Privacy

This page covers Beautiful Body, the shop you are reading. It was written from the site's own code rather than from a template, and it describes what happens today rather than what we might do later.

What we collect, and when

Nothing about you until you do something. Browsing the shop is anonymous: no account needed, and on a first visit no cookies are set. We do count visits and shop events, like pages seen, items added, orders placed and which site or campaign link brought you here, with Umami, a cookie-free analytics tool we host ourselves on Railway in the US. It sets no cookies, stores no IP address, and does not track you across other websites. It can link your visits to each other only within the same calendar month; each month it starts over.

• When you buy: your name, delivery address, email address and phone number. We need all of it to send you a parcel and tell you it is coming.
• When you create an account: your email address, your name if you give one, and a password we never see in readable form.
• When you message us on live chat or the contact form: your name, your email address, what you wrote, the order number if you give one, and which page you were on. If you had a cart, its total is attached so we can answer without asking you to describe it.
• When you apply to the affiliate program: what you type into that form.
• When you sign up for the newsletter: your email address, which of our forms you used, and the date. Nothing else - not your name, not your IP address.

Cookies

Four that the shop needs, and every one of them exists to make something you asked for work. Anything beyond them is optional and off until you say yes on the cookie banner, which asks once whether we may measure which parts of our pages get used and load advertising tags. The cookies page covers that choice and how to change it. The four:

• Your cart: remembers what you put in it, so it is still there when you come back.
• Your sign-in: keeps you signed in between pages. Set only if you have an account and use it.
• Signing up: holds your place for a moment during registration, then goes.
• Your region: remembers the country and currency you chose, so you are not asked twice.

Clearing them empties your cart and signs you out. Nothing else breaks, and nothing follows you to another website.

Who else sees your information

Only companies that do a specific job for us, and only the part they need for it. None of them may use your details for their own purposes:

• Stripe takes the payment. They receive your card details directly and your billing address.
• Resend sends our emails - order confirmations, password resets. They receive your email address and what the message says.
• Railway and Supabase host the shop and its database. Your order lives there.
• Railway also runs Umami, the analytics tool we host ourselves. It counts visits and shop events for us, sets no cookies and stores no IP address.
• Our own admin system holds live chat conversations and affiliate applications, so the person answering can see what you wrote.

We do not sell your information, and we do not share it with advertisers. If that ever changes, this page changes first.

Where it is stored

The shop's database is in the United States, and our admin system is in Japan. Our visit counts are in the United States too: Umami runs on Railway's servers in San Francisco. All three are run by companies operating under standard contractual protections. Our admin system being overseas means your details leave the country, which is normal for online shopping and worth saying plainly rather than burying.

How long we keep it

• Orders: kept for as long as tax and consumer law require, which is seven years.
• Accounts: kept until you ask us to close yours.
• Live chat conversations: kept so we can pick up where we left off if you write again.
• Carts that were never ordered: cleared as they expire.
• Newsletter signups: kept until you unsubscribe, then kept as a record that you did, so we do not add you back by mistake.
• Visit counts: there is no time limit on these yet, so Umami keeps them until we set one. When we do, it goes on this page.

What you can ask us to do

Email us and we will do it. You do not need to give a reason, and it costs nothing:

• Tell you what we hold about you.
• Correct anything that is wrong.
• Delete it, except the parts we are legally required to keep, such as an order we have to hold for tax purposes.
• Send you a copy in a form you can take elsewhere.

We act within 30 days. Depending on the state you live in you may also have a route to your own attorney general or privacy regulator if we do not. We would rather you told us first, but the route exists either way.

Common questions

Get in touch