1. Scope & Corporate Commitment
Gusie's Beauty ("Company", "we", "us", or "our"), a sovereign flagship brand and operating division of Sierra Holdings Inc based in the State of Maryland, United States, is deeply committed to protecting your fundamental right to digital privacy.
This Privacy Policy sets forth our practices concerning the collection, storage, processing, transfer, and disclosure of personal data when you visit our website (gusiesbeauty.com and related temp/staging domains), interact with our customer care concierge, purchase our artisanal body butters and hair elixirs, or engage with our social brand channels.
Our Privacy Pledge: We believe in transparent, ethical commerce. We do not sell, rent, monetize, or trade your personal information to commercial data brokers under any circumstances.
2. Categories of Information We Collect
Depending on how you interact with our e-commerce platform, we collect the following categories of information:
A. Personal Identifiers (Directly Provided by You)
- Contact Details: First and last name, email address, telephone number.
- Delivery Information: Physical delivery address, apartment/suite number, city, state, postal code, and country for package dispatch.
- Order Specifications: Selected products, jar sizes (4 oz, 8 oz, bulk packs), bespoke fragrance choices (Warm Vanilla, Amber, Chanel No. 5, etc.), and personalized event favor engravings.
- Communications: Customer care inquiries, feedback, product reviews, and concierge chat messages.
B. Automatically Collected Technical Information
- Device & Connection Data: IP address, browser type, operating system version, device identifiers, and language preferences.
- Site Interaction & Telemetry: Pages visited, product cards viewed, referral URLs, time spent on site, and shopping bag session activity.
3. Secure Financial Transactions & Stripe Processing
We take extreme measures to safeguard your financial transactions. Gusie's Beauty does NOT store, process, or have access to your full credit card number, debit card CVV, or banking credentials on our local web servers.
PCI-DSS Level 1 Certified Stripe Gateway
All financial transactions, 1-Click Buy Now links, and dynamic multi-item checkouts are executed directly through Stripe Inc, certified to PCI Service Provider Level 1 (the most stringent security certification in the global payments industry). All payment data is transmitted via end-to-end 256-bit Transport Layer Security (TLS) encryption.
4. Purposes of Data Processing
We utilize your personal information strictly for legitimate commercial, operational, and legal purposes:
- Order Fulfillment & Dispatch: Handcrafting, batching, packaging, and shipping your artisanal orders via tracked national carriers.
- Transactional Communications: Sending automated email receipts, order confirmations, tracking numbers, and delivery milestone notifications.
- Customer Support: Responding to telephone inquiries, personalized skincare concierge chats, and order modifications.
- Security & Fraud Mitigation: Verifying shipping addresses, preventing automated bot abuse, mitigating chargeback disputes, and ensuring platform uptime.
- Statutory Tax & Accounting Compliance: Calculating destination-based state and local sales taxes and maintaining statutory corporate records.
5. Third-Party Service Providers & Disclosures
We disclose necessary personal information solely to trusted third-party service providers bound by strict contractual confidentiality and data security obligations:
- Payment Gateways: Stripe Inc — for secure payment tokenization, fraud scoring, and payment settlement.
- Shipping & Logistics Carriers: United States Postal Service (USPS), United Parcel Service (UPS), and FedEx — for physical parcel transport and delivery.
- Cloud Infrastructure & Security: Cloudflare Inc — for Content Delivery Network (CDN) acceleration, DDoS mitigation, and SSL/TLS cryptographic security.
- Legal & Law Enforcement: Only when strictly required by enforceable subpoena, court order, or applicable federal or state statute.
Zero Data Sale Guarantee: Gusie's Beauty has not sold or shared any consumer personal information for cross-context behavioral advertising in the preceding twelve (12) months.
6. Cookies, Local Storage & Tracking Technologies
Our website uses strictly necessary and functional web technologies:
- Browser LocalStorage: We utilize client-side browser
localStorage to store your shopping bag items, chosen scents, and jar sizes so your selections persist as you navigate between pages. LocalStorage data is stored directly on your personal device and is not transmitted to third-party ad networks.
- Essential Session Cookies: Temporary cryptographic tokens used to maintain secure server connections and prevent Cross-Site Request Forgery (CSRF).
You can configure your web browser to block or alert you about cookies; however, disabling essential cookies or local storage will prevent shopping bag items from persisting during checkout.
7. State Privacy Rights (California CCPA/CPRA, Virginia, Colorado)
If you are a resident of California (under the California Consumer Privacy Act as amended by the CPRA), Virginia (VCDPA), Colorado (CPA), or other states with comprehensive consumer privacy statutes, you enjoy specific statutory rights:
- Right to Know & Access: You may request a detailed report of the specific pieces and categories of personal information we have collected about you.
- Right to Rectification: You may request corrections to inaccurate or outdated personal data.
- Right to Deletion: You may request that we delete personal data collected from you, subject to legal record-keeping exemptions (e.g., historical tax and completed transaction archives).
- Right to Non-Discrimination: We will never deny services, charge different prices, or provide a lower quality of goods because you exercise your statutory privacy rights.
To submit a consumer privacy request, email our Privacy Team at [email protected] or call us toll-free at (301) 300-4532.
8. Children's Online Privacy Protection Act (COPPA)
Our website and artisanal skincare products are directed to adult consumers. We do not knowingly collect, solicit, or maintain personal information from children under the age of thirteen (13). If we become aware that personal information of a child under 13 has been collected without verifiable parental consent, we will take immediate steps to delete the information from our servers.
9. Data Security, Safeguards & Retention
We implement robust administrative, technical, and physical security measures designed to protect your personal information against unauthorized access, destruction, loss, or alteration. These measures include strict access controls, 256-bit SSL encryption, automated vulnerability patching, and secure database hashing.
We retain your transactional and order records only for as long as necessary to fulfill the purposes outlined in this policy and to comply with statutory legal, tax, accounting, and anti-fraud auditing requirements (typically 7 years for commercial tax ledgers).