Privacy Policy

This Privacy Policy explains how Taut Beauty LLC (“Taüt Beauty”, “we”, “us”) collects, uses, shares and protects personal information when you visit tautbeauty.com (the “Site”), join our waitlist, subscribe to our newsletter, place a pre-order or order, or contact us. It should be read together with our Terms of Service.

For the purposes of data-protection laws such as the EU and UK GDPR, Taut Beauty LLC is the “controller” of the personal information described here. We are Taut Beauty LLC · Los Angeles, California, and you can reach us at hello@tautbeauty.com.

Information you give us

• Order and pre-order details: your name, email address, shipping address, the Products and quantities you ordered, and any promotion code you used. Delivery details are collected on the secure Stripe Checkout page and shared with us.
• Waitlist and newsletter sign-ups: your email address (and name, if you provide it), and the page you signed up from.
• Support and warranty requests: what you write to us, your contact details, order information and any photos or videos you choose to send.
• Affiliate partners: if you take part in our affiliate program, your name, email address and referral code, the commission rate we agreed, and your payout status. Your identity, bank and tax details are collected by Stripe on its own pages when you set up payouts; we do not receive or store your bank details.

Information collected automatically — only with your consent

If you click “Accept” on our cookie banner, we measure how the Site is used. If you click “Decline” (or ignore the banner), this measurement is off. When it is on, we record:

• a randomly generated visit identifier stored in your browser (it contains no personal details and resets after 30 minutes of inactivity);
• the pages you view, how long you spend on each, and the links and buttons you click;
• the website that referred you, your browser type and operating system (“user agent”), and whether you are on a desktop, tablet or mobile device; and
• your approximate location (country, region, city and approximate coordinates), which our hosting network infers from your IP address. We do not store your IP address with these analytics records.

Information collected automatically — without your consent

When you place an order, join the waitlist or subscribe, we note the country you appear to be in (inferred from your IP address) so we can understand where demand is coming from and detect fraud. Our servers and hosting providers also keep standard technical logs (such as IP address, request time and error details) for security and reliability. These are necessary to run the Site.

If you arrive through an affiliate partner’s link, we save a small cookie in your browser containing only that partner’s referral code, and we add the code to your order if you place one. This lets us credit the partner who introduced you. It is separate from analytics: it works whether you accepted or declined the cookie banner, it holds nothing about you, and the partner is never told who you are. We count visits to a partner’s link without recording anything that identifies the visitor.

Information from other sources

• Stripe tells us whether your payment succeeded, the last digits and brand of your card, your billing country and postal code, refund and dispute status, and fraud-screening outcomes.
• Shipping carriers provide delivery status and exception information for your parcel.

What we do not collect

We do not receive or store your full payment card number. We do not ask for health information, and we do not use advertising pixels or third-party advertising trackers on the Site. Please do not include sensitive health details in messages to us unless it is necessary for a safety or warranty issue.

We keep our use of cookies and browser storage deliberately small. The Site itself does not use advertising or cross-site tracking cookies. Technologies we use:

Your choices. You can change your analytics choice at any time by clearing this site’s data in your browser settings — the banner will then appear again — or by emailing hello@tautbeauty.com. Blocking storage entirely may affect parts of the Site, such as remembering your choice.

The referral cookie is not controlled by the banner. You can delete it by clearing your cookies, or block it in your browser settings; if you do, a partner may not be credited for your order, but your order and its price are unaffected.

We use personal information only for the purposes below. Where the GDPR or UK GDPR applies, we also identify the legal basis we rely on.

We do not use personal information for automated decision-making that has legal or similarly significant effects on you. Our payment processor uses automated fraud-detection tools when you pay, and may decline a payment as a result; if you think that was a mistake, contact us.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:

These providers act on our instructions as “processors” or “service providers”, except Stripe, which also acts as an independent controller for some of its own purposes (such as fraud prevention and regulatory compliance). They may use the information only as needed to provide their services.

We may also disclose information:

• to comply with law, a court order or a lawful request from authorities;
• to protect the rights, property, safety or security of our customers, the public, or Taüt Beauty, including to detect and prevent fraud;
• to our payment processor and your bank when responding to a payment dispute;
• in connection with a merger, financing, acquisition, reorganization or sale of assets, in which case we will make sure the recipient honors this policy or tell you of any material change; and
• with your consent or at your direction.

We and our service providers operate in the United States and other countries. If you are located in the EEA, the UK or another region with data-transfer rules, your information will be transferred to and processed in countries that may not offer the same level of protection as your own.

When we do this, we rely on appropriate safeguards — such as an adequacy decision, the European Commission’s Standard Contractual Clauses (with the UK Addendum where relevant), or a provider’s certification under the EU–U.S. Data Privacy Framework — and we require our providers to protect your information. You can ask us for a copy of the relevant safeguards by writing to hello@tautbeauty.com.

We keep personal information only as long as needed for the purposes described in this policy, and then delete it or anonymize it. Typical periods:

We may keep information longer where the law requires it, or where it is needed to resolve a dispute or enforce our agreements.

We use administrative, technical and organizational measures designed to protect personal information, including encryption in transit (HTTPS), encrypted storage at our database and hosting providers, access limited to those who need it, and secured, authenticated access to our administrative tools. Card details are handled by Stripe, which is certified to PCI DSS Level 1, and never touch our servers.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and regulators as required by law.

Depending on where you live, you may have some or all of the rights below. We extend the core rights of access, correction, deletion and opt-out of marketing to all our customers regardless of location.

• Access a copy of the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete your personal information, subject to records we must keep by law.
• Port your information in a portable, commonly used format.
• Object to or restrict certain processing, including processing based on legitimate interests.
• Withdraw consent at any time (for analytics and marketing), without affecting earlier processing.
• Opt out of marketing by using the unsubscribe link in any email.
• Not be discriminated against for exercising your rights.

How to exercise your rights

Email hello@tautbeauty.com with the request and the email address used for your order or sign-up. We may need to verify your identity (for example, by confirming details of an order) before acting, to protect your information. We respond within one month, or within 45 days where US state law applies, and let you know if we need more time. You may use an authorized agent to make a request on your behalf, provided they have your written permission and we can verify both of you. If we decline a request, we will tell you why and, where the law provides, how to appeal.

We do not currently sell or ship to the European Economic Area or the United Kingdom, and the Site is not directed at people there. Even so, if you are in the EEA or the UK and use the Site or contact us, we extend to you the rights described above under the GDPR and UK GDPR. You also have the right to lodge a complaint with your local data-protection authority — for example, your national supervisory authority in the EEA, or the Information Commissioner’s Office (ico.org.uk) in the UK. We would appreciate the chance to resolve your concern first, so please contact us at hello@tautbeauty.com.

Where we rely on consent, you are free to refuse or withdraw it without detriment. Providing the information needed to fulfil an order is a contractual requirement; without it we cannot complete the order.

Residents of California, Colorado, Connecticut, Virginia, Texas, Utah, Oregon, Montana and other US states with consumer privacy laws may have rights to know, access, correct, delete and port their personal information and to opt out of its sale, sharing for targeted advertising and certain profiling. If we decline your request, you may appeal by replying to our decision, and if you are unsatisfied with the outcome you may contact your state attorney general.

Categories of personal information we collected in the last 12 months

• Sale and sharing. We have not sold or shared (for cross-context behavioral advertising) personal information in the preceding 12 months, and we do not knowingly sell or share information of anyone under 16.
• Sensitive personal information. We do not collect sensitive personal information as defined by California law, and we do not use or disclose it to infer characteristics about you.
• Purposes. We collect and use information for the business purposes listed in How we use information.
• Retention. See How long we keep information.
• California “Shine the Light.” We do not disclose personal information to third parties for their own direct marketing purposes.

Canada. We handle personal information in accordance with applicable Canadian privacy laws, including PIPEDA and, for Quebec residents, Law 25. Your information may be stored and processed outside Canada, including in the United States, where it may be accessible to courts and authorities under local law. You may request access, correction or withdrawal of consent, and you can raise a concern with the Office of the Privacy Commissioner of Canada or your provincial authority.

Australia. We handle personal information in line with the Australian Privacy Principles. We may disclose information to overseas recipients described in this policy, and we take reasonable steps to ensure they protect it. You may request access or correction, or make a complaint to us and then, if unresolved, to the Office of the Australian Information Commissioner (oaic.gov.au).

New Zealand, Singapore and elsewhere. Where local law gives you additional rights — such as the right to withdraw consent or to lodge a complaint with your regulator — we honor them. Contact hello@tautbeauty.com to exercise them.

We email you marketing only if you subscribe, or are an existing customer where the law allows. Every marketing email includes an unsubscribe link, and we honor opt-outs promptly (and in any event within 10 business days). You will still receive important service messages about orders, delays, warranties and safety.

The Site and our Products are for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact hello@tautbeauty.com and we will delete it.

There is no common standard for “Do Not Track” signals, so we do not respond to them. Because analytics on our Site is switched off unless you opt in, and because we do not sell or share personal information for advertising, a browser opt-out signal leaves nothing further to disable. You can control analytics at any time as described in Cookies and similar technologies.

The Site links to third-party sites, including social networks such as Instagram, TikTok, YouTube and Facebook. We do not control them and are not responsible for their privacy practices. Please read their policies before sharing information with them.

We may update this policy as our practices, Products or legal requirements change. We will post the new version here with an updated date, and, if a change is material, tell you by email or a prominent notice on the Site before it takes effect where the law requires. Please check back from time to time.

Questions, requests or concerns about your privacy? Please get in touch.

• Email: hello@tautbeauty.com
• Taut Beauty LLC · Los Angeles, California