Privacy policy

When you place an order: your name, email address, phone number, shipping address, billing address, the items you bought, the amount charged, and your IP address at the time of the order.

We do not collect or store your card number. Card details are entered into an encrypted field operated by our card-vault provider and are tokenised before they reach us. What we receive is a token plus non-sensitive metadata — card brand, last four digits, expiry month and year, issuing country and card type. That is all we ever hold.

When you browse: standard server logs and, if you consent, analytics about which pages were viewed. We do not sell this data and we do not build advertising profiles from it.

To take payment, ship your order, and contact you about it. To handle returns, refunds and support requests. To detect and prevent fraudulent orders — your IP address, billing address and card metadata are used for this, which is also what allows us to defend a payment dispute on your behalf if a card is used fraudulently.

To meet our legal obligations, including tax and accounting record-keeping.

Our payment processor and card-vault provider, in order to take payment and to authenticate the transaction with your bank.

Our shipping carriers, who receive your name, address and phone number in order to deliver the parcel.

Our email provider, in order to send your order confirmation and shipping notification.

Law enforcement or regulators where we are legally required to do so.

We do not sell, rent or trade your personal information to anyone, for any purpose.

Order records are kept for seven years to meet tax and accounting requirements. Support correspondence is kept for two years. Analytics data is kept for fourteen months.

If you ask us to delete your data we will delete everything we are not legally required to retain, and tell you exactly what remains and why.

You can ask for a copy of the personal information we hold about you, ask us to correct it, ask us to delete it, or ask us to stop sending you marketing email at any time. Email support@neurodermskin.com and we will respond within 30 days.

If you are a California resident you have specific rights under the CCPA/CPRA, including the right to know what is collected and to opt out of any sale of personal information. We do not sell personal information, so there is nothing to opt out of — but the request channel is the same address above.

We use cookies that are strictly necessary to keep your shopping bag and your checkout session working. These cannot be turned off without breaking the site.

Any analytics or marketing cookies are optional and are only set if you accept them. You can change your mind at any time.

All traffic to this site is encrypted with TLS 1.2 or higher. Card data is tokenised in the browser and never reaches our servers. Access to order data is restricted to staff who need it to fulfil or support orders.

If we ever become aware of a breach affecting your personal information we will notify you and the relevant authorities as required by law.

This site is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child has provided us with personal information, contact support@neurodermskin.com and we will delete it.

Questions about this policy: support@neurodermskin.com, or +1 (832) 808-7286 during Monday–Friday, 9:00am–6:00pm CT.