Privacy policy

This Privacy Policy describes how Lime Crime Cosmetics, Inc. (“Lime Crime,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards your personal information when you visit or make a purchase from limecrime.com or limecrimemakeup.com (collectively, the “Site”). This policy was last updated on October 20th, 2026.

1. Important Notices & International Data Transfers

• U.S. Operations: This Site is operated in the United States.
• Cross-Border Transfers: If you are visiting the Site from the European Union, Canada, or elsewhere outside the United States, please be aware that your personal information will be transferred to, collected, and processed in the United States.
• Consent to Transfer: By using the Site or providing us with your data, you explicitly acknowledge and consent to the storage, processing, and transfer of your information in the United States, where data protection laws may differ from those in your home country.
• Policy Agreement: If you do not agree to the terms of this Privacy Policy, please immediately discontinue your use of the Site. Your continued interaction with the Site signifies your acceptance of these terms.

2. Personal Information We Collect

We collect information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with a particular consumer or device ("Personal Information").

Automatically Collected Information ("Device Information")

When you visit the Site, we automatically collect certain information about your device. This includes:

• Identifiers: Your IP address, web browser type, unique device identifiers, and time zone settings.
• Cookies and Tracking: Information from cookies, web beacons, pixels, or other tracking technologies installed on your device.
• Commercial and Internet Activity: Details regarding the individual web pages or products you view, what websites or search terms referred you to our Site, and real-time data about how you interact with the Site (such as clickstream data, scroll behavior, and browsing patterns).

Summary of Changes for California Compliance (CCPA/CPRA)

To ensure your brand fully complies with California law, the complete policy should ultimately integrate the following components:

• The "Notice at Collection": Explicitly stating the categories of personal information collected and how long they are retained.
• Your Privacy Choices Link: California requires a clear mechanism allowing consumers to opt out of the "sale" or "sharing" of personal information (which under the law includes standard behavioral advertising and third-party tracking pixels).
• Consumer Rights Section: Detailing California residents' rights to know, delete, correct, and limit the use of their sensitive data without discrimination.

3. How We Use Your Information

We use the personal information we collect for various business and commercial purposes, including:

• Providing and Improving the Site: To optimize your browsing experience, troubleshoot technical issues, analyze website traffic, and improve our product offerings.
• Customer Support and Communication: To respond to your inquiries, send you order status updates, and provide customer service.
• Marketing and Advertising: To deliver personalized ads, promotional offers, and newsletters tailored to your interests (where permitted by law).
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities to protect our customers and our business.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes, or to respond to lawful government requests.

4. "Selling" or "Sharing" of Personal Information

Under California law (CCPA/CPRA), the terms "sell" and "share" are defined very broadly:

• "Selling" includes exchanging personal information with a third party for monetary or other valuable consideration.
• "Sharing" specifically refers to disclosing personal information to a third party for cross-context behavioral advertising (targeted advertising based on your activity across different websites).

Disclosures Regarding Analytics and Advertising

We do not sell your personal information for money. However, like many online retailers, we partner with third-party advertising networks, social media platforms, and analytics providers (such as Google Analytics). To facilitate targeted marketing, we allow these partners to collect identifiers and internet activity via cookies, pixels, and web beacons on our Site.

This tracking activity may be classified as "selling" or "sharing" under California law.

• Categories of Information Disclosed: Identifiers (IP address, cookie IDs) and Internet/Electronic Network Activity.
• Categories of Third Parties: Ad networks, marketing platforms, and data analytics providers.

You have the right to opt out of this tracking at any time by clicking our "Your Privacy Choices" or "Do Not Sell or Share My Personal Information" link in the website footer, or by enabling a recognized Global Privacy Control (GPC) signal on your browser.

5. California Privacy Rights Addendum

This section applies solely to residents of the State of California. It supplements the main privacy policy to satisfy the requirements of the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the "CCPA/CPRA").

Your Rights Under California Law

If you are a California resident, you have the following specific rights regarding your personal information:

• 1. Right to Know / Access: You have the right to request that we disclose what personal information we have collected, used, disclosed, "sold," or "shared" about you over the past 12 months, including the specific pieces of information and the categories of sources.
• 2. Right to Delete: You have the right to request the deletion of personal information that we have collected from you, subject to certain legal exceptions (such as fulfilling an ongoing order or complying with a legal obligation).
• 3. Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you.
• 4. Right to Opt-Out of Sale or Sharing: You have the right to direct us not to "sell" or "share" your personal information for targeted, cross-context behavioral advertising.
• 5. Right to Limit Sensitive Data: We do not collect or process "Sensitive Personal Information" (as defined by California law) for the purpose of inferring characteristics about you, so this right is not applicable to our current practices.
• 6. Right to Non-Discrimination: We will not discriminate or retaliate against you for exercising any of your CCPA/CPRA rights. This means we will not deny you goods, charge you different prices, or provide a different level of quality.

How to Exercise Your Rights

To submit a request to exercise your California privacy rights, you or your authorized agent can contact us through any of the following methods:

• Online Form: Click the "Your Privacy Choices" link in our website footer.
• Email: Send a request to info@limecrimemakeup.com with the subject line "California Privacy Rights Request."
• Verification Process: To protect your security, we must verify your identity before fulfilling access, deletion, or correction requests. We may ask you to confirm details about your recent account history or email address to match our records.

6. Data Retention Policy

We retain your personal information only for as long as is reasonably necessary to fulfill the business or commercial purposes for which it was collected, as outlined in this Privacy Policy.

To determine the appropriate retention period for personal information, we consider:

• The duration of our relationship with you:

Whether you have an active account, are subscribed to our newsletter, or have made a purchase.

• Legal and statutory obligations: Mandatory data retention laws, tax audits, and accounting rules that require us to keep transaction or financial history.
• Security and fraud prevention: Keeping records for a necessary window to detect, investigate, and prevent fraudulent activity or security incidents.
• Limitation periods: Retaining records to defend against potential legal claims or contract disputes.

Once your personal information is no longer required for these permitted purposes, we will securely delete, anonymize, or aggregate it so that it can no longer be associated with you.

7. Notice at Collection (California Residents)

This Notice at Collection provides California residents with a summary of the categories of personal information we collect, the business purposes for which it is used, whether that information is "sold" or "shared," and how long it is retained.

Categories of Personal Information Collected	Business or Commercial Purpose for Collection	Sold or Shared?	Retention Period
Identifiers (e.g., Name, email address, physical shipping address, billing address, IP address, account username)	• Order fulfillment and shipping • Customer service communications • Account creation and maintenance • Personalized advertising and email newsletters	Shared (IP addresses and online identifiers may be shared with ad networks for targeted advertising)	For the duration of your active account or customer relationship, plus up to 7 years for tax and legal compliance.
Commercial Information (e.g., Purchase history, items placed in cart, products viewed, gift card balances)	• Completing sales and transactions • Tracking order history and processing refunds • Tailoring product recommendations and promotions	Shared (Browsing and cart behaviors may be shared with ad partners to show you relevant products)	For the duration of your active account or customer relationship, plus up to 7 years for business transaction records.
Internet or Electronic Network Activity (e.g., Browsing history, search queries, browser type, interaction with our website, clickstream data)	• Optimizing website functionality and user experience • Security and fraud prevention • Delivering cross-context behavioral advertising	Shared (Disclosed to third-party analytics and advertising providers)	Up to 14 months for website analytics and advertising cookies, or as required for security tracking.
Geolocation Data (e.g., Implied location derived from your IP address)	• Showing the correct regional currency and shipping rates • Preventing localized fraud and cyber attacks	No	Up to 14 months in aggregated server logs and web analytics.
Inferences (e.g., Consumer profiles reflecting your product preferences or shopping tendencies based on past behavior)	• Customizing marketing campaigns • Improving our general product selection and inventory mapping	Shared (Profile insights may be shared with marketing platforms)	Retained for as long as the underlying commercial and behavioral data remains valid, up to 3 years.

 

Opting Out of Sale or Sharing

If you wish to opt out of the "sale" or "sharing" of your personal information (including tracking via third-party advertising cookies), please click the "Your Privacy Choices" or "Do Not Sell or Share My Personal Information" link located in our website footer. You may also use a browser-based Global Privacy Control (GPC) signal to automatically broadcast your opt-out preference.

Contact Us  
If you have any questions about this privacy policy, please contact us at: Customercare@limecrime.com