Privacy Policy

This policy applies to purchases made from laroche-posay at larocheeposalife.com in the United States.

Information we collect

We may collect identifiers and contact details, account and order information, billing and payment-related details, shipping information, device and browser data, site activity, approximate location, customer service communications, and marketing preferences.

How we use information

We use information for orders, payment, delivery, customer service, security, fraud prevention, analytics, legal compliance, and marketing where permitted.

Cookies, advertising, and analytics

We and service providers may use cookies, pixels, local storage, advertising tools, and analytics services to operate the site, remember preferences, measure performance, understand use, and deliver or measure advertising.

Data recipients

Shopify hosts the store and processes commerce data. We may also disclose information to payment processors, fraud-prevention providers, shipping providers, analytics and advertising partners, professional advisers, and authorities when necessary. We do not claim that no data is sold or shared where privacy law defines those terms broadly.

Retention and security

We keep information as reasonably necessary for the purposes described, including legal, tax, accounting, fraud-prevention, and dispute obligations. We use reasonable safeguards, but no system is completely secure.

U.S. consumer rights

Depending on your state, you may request access, correction, deletion, portability, or information about use and disclosure, and may opt out of certain sales, sharing, targeted advertising, or profiling. California residents may exercise CCPA/CPRA rights, including rights to know, correct, delete, limit certain uses of sensitive information where applicable, and opt out of sale or sharing without discriminatory treatment.

Opt-out and GPC

Use Your Privacy Choices at /pages/data-sharing-opt-out or contact us. Where required, we process a recognized Global Privacy Control (GPC) signal as an opt-out request for the browser or device that sends it.