Privacy Policy

Effective date: August 15, 2026

This Privacy Policy describes how JH Direct Group, Inc. (“JH Direct,” “we,” “us” or “our”), doing business as SkinPop, collects, uses and discloses personal information when you visit, use or make a purchase from www.getskinpop.com or otherwise communicate with us regarding SkinPop products and services (collectively, the “Services”).

For purposes of applicable privacy laws, JH Direct Group, Inc. is the controller of personal information collected through the Services unless otherwise stated.

Personal Information We Collect

Depending on how you interact with the Services, we may collect the following categories of personal information:

Contact information, including name, billing address, shipping address, email address and telephone number;
Order and transaction information, including products viewed or purchased, order history, returns, refunds, warranty claims and customer-service communications;
Payment information, which is collected and processed by Shopify and our payment providers. We generally receive limited payment details, such as payment status, payment method and the last digits of a payment card, rather than complete card credentials;
Account information, including login credentials, account preferences and saved information if you create an account;
Device and usage information, including IP address, browser type, device identifiers, operating system, pages viewed, referring URLs, interactions with the Services and approximate location derived from IP address;
Marketing and preference information, including email or SMS subscription status, campaign engagement, survey responses and advertising preferences;
User-submitted content, including reviews, photographs, videos, testimonials, questions and other content you choose to provide; and
Information you provide when communicating with us, including the contents of customer-service, return, refund and warranty communications.

How We Collect Personal Information

We collect personal information:

Directly from you, including when you place an order, create an account, subscribe to marketing, complete a survey, submit a review, request support or communicate with us;
Automatically, through cookies, pixels, tags, software development kits and similar technologies when you use the Services or interact with our emails and advertisements; and
From service providers and business partners, including Shopify, payment processors, fulfillment and shipping providers, analytics providers, advertising platforms, email and SMS providers, fraud-prevention services and social-media platforms.

How We Use Personal Information

We may use personal information to:

provide, operate and improve the Services;
process and fulfill orders, payments, shipping, returns, refunds and warranty claims;
create and maintain customer accounts;
communicate about orders, products, policies and customer-service requests;
personalize content, product recommendations and marketing;
send marketing communications where permitted and manage marketing preferences;
measure website performance, campaign effectiveness and customer engagement;
detect, investigate and prevent fraud, security incidents, unauthorized activity and violations of our policies;
comply with legal obligations, enforce agreements and protect our rights and the rights of others; and
carry out other purposes disclosed to you or performed with your consent.

Cookies, Analytics and Advertising

We and our service providers use cookies, pixels and similar technologies to operate the Services, remember preferences, maintain carts and sessions, understand website usage, measure advertising and present marketing that may be more relevant to you.

Our analytics, advertising and marketing partners may include Shopify, Google, Meta, Klaviyo and other providers enabled through our Shopify store. These providers may collect information about your activity over time and across websites or services in accordance with their own privacy policies.

You may control cookies through your browser and through any consent or privacy controls presented on the Services. Blocking certain cookies may affect site functionality. Where required by law, we honor recognized opt-out preference signals, such as Global Privacy Control, as applicable to the browser or device sending the signal.

How We Disclose Personal Information

We may disclose personal information to:

Shopify and ecommerce providers that host and operate our store and checkout;
Payment processors and financial institutions that process transactions;
Fulfillment, logistics and shipping providers that prepare and deliver orders;
Technology and service providers supporting hosting, security, fraud prevention, customer service, communications, analytics, advertising and marketing;
Professional advisers, including legal, accounting, insurance and compliance advisers;
Government authorities or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, property or the integrity of the Services;
Parties to a business transaction, such as a merger, financing, reorganization, sale of assets, acquisition, insolvency or similar event; and
Other parties at your direction or with your consent.

We do not sell personal information for money. Certain disclosures to advertising and analytics partners may be considered a “sale,” “sharing” or use for targeted advertising under some U.S. state privacy laws, even when no money is exchanged. Where applicable, you may request to opt out as described under “Your Privacy Rights.”

Shopify

The Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Services in order to provide and improve its platform and related services. Information you submit through the Services may be transmitted to Shopify and to service providers located outside your state or country.

For more information about Shopify’s privacy practices and available privacy controls, visit Shopify’s Consumer Privacy Policy.

Marketing Communications

You may unsubscribe from marketing emails by using the unsubscribe link in any marketing message. You may opt out of marketing text messages by following the instructions in the message. Even if you opt out of marketing, we may continue to send transactional or service-related communications, such as order, shipping, return, safety or warranty information.

Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, maintaining business and transaction records, resolving disputes, enforcing agreements, meeting legal and tax obligations, preventing fraud and protecting our rights. Retention periods vary depending on the type of information and applicable requirements.

Security

We use reasonable administrative, technical and organizational safeguards designed to protect personal information. No transmission or storage method is completely secure, and we cannot guarantee absolute security. Do not send sensitive payment or authentication information through unsecured channels.

Children’s Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can take appropriate action.

Your Privacy Rights

Depending on where you live, you may have rights concerning your personal information, including the right to:

request access to personal information we maintain about you;
request correction of inaccurate personal information;
request deletion of personal information;
obtain a portable copy of certain personal information;
opt out of certain sales, sharing or targeted advertising;
limit certain uses of sensitive personal information, where applicable;
withdraw consent where processing is based on consent; and
appeal a decision concerning a privacy request, where applicable.

These rights are subject to legal limitations and exceptions. We may need to verify your identity before completing a request. You may use an authorized agent where permitted by law, subject to verification of the agent’s authority and your identity.

To submit a privacy request, email support@skinpop.com or write to the address under “Contact Us.” We will not discriminate against you for exercising applicable privacy rights.

California Privacy Notice

California residents may have rights under the California Consumer Privacy Act, as amended (“CCPA”). During the preceding 12 months, we may have collected the categories of personal information described in this policy, including identifiers, customer-record information, commercial information, internet or electronic network activity, approximate geolocation information, audio or visual information you submit, and inferences drawn from these categories.

We collect, use and disclose these categories for the business and commercial purposes described above. We may disclose them to the categories of recipients identified under “How We Disclose Personal Information.” We do not knowingly sell or share the personal information of consumers under 16. We do not use or disclose sensitive personal information for purposes requiring a right to limit under the CCPA.

California residents may request access, correction or deletion and may opt out of disclosures considered a sale or sharing under California law. Requests may be submitted through support@skinpop.com. Where recognized and legally required, we also process Global Privacy Control signals as opt-out requests for the browser or device sending the signal.

California’s “Shine the Light” law may permit residents to request information regarding disclosure of personal information to third parties for their own direct-marketing purposes. Requests may be submitted using the contact information below.

International Users

If you access the Services from outside the United States, your personal information may be transferred to, stored and processed in the United States and other countries where our service providers operate. Those countries may have data-protection laws different from those in your jurisdiction. Where required, we use legally recognized safeguards for international transfers.

Third-Party Websites and Services

The Services may link to websites or services operated by third parties. We are not responsible for their content, security or privacy practices. Review the privacy policy of any third party before providing personal information.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements or Services. We will post the revised policy on this page and update the effective date. Where required, we will provide additional notice.

Contact Us

Questions, concerns and privacy requests may be directed to:

JH Direct Group, Inc.

Attn: Privacy

6790 Embarcadero Ln #100

Carlsbad, CA 92011

support@skinpop.com