Effective date: September 16, 2026
This Privacy Policy explains what personal information noelcrate.com collects, why we collect it, who we share it with, and the rights you have over it. The site is operated by ELOWEN SKINCARE LLC, a limited liability company registered in the State of Montana, United States.
1. Notice at Collection
| Category | Examples | Source | Purpose | Disclosed to | Retention |
|---|---|---|---|---|---|
| Identifiers | Name, shipping and billing address, email, phone number | You, at checkout | Processing and delivering your order, support | Payment processor, fulfillment partner, carriers | 7 years (business records) |
| Commercial information | Items ordered, order value, order history, returns | You, at checkout | Fulfillment, returns, accounting | Fulfillment partner, accounting providers | 7 years |
| Payment information | Card type, last four digits, authorization result | Payment processor | Taking payment, fraud screening, refunds | Our payment processor | 7 years for the transaction record; we never hold full card numbers |
| Internet activity | Pages viewed, referring site, search terms on our site, device and browser type, IP address | Automatically, through the Shopify platform that hosts this store | Running the site, keeping your cart and session, security, basic store statistics | Shopify | Up to 26 months |
| Geolocation (approximate) | Region derived from IP address | Automatically | Fraud screening, tax calculation | Shopify, our payment processor | Up to 26 months |
| Marketing data | Email address you enter into the sign-up form in our footer, open and click activity | You, if you opt in | Sending marketing email you asked for | Shopify email tools | Until you unsubscribe, then suppression list only |
We do not collect Social Security numbers, driver's license numbers, biometric information, precise geolocation, or information about health, religion, union membership or sexual orientation. We do not knowingly collect information from children under 13.
2. We Do Not Sell or Share Your Personal Information
We do not sell personal information for money, and we do not currently share it for cross-context behavioral advertising. As of the effective date above, this store runs no third-party advertising or analytics tags: there is no Google Ads tag, no Google Analytics, and no Meta or Facebook pixel on this site. If that changes, we will update this page and this section before the tags go live, and we will add a cookie banner at the same time.
You can still record an opt-out preference at any time — see Do Not Sell or Share My Personal Information.
3. Cookies and Tracking
The only cookies this site sets today are the ones the store cannot run without:
- Strictly necessary — cart contents, checkout session, security and fraud screening, set by Shopify. These cannot be switched off.
- First-party store statistics — Shopify's own built-in reporting on page views and orders, used to run the business.
We do not run Google Analytics, a Google Ads tag, a Meta pixel or any other third-party advertising tag on this site, so there is no cookie banner at present: there are no optional advertising cookies to accept or reject. If your browser sends a Global Privacy Control (GPC) signal, there is nothing for us to stop, because no sharing for advertising is taking place.
4. Email Marketing and SMS
If you enter your email address into the sign-up form in our footer, we use it to send marketing email about products and offers. Every message has an unsubscribe link and we act on it. We do not run a pop-up on this site. We do not send marketing text messages and we do not collect phone numbers for SMS marketing.
5. Who We Share Information With
- Shopify — the ecommerce platform that hosts this store, and the source of our own store statistics.
- Our payment processor — payment processing and fraud screening. Full card numbers are handled by the processor and never stored on our systems.
- Our manufacturing and fulfillment partner in China — the name, address and phone number needed to pack and ship your parcel.
- Carriers (USPS, FedEx) — delivery information.
- Our US returns facility — return shipment details.
We also disclose information where we are legally required to, and in connection with a merger, acquisition or sale of assets, in which case you will be notified.
6. International Data Transfers
Because orders are fulfilled in China, the shipping information you provide at checkout — your name, delivery address and phone number — is transferred to our fulfillment partner in China so that your parcel can be packed and labeled. Other data is processed in the United States by Shopify and by our payment processor. Laws in these jurisdictions differ from those in your state. By placing an order you acknowledge this transfer, which is necessary to perform the contract you have entered into with us.
7. Your California Rights (CCPA/CPRA)
If you are a California resident you have the right to know what personal information we collect and how we use it, to access a copy, to correct inaccurate information, to delete it, to opt out of sale or sharing for cross-context behavioral advertising, and to limit use of sensitive personal information (we do not collect any). You also have the right not to be discriminated against for exercising these rights — we do not charge different prices or provide a different level of service based on privacy choices.
To make a request, email support@noelcrate.com with "Privacy Request" in the subject line. We will verify your request using the email address associated with your order. We do not require you to send government identification. We respond within 45 days and may extend once by a further 45 days, telling you if we do.
An authorized agent may submit a request on your behalf with written permission from you.
8. Rights in Other States
Residents of states with comprehensive privacy laws — including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and others as those laws take effect — have comparable rights of access, correction, deletion, portability and opt-out. Use the same email address above.
Right to Appeal
If we decline your request, you may appeal by replying to our decision with "Appeal" in the subject line. We will respond to the appeal within 45 days with a written explanation. If your appeal is denied, you may contact your state Attorney General.
9. Children
This store is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, email support@noelcrate.com and we will delete it.
10. Security and Retention
Traffic to and from this site is encrypted with HTTPS using TLS. Payment data is handled by our payment processor and never stored on our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We keep order records for seven years for accounting and tax purposes, and marketing data until you unsubscribe.
11. Changes
We may update this policy. The effective date above shows the current version. Material changes will be announced on this page.
12. Contact
Privacy questions and requests: support@noelcrate.com
ELOWEN SKINCARE LLC — mailing address for privacy correspondence: 9550 Satellite Blvd Ste 150, Orlando, FL 32837, United States