Skip to content

Cart

Your cart is empty

Privacy policy

Last updated: July 10, 2026

1. Overview

Materia, LLC ("Māteriā," "we," "us," or "our") operates this store and website, including all related information, content, features, tools, products, and services (collectively, the "Services"). Māteriā is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

2. Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

  • Contact details: your name, address, billing address, shipping address, phone number, and email address.
  • Financial and payment information: credit card, debit card, and other payment-card or financial-account numbers; payment confirmation; transaction details; form of payment. Payment-card data is processed by Shopify Payments (or another payment processor we engage) and is not stored on Māteriā's systems. We receive only the limited transaction confirmation data Shopify shares with us.
  • Account information: if you create an account, your username, password, security questions, preferences, and account settings.
  • Transaction information: the items you view, add to your cart, add to your wishlist, or purchase, return, exchange, or cancel; your past transactions; and product reviews or other content you submit.
  • Communications with us: the information you include when you contact us, including by email, SMS (if you have opted in to SMS marketing per our SMS Terms), customer support inquiry, or other channel.
  • Device and connection information: information about your device, browser, or network connection; your IP address; your user-agent string; and other unique identifiers.
  • Usage information: information about your interaction with the Services, including pages visited, time spent, clickstream data, and similar analytics data.
  • Marketing engagement information: how you interact with marketing emails, SMS messages, and online advertisements (opens, clicks, conversions, and similar engagement data).

3. Sources of Personal Information

We collect personal information from the following sources:

  • Directly from you, including when you create an account, make a purchase, contact us, subscribe to our newsletter, opt in to SMS marketing, or otherwise provide us with your personal information;
  • Automatically through the Services, including from your device when you use the Services, through cookies, pixels, tags, and similar tracking technologies described in Section 7 below;
  • From our service providers, including Shopify, payment processors, fulfillment providers, email and SMS marketing platforms, and analytics providers, when they collect or process personal information on our behalf;
  • From advertising and marketing partners, including platforms such as Meta (Facebook, Instagram), Google, and TikTok, which may share data with us about your interaction with our advertisements or about audiences you belong to; and
  • From publicly available sources or other third parties, to the extent permitted by law.

4. How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use your personal information for the following purposes:

  • To provide, fulfill, and improve the Services. Including to perform our contract with you; process your payments; fulfill your orders; arrange shipping; process returns and exchanges; create, maintain, and manage your account; remember your preferences; send transactional notifications related to your account or order; provide customer support; tailor the Services to your interests; and improve the Services over time.
  • For marketing and advertising. Including to send marketing communications by email, SMS (if you have opted in to SMS marketing), or postal mail; to deliver targeted advertisements on third-party platforms such as Meta, Google, and TikTok; to develop and present custom audiences and look-alike audiences; and to measure the performance of our marketing campaigns. You can opt out of marketing communications and of certain advertising-related uses as described in Sections 7 and 8 below.
  • For security, fraud prevention, and risk management. Including to authenticate your account; secure our Services; detect, investigate, prevent, or take action against possible fraudulent, illegal, unsafe, or malicious activity; enforce our Terms of Service and other policies; and identify product diversion and resale activity as described in our Terms of Service.
  • To communicate with you. Including to respond to your inquiries; provide customer support; send service-related notices; and maintain our business relationship with you.
  • For legal and compliance purposes. Including to comply with applicable law, regulation, or legal process; respond to lawful requests from law enforcement or government agencies; participate in or defend against legal proceedings; and protect our rights, the rights of other users, and public safety.

5. How We Disclose Personal Information

We may disclose your personal information to the following categories of third parties for the purposes described above:

  • Shopify, which hosts the Services, processes payments, and provides analytics, customer-data, advertising, and operational tools to us. See Section 9 below for more about our relationship with Shopify.
  • Service providers and vendors who perform services on our behalf, including payment processors, fulfillment and shipping providers (and our virtual-mailbox provider iPostal1), email and SMS marketing platforms (such as Klaviyo), customer-service platforms, cloud-storage providers, and analytics providers.
  • Advertising and marketing partners, including Meta (Facebook, Instagram), Google, TikTok, and similar platforms, for the purposes of delivering targeted advertising, developing custom and look-alike audiences, and measuring the performance of advertising campaigns. As described in Section 8 below, these disclosures may constitute "sharing" or "sale" of personal information under the California Consumer Privacy Act and comparable state privacy laws, and you may have the right to opt out.
  • At your direction or with your consent, such as when you ask us to ship a product to you, when you use a social-media login integration, or when you share information through a public review or comment.
  • Within our corporate group, including our affiliates and parent or subsidiary entities, to the extent we have any.
  • In connection with a business transaction, such as a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar event, in which personal information may be transferred to a successor or acquiring entity.
  • To comply with legal obligations or to protect rights, including in response to a subpoena, court order, search warrant, or similar legal request; to investigate or address potential violations of our Terms of Service or other policies; or to protect or defend our Services, our rights, or the rights of our users or others.

We do not sell or share your personal information with third parties for those third parties' own independent marketing purposes, except through the advertising and marketing arrangements described above.

6. How Long We Retain Your Personal Information

We retain personal information for as long as necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with applicable legal obligations, resolve disputes, and enforce our agreements. Specific retention practices include:

  • Transaction records (orders, invoices, payment confirmations): retained for at least seven (7) years from the date of the transaction to comply with U.S. federal and state tax recordkeeping requirements.
  • Account information (account credentials, preferences, order history): retained for as long as the account is active, and for a reasonable period thereafter to address inactive-account inquiries, fraud investigations, and disputes.
  • Customer support communications: retained for at least three (3) years from the date of the communication to address recurring inquiries and disputes.
  • Marketing engagement data (email opens, clicks, SMS interactions): retained while you are subscribed to the relevant marketing program and for a reasonable period after opt-out to honor your opt-out request and to suppress further communications.
  • Analytics and cookie data: retained for periods set by the underlying service provider; see Section 7 below for additional information about cookies and similar technologies.

We may retain personal information for longer periods to the extent required by applicable law, to comply with legal process, to resolve actual or potential disputes, or to investigate fraud or other unlawful activity. When personal information is no longer needed for the purposes described above, we will delete, destroy, or de-identify it in accordance with our retention practices and applicable law.

7. Cookies, Pixels, and Similar Tracking Technologies

We and our service providers and advertising partners use cookies, pixels, tags, software development kits, and similar technologies (collectively, "tracking technologies") to operate the Services, analyze how you use the Services, and deliver advertising. These technologies fall into the following categories:

  • Strictly necessary technologies that are required for the Services to function (for example, technologies that maintain your shopping cart, enable checkout, and support security features). These cannot be disabled without preventing the Services from working.
  • Functional technologies that remember your preferences and improve your experience (for example, language selection, region preferences, or remembered login).
  • Analytics technologies that help us understand how visitors interact with the Services (for example, page-view counts, navigation patterns, and feature usage). We use these to improve the Services over time.
  • Marketing and advertising technologies that enable us and our advertising partners to deliver targeted advertising on third-party platforms (for example, Meta Pixel, Google advertising tags, and TikTok Pixel) and to measure the performance of those advertisements. These technologies may also enable cross-context behavioral advertising.

To the extent we offer a cookie preferences tool or banner on the Services, you may use it to manage your preferences for non-strictly-necessary tracking technologies. You can also manage cookies through your browser settings; please refer to your browser's help documentation for instructions.

In addition, as described in Section 8 below, you may have the right to opt out of certain advertising-related uses of your personal information, including those that involve the "sale" or "sharing" of personal information under California and other state privacy laws.

8. Your Privacy Rights and Choices

8.1 — Rights that may apply depending on where you live

Depending on the state or jurisdiction where you live, you may have some or all of the rights listed below in relation to your personal information. These rights are not absolute and may apply only in certain circumstances; in some cases, we may decline a request as permitted by applicable law.

  • Right to know / access. You may have the right to request that we confirm whether we process your personal information and to access the personal information we hold about you.
  • Right to delete. You may have the right to request that we delete personal information we maintain about you.
  • Right to correct. You may have the right to request that we correct inaccurate personal information we maintain about you.
  • Right to portability. You may have the right to receive a copy of the personal information we hold about you in a structured, commonly used, machine-readable format, and to request that we transfer it to a third party where technically feasible.
  • Right to opt out of "sale" or "sharing" / targeted advertising. Depending on where you reside, you may have the right to opt out of (a) the "sale" of your personal information, (b) the "sharing" of your personal information for cross-context behavioral advertising, and (c) the use of your personal information for "targeted advertising," as those terms are defined in applicable state privacy laws.
  • Right to limit the use of sensitive personal information. Depending on where you reside, you may have the right to direct us to limit our use of certain categories of "sensitive personal information." Māteriā does not use sensitive personal information for purposes that require offering this right at this time, but if our practices change, we will update this Privacy Policy and offer the right where applicable.
  • Right to appeal. Depending on where you reside, if we deny your request, you may have the right to appeal our decision.

These rights apply to residents of states with comprehensive privacy laws in effect, including (without limitation) California, Virginia, Colorado, Connecticut, Utah, Texas, Florida, Oregon, Montana, Tennessee, Iowa, Indiana, New Hampshire, Delaware, New Jersey, and Maryland, with the specific scope of rights determined by the applicable state law.

8.2 — How to exercise your rights

You may exercise any of these rights by:

  • Email: Contact us at privacy@materiaskin.com with the subject line "Privacy Request." Please include your full name, the email address associated with your account or purchase, the state in which you reside, and a description of the right you wish to exercise.
  • Opt out of "sale" or "sharing" for targeted advertising: Use the "Privacy Choices" link in the footer of our website — our opt-out for the "sale" or "sharing" of personal information — or set the Global Privacy Control (GPC) signal in your browser as described below.
  • Unsubscribe from marketing emails: Use the unsubscribe link in any marketing email we send, or contact us at support@materiaskin.com.
  • Opt out of marketing SMS: Text STOP, CANCEL, QUIT, END, UNSUBSCRIBE, or STOPALL to our SMS short code or long code, as described in our SMS Terms.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before processing certain requests; we may require you to provide information sufficient to confirm that you are the person about whom we hold the personal information. You may designate an authorized agent to make a request on your behalf, provided that the agent submits sufficient proof of your authorization. We will respond to your request within the timeframes required by applicable law.

8.3 — Global Privacy Control

If you visit the Services with the Global Privacy Control (GPC) opt-out preference signal enabled in your browser, we will treat the signal, where applicable law requires, as a request to opt out of the "sale" and "sharing" of personal information for the device and browser sending the signal. If we can associate the device with a known account, we will also apply the opt-out to that account. To learn more about Global Privacy Control, see https://globalprivacycontrol.org/. Other than the Global Privacy Control, we do not currently recognize other "Do Not Track" signals.

8.4 — California-specific information

In addition to the rights described above, California residents may have additional rights and disclosures under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"). The categories of personal information we collect, the sources of that information, the purposes for which we use it, and the categories of third parties to whom we disclose it are described in Sections 2 through 5 above.

Specifically:
- Categories of personal information we have "sold" or "shared" in the preceding twelve (12) months: identifiers (including IP addresses and cookie identifiers), commercial information (including transaction and engagement data), internet or other electronic network activity information (including browsing and interaction data), and inferences drawn from the foregoing. The "sale" or "sharing" is to the advertising and marketing partners described in Section 5 above for the purposes of targeted advertising.
- Categories of personal information we have disclosed for a business purpose in the preceding twelve (12) months: all of the categories described in Section 2 above.
- We do not have actual knowledge that we "sell" or "share" the personal information of any consumer under sixteen (16) years of age.

California residents may also contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs in writing at 1625 N. Market Blvd., Suite N-112, Sacramento, CA 95834, or by telephone at (916) 445-1254 or (800) 952-5210.

8.5 — Financial Incentives

We may offer programs that provide rewards, discounts, or other benefits in exchange for collecting, retaining, or using your personal information — for example, our loyalty and rewards program, our referral program, and discounts we may offer when you sign up for our email or SMS marketing. The material terms of each program are disclosed to you when you enroll. Participation is entirely voluntary, requires your opt-in, and you may withdraw at any time by following the instructions in the applicable program terms or by contacting us at privacy@materiaskin.com. Based on our reasonable, good-faith estimate, the personal information collected through these programs does not have an assignable monetary value to us; the value we receive is increased customer engagement and loyalty. Any difference in price or service you receive is reasonably related to that value. Withdrawing from a program does not affect the lawfulness of any processing that occurred before your withdrawal.

8.6 — Automated Decision-Making

We do not use automated processing to make decisions about you that produce legal or similarly significant effects. Our platform provider, Shopify, uses limited automated decision-making for fraud prevention and security — for example, temporarily blocking IP addresses or payment cards associated with fraudulent or high-risk activity. This processing is necessary to secure the Services and prevent fraud, and it does not produce legal or similarly significant effects on you. If we begin using profiling that would produce such effects, we will update this Privacy Policy and, where required by applicable law, offer you the right to opt out.

9. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for us and for you. Information you submit to the Services will be transmitted to and shared with Shopify, as well as third-party service providers that may be located in countries other than where you reside, in order to provide and improve the Services.

To help operate and improve our business, we use certain Shopify enhanced features that incorporate data and information about your interactions with our store, along with information from other Shopify-powered merchants and from Shopify itself. In providing these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with information from other merchants and from Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over the use of your personal information for these purposes.

To learn more about how Shopify uses your personal information and any rights you may have, you may visit the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

10. Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information from unauthorized access, use, disclosure, alteration, and destruction. However, no security measures are perfect or impenetrable, and we cannot guarantee the security of information transmitted to or stored on our Services. We recommend that you do not use unsecured channels to communicate sensitive or confidential information to us.

Payment-card data is processed by Shopify Payments (or another payment processor we engage), which is PCI-DSS compliant. Māteriā does not store full payment-card numbers on its own systems.

11. Third-Party Websites and Links

The Services may include links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such third-party sites, including the accuracy, completeness, or reliability of information found on these sites. Our inclusion of a link does not imply our endorsement of the linked site or its operator.

12. Children's Privacy

The Services are intended for use by individuals who are at least eighteen (18) years old, or the age of majority in their state or province of residence if greater than eighteen. The Services are not directed at children. Consistent with the Children's Online Privacy Protection Act ("COPPA"), we do not knowingly collect personal information from children under the age of thirteen (13). If we learn that we have collected personal information from a child under thirteen, we will delete it. If you are the parent or legal guardian of a child under thirteen and you believe we have collected personal information from your child, please contact us at privacy@materiaskin.com so we may delete it.

13. International Visitors

The Services are operated from the United States and are intended for customers in the United States. Personal information you provide will be processed in the United States. If you access the Services from outside the United States, you do so on your own initiative and are responsible for compliance with applicable local laws. By using the Services from outside the United States, you understand that your personal information will be transferred to and processed in the United States, where data protection laws may differ from those of your country of residence.

If our practices change and we begin offering Services to residents of the European Economic Area, the United Kingdom, or other regions with comprehensive data protection laws, we will update this Privacy Policy and rely on recognized transfer mechanisms (such as the European Commission's Standard Contractual Clauses) where required by applicable law.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices, our use of new advertising or analytics infrastructure, or operational, legal, or regulatory developments. When we do, we will post the revised Privacy Policy on this website, update the "Last updated" date, and, where required by applicable law, provide additional notice. Your continued use of the Services after a change to this Privacy Policy constitutes your acceptance of the revised policy.

15. Contact

If you have questions about this Privacy Policy or about our privacy practices, or if you would like to exercise any of your rights described in Section 8 above, please contact us at:

Materia, LLC
777 Brickell Avenue, Suite 500 PMB 1040
Miami, FL 33131-2803
privacy@materiaskin.com

For privacy-specific requests, please include the subject line "Privacy Request" in your email.