Privacy Policy

Last updated: 4 August 2026. Effective: 4 August 2026.

This Privacy Policy describes how Phosis, LLC ("Phosis", "we", "us" or "our") collects, uses and discloses your personal information when you visit phosis.com, buy from us, sign up for our emails or texts, or otherwise interact with us. We refer to all of that together as the "Site".

Please read this policy carefully. By using the Site you agree to the practices described here. If you do not agree, please do not use the Site.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices, our technology or the law. We will post the revised policy on this page and update the "Last updated" date above. Material changes take effect 30 days after we post them, unless the law requires otherwise. Please review this page periodically.

How we collect and use your personal information

We collect personal information from you, from your device when you use the Site, and from a small number of third parties who work with us. What we collect depends on how you interact with us.

Information you give us directly

  • Contact details. Name, email address, phone number, shipping address, billing address.
  • Order information. What you bought, order value, order history, discount codes used, shipping and delivery details.
  • Payment information. Your card or payment details are collected and processed by our payment processors, not by us. We receive only a transaction confirmation and limited details such as the card type and last four digits.
  • Account information. Login credentials, saved addresses and preferences if you create an account.
  • Customer support information. Anything you tell us in an email, a form, a review or a message, including photos you send us with a return or damage claim.
  • Marketing preferences. Whether you have opted in to our emails or texts, and what you engage with.
  • Reviews and testimonials. The content, rating, name and any photos you submit.

Information we collect automatically

When you visit the Site, we and our service providers automatically collect:

  • Device and browser information. IP address, device type, browser type and version, operating system, screen size, language settings.
  • Usage information. Pages viewed, products viewed, time on page, scroll depth, clicks, items added to cart, referring website, search terms used on the Site, dates and times of visits.
  • Cookies, pixels and similar technologies. Described in the Cookies section below.

Information we obtain from third parties

  • Our ecommerce platform. Shopify hosts the Site and provides order, checkout and account functionality.
  • Payment processors. They confirm your payment and pass us fraud and verification signals.
  • Shipping carriers. Delivery status and address validation.
  • Marketing and analytics providers. Klaviyo (email and text messaging), Google (Google Analytics, Google Ads), Meta (Facebook and Instagram advertising) and our server-side tag management provider give us aggregated and individual engagement data such as opens, clicks and conversions.
  • Social media platforms. If you interact with our accounts or sign up through a form hosted on a platform, we receive the information you submitted there.

How we use your personal information

  • Providing products and services. Processing your order, taking payment, arranging delivery, handling returns and refunds, managing your account, and answering your questions.
  • Marketing and advertising. Sending you emails and, if you opted in, text messages. Showing you and people like you our advertising on Google, Meta and other platforms. Measuring whether that advertising works.
  • Improving the Site. Understanding which pages and products people use, testing changes, and fixing what is broken.
  • Security and fraud prevention. Detecting fraudulent orders, protecting accounts, and keeping the Site available.
  • Communicating with you. Order confirmations, shipping notices, service messages, and responses to your requests.
  • Legal and compliance. Meeting our tax, accounting, consumer protection and product safety obligations, and establishing or defending legal claims.

We do not use automated decision-making that produces legal or similarly significant effects about you.

Cookies and tracking technologies

We use cookies, pixels, tags, local storage and server-side tracking to run the Site, remember your cart, understand how the Site is used, and deliver and measure advertising. Some of this happens through a server-side tag management setup, which means certain data is sent from our server to our analytics and advertising providers rather than directly from your browser. It is the same categories of data either way.

Categories in use:

  • Strictly necessary. Required for the Site to work: your cart, checkout, security and fraud prevention. These cannot be switched off.
  • Analytics and performance. How people find and use the Site, so we can improve it.
  • Marketing and advertising. Building audiences, showing you relevant ads and measuring conversions.
  • Functional. Remembering preferences such as your region or previously entered details.

You can control cookies through the consent banner on the Site where one is shown, and through your browser settings. Blocking strictly necessary cookies will break checkout. Blocking others will not stop you shopping, but the Site may remember less about you.

How we disclose personal information

We do not sell your personal information for money. We disclose personal information in these circumstances:

  • Service providers. Companies that do work for us: our ecommerce platform, payment processors, fulfillment and shipping carriers, email and text messaging platform, reviews platform, analytics and advertising providers, customer support tools and IT providers. They may only use the information to provide that service to us.
  • Advertising partners. We share identifiers and activity data with Google, Meta and similar platforms so we can advertise to you and to audiences that resemble our customers, and so we can measure results. Under California and several other state privacy laws this counts as "sharing" for cross-context behavioral advertising, and in some definitions as a "sale". You can opt out. See "Your privacy rights" below.
  • Legal reasons. Where we are required to by law, subpoena or a lawful government request, or where we need to protect our rights, our customers or the public.
  • Business transfers. If Phosis is involved in a merger, acquisition, financing or sale of assets, your information may be transferred as part of that transaction. We will notify you of any material change to how your information is handled.
  • With your direction. Anything else you ask or permit us to share.

Health related information

Phosis makes skincare for women in perimenopause and menopause. Because of who we serve, some of the information around your purchase, your browsing or what you tell us in an email could suggest something about your life stage or your skin.

We treat that information with care:

  • We do not ask you to give us medical information, and you should not send us medical records or diagnoses.
  • We do not sell consumer health data, and we do not share it with data brokers.
  • Anything you tell us in a support email about your skin is used to answer you and is not added to advertising audiences.
  • We do not build or share advertising audiences based on a stated or diagnosed health condition.

If you live in Washington or Nevada, you have specific rights over consumer health data, including the right to have it deleted and the right to withdraw consent to its collection or sharing. Email hello@phosis.com with "Health data request" in the subject line and we will action it.

Email and text message marketing

We send marketing emails to people who have opted in. Every email has an unsubscribe link at the bottom and it works immediately. You will still receive transactional messages about orders you have placed.

If you give us your mobile number and opt in to text messages, you consent to receive recurring automated marketing texts from Phosis at that number. Consent is not a condition of any purchase. Message and data rates may apply. Message frequency varies. Reply STOP to any message to unsubscribe, or HELP for help.

Reviews, testimonials and content you post

If you submit a review, a photo or a testimonial, you should assume it is public. We may publish it on the Site, in emails and in advertising, along with your first name and last initial. If you want a review removed, email us.

Third party websites and links

The Site links to websites we do not control, including social media platforms and our retail partners. This policy does not cover them. Read their privacy policies before giving them your information.

Children's information

The Site is meant for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, email hello@phosis.com and we will delete it. We do not have actual knowledge that we sell or share the personal information of anyone under 16.

Security and retention

We use reasonable administrative, technical and physical safeguards to protect personal information, and we work with vendors who do the same. No website or transmission over the internet is completely secure, so we cannot guarantee absolute security. Please protect your account password.

We keep personal information for as long as we need it for the purposes described in this policy. In practice that means order and transaction records for as long as tax and accounting law requires, marketing contact details until you unsubscribe or ask us to delete them, and website analytics data for a limited period set in each tool.

Your privacy rights

Depending on where you live, you may have some or all of these rights:

  • Right to know or access. Ask what personal information we hold about you, where it came from, what we do with it and who we share it with, and get a copy.
  • Right to delete. Ask us to delete personal information we hold about you.
  • Right to correct. Ask us to fix information that is wrong.
  • Right to portability. Get a copy in a portable format.
  • Right to opt out of targeted advertising and of the sale or sharing of your personal information. See below.
  • Right to withdraw consent where we rely on your consent.
  • Right to appeal. If we decline your request, you can ask us to reconsider.
  • Right to non-discrimination. We will not give you worse pricing, worse service or fewer products because you used a privacy right.

How to opt out of targeted advertising, sale or sharing

You can do any of the following:

  • Email hello@phosis.com with "Do not sell or share my personal information" in the subject line.
  • Decline marketing cookies in the consent banner on the Site.
  • Send a Global Privacy Control (GPC) signal from your browser. We treat a valid GPC signal as a request to opt out of the sale and sharing of personal information and of targeted advertising for that browser.

How to make a request

Email hello@phosis.com with the request in the subject line. We will confirm receipt and respond within the time the law allows, normally 45 days, and we will tell you if we need longer.

We need to verify who you are before we act on a request about your data. We usually do this by matching the email address you write from against our records, and we may ask for the order number and shipping ZIP code of a recent order. We will not ask for more information than we need.

You can use an authorized agent to make a request on your behalf. We will ask for written proof that you authorized them, and we may ask you to confirm directly.

Complaints

If you have a concern about how we handle your personal information, email hello@phosis.com and we will address it. If you are not satisfied, you may have the right to complain to your state attorney general or another regulator where you live.

Users outside the United States

We operate in the United States and we sell only within the United States. If you access the Site from elsewhere, your information will be transferred to, stored and processed in the United States, where privacy laws differ from those in your country.

Contact us

Phosis, LLC
2701 Kavanaugh Boulevard, Suite 301
Little Rock, AR 72205, United States
hello@phosis.com
(646) 801-6016