Privacy Policy

Who we are

Creamia LLC ("creamia," "we," "us") sells natural hair and beauty products online at creamiacosmetics.com, and in Spanish at es.creamiacosmetics.com. This policy explains what personal information we collect when you visit the site, create an account, place an order or contact us, and how we use and protect it.

Questions about this policy go to customerservice@creamiallc.com or 804-349-2460.

Information we collect

We collect what you give us to place and deliver orders, plus basic technical information about your visit.

What you give us

• Placing an order: name, email, phone, shipping and billing address, the items you buy, and any discount or gift card code.
• Sending a gift card: the recipient's name and email, and your message to them.
• Creating an account: name, email, a password, saved addresses and your order history.
• Using the contact form: name, email and your message.
• Sending a wholesale inquiry: name, business name, EIN, website, email, phone, where you sell, and the products, volumes and frequency you're interested in.

You enter card and PayPal details directly with Stripe or PayPal. We never see or store your full card number. Your password is stored in scrambled (hashed) form that no one at creamia can read. Your hair quiz answers stay in your browser; we don't save them.

Collected automatically

• Technical details such as your IP address, browser and device type, the pages you visit and the site that sent you, recorded by our web host and Google Analytics.
• Small files and browser storage that keep the store working, described under Cookies below.

From others

• Stripe and PayPal tell us whether your payment went through.
• If you ordered from our other website, creamiallc.com, we keep that order history.

How we use information

We use your information to sell and deliver your order, look after you as a customer, and run the store. Specifically, to:

• Process, ship and track your order, and send order confirmations, shipping updates and gift card emails.
• Run your account and let you look up an order.
• Answer your messages and wholesale inquiries.
• Apply discounts and gift cards. For first-order offers such as WELCOME5, we check your email against past orders, including those from creamiallc.com.
• Work out sales tax and shipping for your address.
• Prevent fraud and spam, for example by screening form submissions and through Stripe's and PayPal's fraud checks.
• See how people find and use the site, through Google Analytics.
• Keep the records that tax and accounting rules require.

We only email you about your orders, your account and messages you send us. We don't send marketing emails from this site.

Who we share it with

We don't sell your personal information. We share it only with the companies that help us run the store, and only what each one needs.

• Stripe processes card, Apple Pay, Google Pay, Afterpay, Klarna and other payments. It receives your payment details, the amount, your email and billing address.
• PayPal processes PayPal, Pay Later and Venmo payments. It receives the order amount, plus what you share with PayPal.
• Vercel hosts the website and sees technical details such as IP addresses in server logs.
• Supabase stores our database and product photos, including order, account and form information.
• Resend sends our order and account emails, so it receives your email address and the email's contents.
• Microsoft 365 runs our customer service inbox, which holds the messages you send us.
• USPS, UPS and other carriers deliver your order using your name and shipping address.
• Google (Analytics) shows us how people use the site, from the pages viewed and actions taken, linked to a browser identifier.

We may also share information when the law requires it, to protect our rights or our customers, or if creamia is sold or merged, in which case this policy continues to apply.

We don't use advertising trackers such as the Meta Pixel, and we don't share your information with anyone for advertising.

Cookies and similar technologies

The site stores a few small items in your browser to keep your cart and sign-in working; Google adds its own for analytics.

• Sign-in (creamia): keeps you signed in to your account, for 14 days.
• Cart (creamia): remembers what's in your cart until you check out or clear your browser.
• Welcome offer (creamia): remembers you've seen the WELCOME5 offer, so it shows only once, for 2 years.
• Announcement bar (creamia): remembers that you closed the announcement bar.
• Purchase counted (creamia): makes sure each purchase is counted once in our analytics.
• Payment cookies (Stripe, PayPal): secure payments and fraud prevention at checkout.
• Analytics cookies (Google): count visits and show how the site is used, for up to 2 years.

You can block or delete cookies in your browser settings. Without the store's own items, your cart and sign-in won't work.

Analytics

We use Google Analytics to see how people find and use the site. It records the pages you view and, when you shop, products viewed, items added to the cart, checkouts started and purchases with their value. It doesn't receive your name, address or payment details from us, and we don't use it for advertising.

To opt out, install Google's opt-out browser add-on. See how Google uses data from sites like ours.

Browsers' older "Do Not Track" setting has no agreed meaning, so the site doesn't respond to it.

How long we keep information

We keep information only as long as we need it:

• Orders and payment records: up to 7 years, for tax and accounting.
• Your account: until you close it or ask us to delete it.
• Contact and wholesale messages: as long as needed to answer and follow up, then up to 2 years as a record.
• Analytics data: according to Google's retention settings.

When we no longer need information, we delete it or remove what identifies you.

Your choices and rights

You can see, correct or delete your information, and opt out of analytics, whichever state you live in.

• See or correct it: sign in to your account, or ask us.
• Get a copy or delete it: ask us. We keep only what the law requires, such as order records for tax.
• Opt out of analytics: use Google's opt-out add-on, described under Analytics.
• Emails: we send only order, account and service emails, which you can't turn off while you have an open order.

To make a request, email customerservice@creamiallc.com with "Privacy request" in the subject, from the email address you used with us. We may ask you to confirm your identity, and we answer within 45 days. If we turn down your request, reply to ask us to reconsider; if you're still not satisfied, you can contact your state attorney general. Using these rights never affects your prices or service.

Security

We protect your information with encrypted connections (HTTPS) on every page, passwords stored only in scrambled form, and payments handled entirely by Stripe and PayPal, which meet the card industry's security standard (PCI DSS). Only creamia staff with their own logins can open our store's admin. No system is perfectly secure, so if we ever learn of a breach affecting you, we'll tell you as the law requires.

Children

Our site is for adults and isn't directed to children under 13. We don't knowingly collect information from children; if you believe a child has given us information, contact us and we'll delete it.

Changes to this policy

When we change this policy, we update the effective date at the top. If a change affects how we use information you've already given us, we'll point it out on the site before it takes effect.

Contact us

For questions or privacy requests, reach Creamia LLC at customerservice@creamiallc.com or 804-349-2460.