuant to Connecticut’s Data Privacy Act, amended by SB 3. For purposes of this section, the phrase “Health Data” means " personal data used to identify a consumer's physical or mental health condition or diagnosis.

Categories of Health Data We Collect from You

If you take our SkinCare Quiz on our Site, we collect information concerning your skin condition, type, and preferences when you provide the information to us.

Why Do We Collect Health Data

We collect health data to provide you with product recommendations.

Sharing Health Data

How to Exercise Your Nevada and Connecticut Consumer Rights

You have a right to submit a Request to Know or Request to Delete. These Requests can be made by emailing us at support@timelessha.com.

You also have the Right to Appeal. Appeals can be submitted to support@timelessha.com. Be sure to include the information necessary for us to evaluate your appeal.

11. Children’s Privacy

Our Services are intended for adults. We do not knowingly collect personal information from children under 13. If we learn that we inadvertently collected personal information from a child under 13, we will immediately delete it from our records.

12. Users Outside the US

Our business is located in the United States and our website is operated in the United States. Our website and our products and offerings are not targeted at individuals outside the United States. If you are located outside of the United States, please be aware that information we collect, including personal information, will be transferred to, and processed, stored and used by us and other third parties outside of the country in which you reside, including in the United States. The data protection laws in the United States may differ from those in the country in which you are located. By providing personal information through our website, you agree that the personal information will be transferred, processed, used, and stored as set forth in this policy and the laws of the United States.

13. Links To Other Websites

Our website may provide links to other websites for your convenience and information. These websites may operate independently from us. Linked sites may have their own privacy notices or policies, which we strongly suggest you review if you visit any linked websites. To the extent any linked websites you visit are not owned or controlled by us, we are not responsible for the sites’ content, any use of the sites, or the privacy practices of the sites.

14. How We Protect Personal Information

We maintain commercially reasonable administrative, technical and physical safeguards designed to protect the personal information against unauthorized access. However, communications over the Internet are not 100% secure, so we cannot guarantee the security of your information communicated online or via a mobile device.

15. Updates To Our Policy

This Privacy Policy may be updated periodically and without prior notice to you to reflect changes in our data handling practices. We will post subsequent versions of this Privacy Policy on our website to notify you of any significant changes to our Privacy Policy and indicate at the top of the Policy when it was most recently updated.

16. How To Contact Us

Please refer questions in connection with this Policy to support@timelessha.com or to (800) 231-3705.

Your cart

Menu

Privacy policy

What are you looking for?

Your cart

Menu

Login

Privacy policy

What are you looking for?