Privacy Policy

Stone Earth Beauty ("Stone Earth Beauty," "SEB," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you use the Pakistan market experience on www.stonearthbeauty.com, create an account, place an order, contact us, submit a review or product concern, sign up for communications, or otherwise interact with our website and services.

Scope of this version.This policy is prepared for Stone Earth Beauty's Pakistan launch. The United States and Global market launches are currently on hold. We may update or supplement this policy before those markets launch to reflect additional systems, legal requirements, and privacy choices.

By using the Pakistan market experience, you acknowledge the data practices described in this Privacy Policy. Where consent is required for a particular activity, such as optional cookies or marketing communications, we will use the choices presented to you on the website.

Information you provide directly

Account information. First name, last name, email address, and account credentials. Passwords are stored in hashed form rather than as readable passwords.

Checkout and order information. Name, email address, telephone number where provided or required, billing and delivery addresses, city, region/state, country, cart contents, products ordered, quantities, shipping charges, tax, discounts, order totals, and order history.

Contact and support information. Title, first and last name, country/region, language, email address, telephone number, message content, and any files you choose to attach.

Marketing information. Email address and the marketing choices or consents you provide, including email or SMS marketing selections where available.

Product reviews and user content. Rating, review title, review text, display name, photographs or videos, whether you would recommend the product, and confirmation that you meet the review-age requirement presented on the website.

Returns and damaged-product claims. Issue description, photographs or videos, information about package condition, whether the product was opened or used, and an optional preferred contact telephone number.

Adverse reaction and product-safety information

If you voluntarily submit an adverse-reaction or product-safety report, we may collect information that is more sensitive in nature. This can include the report date; the name of the person experiencing the reaction; email address; optional telephone number; product name; lot or batch number; first and most recent use dates; application area; whether directions were followed; how the product was used; other products used on the same area; reaction details; symptom onset date; current status; reaction description; whether symptoms improved after stopping use; whether medical attention was received; and optional photographs or supporting documents.

This information is collected to review the product concern, respond to you, support product-quality and safety activities, maintain appropriate records, and comply with applicable obligations where required. An adverse-reaction submission is not a substitute for medical care.

Information from sign-in providers

If you choose to sign in using Google, Google may provide Stone Earth Beauty with information such as your email address, name, and profile picture, subject to your Google settings and Google's own privacy practices.

Information collected automatically

Website and shopping activity. Pages and products viewed, shopping events, checkout activity, UTM or campaign parameters, and related usage information.

Approximate location and device/browser information. Analytics services may derive information such as country and city and may collect other technical information generated when you use the website.

Session information. A short-lived access token is held in browser memory, and a secure HttpOnly session cookie is used to maintain a signed-in session.

Browser storage. For example, guest cart contents, favorites or wish-list information, and market preferences may be stored in browser storage. Registered-user cart or favorites information may also be associated with an account.

Abandoned checkout information. When an email address becomes associated with checkout activity, we may retain cart or checkout information so that the checkout can be recovered or a reminder can be sent, where permitted.

Stone Earth Beauty uses cookies, browser storage, tags, pixels, and similar technologies to operate the website, remember choices, understand website activity, and measure marketing and advertising performance.

Cookie choices

Our current cookie-consent interface allows visitors to choose Allow All, Allow Selection, or Deny. Necessary technologies are enabled for website operation. Preferences, Statistics, and Marketing categories are disabled by default unless you enable them through the consent interface.

Necessary. Supports essential website functions, security, sessions, and other functions required for the site to operate.

Preferences. Remembers choices and preferences, such as market-related settings.

Statistics. Helps us understand how visitors use the website and how shopping journeys perform.

Marketing. Supports marketing measurement and advertising technologies where you permit them.

The website also remembers a selected market for a limited period, currently up to 30 days, and may use cookies or browser storage to support that preference. Guest cart and favorites information may be kept locally in the browser.

Analytics and advertising technologies

Our current implementation includes Google Analytics 4 (GA4), Google Tag Manager (GTM), Meta Pixel, and server-side tag-management infrastructure through Stape. These technologies may receive shopping or website events and related technical information in order to provide analytics, tag management, and advertising measurement. Google Search Console may also provide us with website and search-performance information.

You can revisit the cookie-consent controls on the website to change your choices for optional categories where that functionality is available.

Payments are processed through third-party payment providers, including Safepay and Stripe where enabled for the applicable transaction or market. Stone Earth Beauty does not store complete payment-card numbers or card security codes (CVV). Payment credentials are processed by the payment provider.

We may retain transaction information needed to process and reconcile an order, such as checkout-session or payment identifiers, payment status, billing and delivery information, order details, transaction amount, and other gateway response information necessary for payment and order administration. Where used, Stripe Tax or another tax service may receive transaction-related information needed to calculate tax.

If you join the SEB list, select marketing options, or otherwise consent to receive marketing communications, we may use your contact information and preferences to send product news, offers, and other Stone Earth Beauty communications.

We use Klaviyo to support email marketing and abandoned-checkout workflows. When you progress to checkout, the system may associate your email address with cart or order-related information. If checkout is not completed and we are permitted to contact you, Klaviyo may be used to send a checkout reminder based on the configured email flow.

You may withdraw a marketing choice by using the preference or unsubscribe mechanism provided with the communication where available, by changing relevant website choices, or by contacting Stone Earth Beauty through the Contact Us page.

If you submit a product review, the information you choose to publish - such as your display name, rating, review title, review text, recommendation, photographs, or videos - may be displayed publicly with the review.

Photographs and videos submitted for reviews, returns, damaged-product claims, or product concerns are stored in Amazon S3. The development team has confirmed that these files are currently reviewed manually rather than through AI or automated content-review software.

Please avoid including information in public-facing review content that you do not want other visitors to see.

We disclose personal information when it is necessary to operate the website, process transactions, deliver orders, communicate with customers, measure website performance, or provide other services described in this policy. Recipients may include:

• Cloud and infrastructure providers. Amazon Web Services (AWS) supports hosting, databases, storage, backups, and email services. The administrative dashboard frontend is hosted using Vercel.
• Payment and tax providers. Safepay and Stripe may process payment and transaction information. Stripe Tax may process transaction information where used for tax calculation.
• Shipping and logistics providers. Shippo and applicable carriers may receive order, delivery-address, email, telephone, product, package-size, and package-dimension information needed to fulfill and track shipments.
• Marketing and communications providers. Klaviyo may receive email and order or checkout information to support email marketing and abandoned-checkout workflows. AWS SES is used for transactional email delivery.
• Analytics, tag-management, and advertising providers. Google Analytics, Google Tag Manager, Google Search Console, Meta, and Stape may receive website, shopping, campaign, or technical event information according to the relevant configuration and your cookie choices where applicable.
• Authentication providers. Google may receive and provide information when you choose Google sign-in.
• Messaging platforms. WhatsApp may process information when it is used for Pakistan order-confirmation communications and you interact through that platform.
• Review and media-support services. Systems supporting reviews or user-generated content may receive customer identifiers and submitted content as needed to operate those features.
• Authorities and professional advisers. We may disclose information when required by applicable law, legal process, or a lawful authority, or when reasonably necessary to protect rights, safety, customers, or our systems.

We may also disclose information in connection with a corporate transaction such as a reorganization, merger, acquisition, financing, or sale of all or part of a business, subject to appropriate handling of the information involved.

Stone Earth Beauty's primary website infrastructure and customer databases are hosted through Amazon Web Services in the us-east-1 region (Northern Virginia, United States). Accordingly, personal information collected through the Pakistan market may be stored or processed outside Pakistan, including in the United States.

Authorized Stone Earth Beauty administrators, employees, contractors, or service providers may access systems remotely from other countries where necessary for their role. Administrative access is controlled through role-based permissions managed by authorized super administrators.

AWS performs regular infrastructure backups, including daily backups reported by our development team. Backup and service-provider copies may therefore persist separately from the live production environment for business-continuity and recovery purposes.

Retention periods vary depending on the type of information, the system in which it is held, and the reason it was collected. We may retain account, order, payment-reference, shipping, marketing-consent, review, return, support, product-safety, analytics, security, and other business records for as long as reasonably needed to operate the service, complete transactions, maintain records, address disputes or product concerns, support security and business continuity, and comply with applicable requirements.

Our current systems do not apply one uniform automatic deletion period across all categories of customer information. Some information may remain in backups or third-party systems for additional periods consistent with their operational and retention processes.

We use administrative and technical safeguards designed to protect personal information appropriate to the systems we operate. Confirmed controls include hashed passwords, role-based administrative access, permission management by authorized super administrators, order-module audit logs, secure HttpOnly session cookies, short-lived access tokens, separation of development and production environments, and regular infrastructure backups.

Stone Earth Beauty does not store complete payment-card numbers or CVVs. Those credentials are handled by payment providers. No website, transmission, or storage system can be guaranteed to be completely secure, and we cannot guarantee absolute security.

Cookie choices.Use the website's cookie-consent controls to allow, limit, or deny optional Preferences, Statistics, and Marketing technologies.

Marketing choices. You may withdraw a marketing selection using available preference or unsubscribe controls or by contacting us.

Account access. If you forget your password, the website provides a password-recovery process.

Account or information questions. If you need assistance regarding information associated with your account, or believe information is inaccurate, contact us through the Contact Us page. We will respond based on the nature of the request, our available systems, and applicable requirements.

The current website does not provide a self-service account-deletion function. We will update this policy if our account-management or privacy-request functionality materially changes.

We may update this Privacy Policy when our website, systems, service providers, data practices, or applicable requirements change. When we make changes, we will post the revised policy on the website and update the effective or last-updated date.

Before Stone Earth Beauty launches its United States or Global market experiences, we expect to review and update this policy to reflect the completed privacy inventory and any additional market-specific requirements.