Your data, plainly.

This policy is issued by Elluvi, a small skincare business based in Lahore, Pakistan (trading as “Elluvi”). Contact: support@elluvi.com.

Orders: name, delivery address, phone number, email, order contents and support messages needed to fulfil and support your purchase.

Accounts: email and profile details you provide when you sign in (including via Google through our authentication provider, Supabase Auth).

Skin Companion: skin preferences, routine checklist history, streak data, product-usage estimates, reminder preferences, and — if you opt in — private progress photos and browser push-subscription details for routine reminders.

Routine finder answers: when you finish the routine finder without an account, we store the options you picked (concern, skin type, sensitivity, retinol history and the kinds of product you already use) against a random visitor identifier. No name, phone number, photo or typed text is stored with them. We use these answers to improve recommendations and, if you later place an order from the same browser, to understand what that order was for.

Product analytics: event names and interaction data (for example page views, companion steps, add-to-cart), plus session recordings and aggregate heatmaps of how pages are used. Our own analytics and Microsoft Clarity do not receive your name, email, address or photo content. Google Analytics receives browsing events and, for a delivered order, the order value and products (see below), but not your name, phone, email or address.

Advertising measurement: we run ads on Facebook and Instagram, TikTok and Google, and we measure them. The Meta Pixel and the TikTok Pixel record four things in your browser — that a page was viewed, that a product page was viewed, that something was added to the cart, and that checkout was started — along with the product involved and the cart value. The Google tag and Google Analytics record page views and similar shopping events (viewing a product, adding to or removing from the cart, viewing the cart, starting checkout). Each sets its own cookies to tell one visit from the next. None of them reads what you type into any form on this site.

If you arrive from an ad, the click identifier in the link (Meta’s fbclid, TikTok’s ttclid, Google’s gclid, gbraid or wbraid) is kept in your browser so it can be attached to an order you place later. Google click identifiers are kept for up to 90 days; the TikTok one is kept for the browser session.

Because we sell Cash on Delivery, a completed sale is only known days later when the parcel is actually delivered — long after you have left the site. So some of this reporting is done from our server, not from your browser:

• When you place an order, we tell Meta (Conversions API) and TikTok (Events API) that an order was placed, with the order value and products.
• When the parcel is delivered, we report the sale to Meta, TikTok and Google Analytics, and, if you came from a Google ad, upload it to Google Ads as a conversion.
• With these server reports we include identifiers converted to an irreversible hash before they leave us: to Meta, your phone number, name, city and email if you gave one; to TikTok and to Google Ads (enhanced conversions), your phone number and email if you gave one. The platforms use those hashes to tell whether the sale came from an ad they showed. Google Analytics receives no contact details, only the order value, products, order number and your Google Analytics browser identifier.

We never send the plain values of your contact details to these platforms, and we never send anything from your Skin Companion — no routine, no streak, no progress photo.

Order messages: your order confirmation, delivery updates and any replies about your order are sent on WhatsApp to the phone number you give at checkout.

To process and deliver Cash on Delivery orders, run Skin Companion features you choose to use, send order messages on WhatsApp, measure our advertising as described in section 2, and improve the store. Marketing emails or WhatsApp promos only if you opt in. Routine push reminders are optional and can be turned off in Companion → Profile.

Courier partners — delivery name, address and phone for fulfilling your order.

Supabase — hosted database, authentication and private file storage for accounts, orders metadata and Companion data (including progress photos when you upload them).

WhatsApp (Meta), through the WhatsApp Business Cloud API — your phone number, name and order details, to send your order confirmation and delivery updates and to receive your replies. We take payment only as Cash on Delivery, so no card or bank details are collected.

Microsoft Clarity — session recording and heatmaps, used to find where the site is confusing or broken. Clarity records page interactions such as clicks, scrolls and mouse movement. Text you type into form fields is masked before it leaves your browser, so names, addresses, phone numbers and other details are not recorded. Progress photos are never included. Usage is subject to the Microsoft Privacy Statement.

Meta (Facebook and Instagram) — the advertising measurement described in section 2: the four browsing events listed there with their products and cart values; for each order placed, the order value and products with a hashed phone number, name, city and email; and the same again when the order is delivered. Usage is subject to the Meta Privacy Policy.

TikTok — the four browsing events listed in section 2 with their products and cart values; and, for each order placed and each order delivered, the order value and products with a hashed phone number and email. Usage is subject to the TikTok Privacy Policy.

Google (Google Analytics and Google Ads) — Google Analytics receives browsing and shopping events and, when an order is delivered, its value, products and order number, joined to your Google Analytics browser identifier. Google Ads receives the tag’s page views and, only for a delivered order that came from a Google ad, a conversion upload with the click identifier, the order value and a hashed phone number and email. Usage is subject to the Google Privacy Policy.

Browser push services — only if you turn on routine reminders. Your browser’s own push service (for example Google for Chrome or Apple for Safari) delivers them; it receives the reminder text and the subscription address your browser created, nothing else.

We do not sell customer data.

Journey photos are private to your signed-in account. They are stored in secured storage and are not shown publicly on product pages or marketing. You can delete individual photos or request full deletion of your Companion profile at any time.

Order records are kept for as long as required for accounting, fraud prevention and Pakistani legal obligations (typically several years for tax and dispute records).

Account and Skin Companion data (routines, streaks, photos, push tokens) are kept while your account is active. You can export or delete Companion data from Profile, or email us to request account deletion. After deletion we remove or anonymise personal data except where we must retain order history.

We primarily use browser local storage (not advertising cookies) to keep your cart, guest Companion answers and similar session helpers on your device. Auth sessions are managed by our authentication provider. Our own first-party analytics identifiers are random values kept in local and session storage, not cookies, and are not derived from your name, email or IP address. The advertising and analytics tools below do set cookies.

Microsoft Clarity sets two first-party cookies of its own, _clck and _clsk, to tell one visit from the next in its recordings. Neither is used for advertising and neither is shared with advertisers.

The Meta Pixel sets _fbp and — if you arrived from an ad — _fbc. The TikTok Pixel sets _ttp. Google Analytics sets _ga and _ga_NNDB9S16JM, and the Google Ads tag sets its own advertising cookies (such as _gcl_au). These are analytics and advertising cookies: they are what connects a delivered order back to the visit or ad that led to it.

When you place an order we store, on the order record, the Meta cookies, the TikTok cookie and click identifier, any Google Ads click identifier, your Google Analytics identifier (from _ga), and your browser name and version, because the delivery that completes the sale happens days later when your browser is no longer involved. They are deleted with the order if you ask us to delete your data.

You can clear site data in your browser at any time; doing so empties the local cart and guest Companion draft, and resets all of the identifiers above.

Email support@elluvi.com to request access, correction or deletion of your personal data, or to unsubscribe from marketing. Signed-in users can also manage Companion privacy actions under Companion → Profile.

To limit the advertising and analytics measurement described in section 2:

• Meta: turn off Your activity off Meta technologies in your Facebook or Instagram Accounts Centre.
• TikTok: in the TikTok app, open Settings and privacy → Ads and turn off ads based on data from partners.
• Google: turn off personalised ads at My Ad Center, and install the Google Analytics opt-out add-on to stop Google Analytics in your browser.
• Any browser: block third-party scripts and cookies, or use a content blocker, to stop all four tools (Meta, TikTok, Google and Microsoft Clarity) loading on this site. Clearing your site data resets their cookies.

These settings stop the browser measurement. The server reports described in section 2 are tied to orders; if you do not want an order reported, email us at the address above. None of this affects your orders, your account or Skin Companion.