SKINACT PRIVACY POLICY

Last Updated: August 7, 2026

SKINACT INC (“SkinAct,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information entrusted to us. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit SkinAct.com, purchase our products, communicate with us, use our mobile or SMS services, interact with AI-powered features, or otherwise use our products and services.

By using our website or services, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

Depending on how you interact with us, we may collect information including:

• Name

• Email address

• Telephone number

• Billing and shipping addresses

• Account and login information

• Order and transaction information

• Product interests and preferences

• Customer service communications

• Warranty and service information

• Marketing and communication preferences

• Device, browser, IP address, and website activity

• Cookie, analytics, and advertising information

• Information you voluntarily provide through forms, chats, AI-powered features, surveys, promotions, reviews, or other communications

When you make a purchase, payment information may be collected and processed as necessary to complete the transaction. Payment information may be handled by our payment processors and other providers involved in processing transactions.

2. How We Use Information

We may use personal information for reasonable business and commercial purposes, including to:

• Process, fulfill, deliver, and manage orders

• Process payments, refunds, credits, and returns

• Create and maintain customer accounts

• Provide customer service and technical support

• Respond to questions and communications

• Provide product recommendations and personalized experiences

• Manage warranties, repairs, and product support

• Operate and improve our websites, applications, products, and services

• Provide search, chat, and AI-powered functionality

• Analyze website usage and business performance

• Detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity

• Conduct marketing and advertising as permitted by law

• Administer promotions, surveys, contests, and membership programs

• Maintain business and transaction records

• Protect our legal rights and property

• Comply with applicable laws, regulations, legal proceedings, and governmental requests

We seek to collect, use, and retain personal information in a manner reasonably necessary and proportionate to the purposes for which it is collected and used.

3. Artificial Intelligence and Automated Technologies

SkinAct may use artificial intelligence (“AI”), machine learning, automated systems, large language models, AI-powered search, virtual assistants, chatbots, and other automated technologies to operate and improve our business and customer experience.

We may use AI technologies for purposes such as:

• Customer service and customer support

• AI chat and virtual assistance

• Answering product-related questions

• Product search and discovery

• Product recommendations

• Personalization

• Content generation and improvement

• Translation and communication assistance

• Website search and navigation

• Data organization and analysis

• Fraud, abuse, and security support

• Internal business operations

• Improving our products, websites, and services

Multiple AI Providers

SkinAct may use internally developed technologies as well as multiple third-party AI models, platforms, APIs, software providers, and technology services.

We may add, remove, replace, or change AI providers and technologies as our business and technology evolve. We therefore do not necessarily identify every individual AI provider in this Privacy Policy.

Information reasonably necessary to perform an AI-powered function may be transmitted to and processed by one or more technology service providers acting on our behalf or providing technology used by SkinAct.

Information Processed Through AI

If you voluntarily interact with an AI-powered feature, the information processed may include:

• Questions and messages you submit

• Chat or conversation content

• Product interests

• Product preferences

• Information concerning products you are considering or have purchased

• Information reasonably necessary to answer your question or provide the requested service

• Technical information associated with the interaction

We seek to limit information provided to AI systems to information reasonably appropriate for the applicable business purpose.

Sensitive Information and AI

SkinAct does not intentionally provide full credit card numbers, CVV/security codes, account passwords, or similar highly sensitive payment or authentication credentials to generative AI systems for the purpose of generating AI responses.

Customers should never enter credit card numbers, CVV codes, passwords, Social Security numbers, government identification numbers, medical records, or other highly sensitive information into an AI chatbot or other AI-powered communication feature unless SkinAct specifically provides a secure feature designed and identified for that purpose.

Payment information necessary to complete transactions may be processed separately through our payment and transaction systems and service providers.

AI Service Providers

Third-party AI and technology providers may process information on our behalf or as necessary to provide their technology and services to us.

Where appropriate, we take reasonable measures designed to require service providers handling personal information on our behalf to protect that information and process it consistent with applicable contractual and legal requirements.

We evaluate and configure our use of AI services based on business needs, privacy, security, functionality, and other considerations.

AI Accuracy and No Professional Advice

Artificial intelligence is an automated technology and can make mistakes.

AI-generated information may be inaccurate, incomplete, outdated, misleading, or inappropriate. SkinAct does not guarantee the accuracy or completeness of AI-generated responses.

AI-generated information provided through our websites or services is for general informational and customer-service purposes.

Unless expressly stated otherwise, AI-generated information is not medical advice, diagnosis, treatment advice, legal advice, or other professional advice and should not be relied upon as a substitute for advice from an appropriately qualified professional.

Customers and professionals remain responsible for evaluating product suitability and following applicable product instructions, warnings, professional standards, laws, and regulations.

Monitoring and Improvement

We may review, analyze, monitor, or retain AI interactions when reasonably necessary to:

• Provide requested services

• Maintain quality

• Improve customer service

• Improve our technology

• Troubleshoot problems

• Detect fraud, abuse, or security threats

• Protect SkinAct and its customers

• Comply with legal obligations

We may use aggregated or de-identified information to understand and improve our products, services, and technology where permitted by law.

4. Cookies, Analytics and Similar Technologies

We and our service providers may use cookies, pixels, web beacons, analytics tools, and similar technologies.

These technologies may help us:

• Maintain shopping carts and account sessions

• Remember preferences

• Understand website traffic and usage

• Improve website performance

• Measure marketing effectiveness

• Personalize content

• Detect fraud and security issues

• Provide relevant advertising where permitted by law

You may be able to control cookies through your browser or through privacy controls provided on our website. Disabling certain cookies may affect website functionality.

5. How We Disclose Personal Information

We do not disclose personal information indiscriminately.

We may disclose personal information when reasonably necessary to organizations that help us operate our business, including:

• Website and cloud-hosting providers

• Payment processors

• Shipping and logistics providers

• Manufacturers and suppliers when necessary to fulfill or service an order

• Customer service providers

• Email and SMS providers

• Analytics providers

• Advertising and marketing technology providers

• Fraud prevention and cybersecurity providers

• AI and technology service providers

• Professional advisers, including accountants, auditors, insurers, and attorneys

• Government authorities or other parties when required or permitted by law

We may also disclose information in connection with a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar corporate transaction, subject to applicable law.

We may disclose information when reasonably necessary to investigate fraud, enforce our agreements or policies, protect our customers, protect our rights or property, comply with law, or respond to valid legal process.

6. Sale and Sharing of Personal Information

SkinAct does not sell personal information for money in the ordinary meaning of the word “sell.”

However, certain uses of advertising, analytics, cookies, pixels, or similar technologies may constitute a “sale” or “sharing” of personal information under some privacy laws even when no money is exchanged.

Where required by applicable law, consumers may have the right to opt out of the sale or sharing of their personal information.

SkinAct will provide applicable privacy choices and honor legally recognized opt-out preference signals when required by law.

7. Sensitive Personal Information

We limit our use and disclosure of sensitive personal information to purposes reasonably necessary to provide requested products and services, process transactions, maintain security, prevent fraud, comply with law, and perform other purposes permitted by applicable law.

Where applicable law provides additional rights concerning sensitive personal information, we will honor those rights.

8. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information.

These safeguards may include secure networks, access controls, encryption, secure transmission technologies, monitoring, and restrictions on employee or service-provider access.

However, no website, network, database, transmission method, or storage system can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.

9. Data Retention

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to:

• Complete transactions

• Maintain customer accounts

• Provide warranties and customer support

• Maintain financial and tax records

• Prevent fraud

• Resolve disputes

• Enforce agreements

• Satisfy legal, accounting, regulatory, and compliance requirements

Retention periods may vary depending on the type of information and applicable requirements.

When information is no longer reasonably required, we may delete, de-identify, or securely dispose of it as appropriate.

10. California Privacy Rights

California residents may have rights under the California Consumer Privacy Act (“CCPA”), as amended, and other applicable California privacy laws.

Subject to applicable exceptions, these rights may include the right to:

• Know the categories of personal information we collect

• Know the sources from which personal information is collected

• Know the purposes for which information is collected and used

• Know the categories of third parties to whom information is disclosed

• Request access to specific pieces of personal information

• Request deletion of personal information

• Request correction of inaccurate personal information

• Opt out of the sale or sharing of personal information where applicable

• Limit certain uses and disclosures of sensitive personal information where applicable

• Receive equal service and not be discriminated against for exercising applicable privacy rights

Where required, we will also recognize qualifying opt-out preference signals.

To exercise applicable California privacy rights, please contact us using the methods identified in the “Contact Us” section below or through privacy controls made available on our website.

We may need to verify your identity before completing certain requests.

An authorized agent may submit a request on behalf of a California consumer where permitted by law. We may request appropriate documentation or verification.

We will not unlawfully discriminate against you for exercising your privacy rights.

11. Automated Decision-Making

SkinAct may use automated technologies to assist with certain business functions.

Where applicable law provides consumers with specific rights concerning automated decision-making technology, including applicable notice, access, information, or opt-out rights, SkinAct will provide and honor those rights as required.

SkinAct may modify its automated systems and related notices as legal requirements and technologies evolve.

12. Other U.S. State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws.

Depending on your jurisdiction and applicable law, these rights may include access, correction, deletion, portability, opt-out, appeal, or other privacy rights.

SkinAct will process qualifying requests in accordance with applicable law.

13. European Economic Area and Other International Users

Our services are primarily directed to customers in the United States.

If you access our services from another country, your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate.

Where the General Data Protection Regulation (“GDPR”) or another applicable privacy law applies, you may have rights including access, correction, deletion, restriction, objection, portability, and withdrawal of consent, subject to applicable legal requirements and exceptions.

We process personal information using an appropriate legal basis when required by applicable law.

14. Children’s Privacy

Our website and services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If we learn that personal information from a child under 13 has been collected in violation of applicable law, we will take reasonable steps to delete it.

Parents or guardians who believe a child has provided personal information should contact us.

15. Third-Party Websites and Services

Our websites may contain links to third-party websites, social networks, applications, or services.

Those third parties operate under their own privacy policies and practices. SkinAct is not responsible for the privacy, security, or content practices of unaffiliated third-party websites or services.

We encourage you to review their privacy policies before providing information.

16. Social Media

Our website may provide social-sharing features or integrations with social-media platforms.

Information you choose to share through these services may become available to the social-media provider or other users depending on your settings.

Your interaction with a social-media platform is governed by that platform's policies.

17. Email Marketing

If you subscribe to promotional emails, we may send information about products, promotions, company news, and other offers.

You may unsubscribe from promotional emails using the unsubscribe link included in those communications.

Unsubscribing from promotional communications does not necessarily prevent us from sending transactional or service-related communications concerning your orders, account, warranties, security, or other business interactions.

18. SMS / Mobile Messaging Privacy

If you opt in to SkinAct SMS/text messaging, you agree to receive messages in accordance with the applicable consent presented when you enroll.

Messages may include order and shipping updates, customer-service communications, appointment or demonstration reminders, maintenance information, promotions, cart reminders, and other communications you have consented to receive.

Message frequency varies. Message and data rates may apply.

Consent to receive marketing text messages is not a condition of purchasing SkinAct products or services.

You may opt out by replying STOP to an applicable SkinAct text message. You may request assistance by replying HELP where supported.

We do not sell SMS opt-in information or phone numbers.

We do not share SMS consent or opt-in information with third parties or affiliates for their own marketing or promotional purposes.

We may disclose information to service providers that help us deliver and administer our SMS program, subject to appropriate restrictions.

Wireless carriers are not responsible for delayed or undelivered messages.

19. Fraud Prevention and Legal Disclosures

We may collect, use, preserve, and disclose information when reasonably necessary to:

• Detect or prevent fraudulent or illegal activity

• Protect customers

• Protect our business and property

• Investigate security incidents

• Enforce agreements and policies

• Establish, exercise, or defend legal claims

• Comply with laws, regulations, subpoenas, court orders, or lawful governmental requests

20. Changes to this Privacy Policy

Technology, our business, and privacy laws continue to evolve.

We may update this Privacy Policy periodically to reflect changes to our practices, technologies, AI systems, services, or legal obligations.

When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

We encourage users to review this Privacy Policy periodically.

21. Contact Us

If you have questions about this Privacy Policy or wish to exercise applicable privacy rights, please contact:

SKINACT INC
9667 Canoga Ave
Chatsworth, CA 91311
Phone: (800) 418-0830
Email: info@SkinAct.com
Website: SkinAct.com

For privacy-rights requests, please clearly indicate that your communication concerns a Privacy Rights Request so that it can be directed appropriately.