Effective date: September 14, 2026
This Privacy Policy explains what personal information noelcrate.com collects, why we collect it, who we share it with, and the rights you have over it. The site is operated by ELOWEN SKINCARE LLC, a limited liability company registered in the State of Montana, United States.
1. Notice at Collection
| Category | Examples | Source | Purpose | Disclosed to | Retention |
|---|---|---|---|---|---|
| Identifiers | Name, shipping and billing address, email, phone number | You, at checkout | Processing and delivering your order, support | Payment processor, fulfillment partner, carriers | 7 years (business records) |
| Commercial information | Items ordered, order value, order history, returns | You, at checkout | Fulfillment, returns, accounting | Fulfillment partner, accounting providers | 7 years |
| Payment information | Card type, last four digits, authorization result | Payment processor | Taking payment, fraud screening, refunds | Stripe | 7 years for the transaction record; we never hold full card numbers |
| Internet activity | Pages viewed, referring site, search terms on our site, device and browser type, IP address | Automatically, via cookies and tags | Running the site, measuring performance, advertising | Google (Ads and Analytics), Shopify | Up to 26 months |
| Geolocation (approximate) | Region derived from IP address | Automatically | Fraud screening, analytics, tax calculation | Google, Shopify, Stripe | Up to 26 months |
| Marketing data | Email address given to our newsletter popup, open and click activity | You, if you opt in | Sending marketing email you asked for | Email service provider | Until you unsubscribe, then suppression list only |
We do not collect Social Security numbers, driver's license numbers, biometric information, precise geolocation, or information about health, religion, union membership or sexual orientation. We do not knowingly collect information from children under 13.
2. We Do Not Sell Your Personal Information for Money
We do not sell personal information for money. However, our use of advertising and analytics cookies from Google may constitute "sharing" for cross-context behavioral advertising under California law. You can opt out at any time — see Do Not Sell or Share My Personal Information or use the cookie banner's reject option for advertising cookies.
3. Cookies and Tracking
We use three kinds of cookies and tags:
- Strictly necessary — cart contents, checkout session, security. These cannot be switched off.
- Analytics — Google Analytics 4, to understand which pages work and which do not.
- Advertising — the Google Ads tag, used to measure the results of our advertising.
We do not run a Meta or Facebook pixel on this site. Our cookie banner lets you reject advertising cookies, and that choice is respected on this browser. We also honor Global Privacy Control (GPC) signals automatically: if your browser sends a GPC signal, we treat it as a request to opt out of sharing for advertising.
4. Email Marketing and SMS
If you enter your email address into our newsletter popup, we use it to send marketing email about products and offers. Every message has an unsubscribe link and we act on it. We do not send marketing text messages and we do not collect phone numbers for SMS marketing.
5. Who We Share Information With
- Shopify — the ecommerce platform that hosts this store.
- Stripe — payment processing and fraud screening.
- Our manufacturing and fulfillment partner in China — the name, address and phone number needed to pack and ship your parcel.
- Carriers (USPS, FedEx) — delivery information.
- Our US returns facility — return shipment details.
- Google — analytics and advertising measurement.
We also disclose information where we are legally required to, and in connection with a merger, acquisition or sale of assets, in which case you will be notified.
6. International Data Transfers
Because orders are fulfilled in China, the shipping information you provide at checkout — your name, delivery address and phone number — is transferred to our fulfillment partner in China so that your parcel can be packed and labeled. Other data is processed in the United States by Shopify, Stripe and Google. Laws in these jurisdictions differ from those in your state. By placing an order you acknowledge this transfer, which is necessary to perform the contract you have entered into with us.
7. Your California Rights (CCPA/CPRA)
If you are a California resident you have the right to know what personal information we collect and how we use it, to access a copy, to correct inaccurate information, to delete it, to opt out of sharing for cross-context behavioral advertising, and to limit use of sensitive personal information (we do not collect any). You also have the right not to be discriminated against for exercising these rights — we do not charge different prices or provide a different level of service based on privacy choices.
To make a request, email support@noelcrate.com with "Privacy Request" in the subject line. We will verify your request using the email address associated with your order. We do not require you to send government identification. We respond within 45 days and may extend once by a further 45 days, telling you if we do.
An authorized agent may submit a request on your behalf with written permission from you.
8. Rights in Other States
Residents of states with comprehensive privacy laws — including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and others as those laws take effect — have comparable rights of access, correction, deletion, portability and opt-out. Use the same email address above.
Right to Appeal
If we decline your request, you may appeal by replying to our decision with "Appeal" in the subject line. We will respond to the appeal within 45 days with a written explanation. If your appeal is denied, you may contact your state Attorney General.
9. Children
This store is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, email support@noelcrate.com and we will delete it.
10. Security and Retention
Traffic to and from this site is encrypted with HTTPS using TLS. Payment data is handled by Stripe and never stored on our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We keep order records for seven years for accounting and tax purposes, and marketing data until you unsubscribe.
11. Changes
We may update this policy. The effective date above shows the current version. Material changes will be announced on this page.
12. Contact
Privacy questions and requests: support@noelcrate.com
ELOWEN SKINCARE LLC — mailing address for privacy correspondence: 40 Hilton St, Easton, PA 18042, United States