Last updated 5 October 2026.
What we collect, who else sees it, and how to make us stop. Short version: we collect what an order needs and what tells us whether an ad worked, we sell none of it, and you can have it deleted by asking.
The chat widget on this site answers from a script that runs in your own browser. It sends nothing anywhere and we never see what you typed into it.
That is the whole list. Nobody else gets your data, and we do not sell it — not in the plain sense and not in the broader sense California's law uses for advertising cookies, because we have not enabled any data sale in the tools above.
To fulfil the order you placed, to answer you when you write to us, to send marketing email you asked for, and for our legitimate interest in knowing whether our advertising works. Marketing email only goes to people who opted in, and every one of them carries an unsubscribe link that works immediately.
This site uses cookies and similar technologies for the tools listed above. You can block or delete them in your browser settings — the site will still work. You can also switch off ad personalisation inside Meta's ad settings and Google's Ad Center, and browser-level signals such as Global Privacy Control are honoured where the law requires it.
Order records stay as long as tax and accounting rules require, currently seven years. Email-list entries stay until you unsubscribe or ask us to delete them. Analytics data expires on the providers' own schedules.
Wherever you live, you can ask us for a copy of what we hold on you, ask us to correct it, or ask us to delete it. If you are in California, Colorado, Connecticut, Virginia or another state with a consumer privacy law, those rights are statutory and include the right not to be treated differently for using them. If you are in the UK or EU, the UK GDPR and GDPR apply and you may also complain to your data protection authority.
Email Lennoxsupport@gmail.com and say what you want done. We reply within 30 days and we will not make you fill in a form.
This site is not for children. We do not knowingly collect anything from anyone under 13, and you must be 18 or older to buy from us. If a child has sent us something, email us and it gets deleted.
The site is served over HTTPS and payments are handled by Shopify, which is PCI-DSS compliant. No system is perfect; if something ever goes wrong with your data we will tell you rather than hope you do not notice.
If this policy changes, the date at the top changes with it. A change that materially affects people already on our list will be emailed to them.
Lennox Beauty — Lennoxsupport@gmail.com, Monday to Saturday, 9am–7pm ET.