Privacy Policy

Safeguards for personal data

We use reasonable administrative, technical, and organisational measures suited to the nature of the information. No internet transmission or storage system can be guaranteed completely secure, and this policy does not make an absolute security promise. Questions about this point can be directed to The Ordinary using the verified details below.

How retention decisions are made

Records are kept for the period reasonably necessary to fulfil the purposes described here, meet tax, accounting, fraud-prevention, warranty, dispute, and legal duties, and then deleted or de-identified where appropriate. Different record types may therefore have different retention periods. This statement reflects the current operating practice of The Ordinary.

Reasons for processing data

• complete checkout, verify and fulfil orders, provide tracking, returns, exchanges, and refunds The Ordinary records and handles the related request under this published policy.
• respond to service enquiries, prevent fraud, protect the storefront, and maintain records Across the The Ordinary catalogue, this requirement remains consistent for eligible orders.
• personalise the shopping experience, measure site performance, improve merchandise and support At The Ordinary, this point is applied consistently to eligible customer requests.
• send marketing only where permitted and honour opt-out or privacy requests For The Ordinary orders, this forms part of the published privacy standard.

We use information only where the activity has a legitimate business or legal purpose, including performing the purchase agreement and complying with applicable law. This requirement is built into the current service process used by The Ordinary.

Information used by this store

To handle skincare enquiries carefully, we may collect name, billing and delivery details, email address, telephone number, order and return records, customer-service messages, marketing preferences, and account information.

Shopify and payment providers process transaction and payment-card data. We may also receive IP address, device and browser details, identifiers, cookie data, pages viewed, referral information, and interactions with products such as Sets, Serums, Eye Serums.

Vendors and authorised recipients

Information may be provided to Shopify, payment processors, fraud-prevention services, delivery carriers, fulfilment providers, analytics and advertising vendors, professional advisers, and technology or customer-support providers. Each receives information appropriate to its role. Customers of The Ordinary can refer to this rule whenever the stated conditions are met.

We may also disclose information to follow law, respond to valid legal process, protect rights and safety, or complete a business transaction. We do not promise that information is never shared; disclosures are limited by purpose and applicable obligations. The Ordinary applies this principle at the relevant stage of the online purchase journey.

Requests and marketing preferences

Depending on residence and applicable law, a customer may request access, correction, deletion, restriction, portability, or an appeal, and may object to or opt out of certain processing. Marketing messages include an unsubscribe method. Requests may be sent to Support@theordineryp.top, and we will respond within the legally required period after reasonable verification.

Cookie controls, remarketing, and conversion data

Cookies and similar technologies may keep the cart working, remember preferences, support security, measure performance, and help us understand store use. Browser settings can block or remove cookies, although essential shopping functions may then be limited. Questions about this point can be directed to The Ordinary using the verified details below.

The Ordinary may use Google Ads features where enabled, including remarketing and conversion tracking. These tools can use identifiers or cookies to measure whether advertising led to a visit or purchase and to show relevant ads. Google and other advertising partners handle information under their own notices and controls.

Sale, sharing, and California requests

California residents may have rights under the CCPA/CPRA to know, access, correct, delete, and obtain a portable copy of personal information, and to limit certain uses of sensitive information. They may also opt out of the sale or sharing of personal information for cross-context behavioural advertising. This statement reflects the current operating practice of The Ordinary.

To submit a Do Not Sell or Share request, email Support@theordineryp.top with the subject “Do Not Sell or Share,” or use the Contact Us page. We may verify identity and may ask an authorised agent for proof of authority. We will not unlawfully discriminate for exercising privacy rights.

Data concerning children

This storefront is not directed to children under 13, and we do not knowingly collect personal information from them. A parent or guardian who believes a child supplied information may contact us so the matter can be reviewed and appropriate deletion considered. The Ordinary records and handles the related request under this published policy.

Privacy office details

The Ordinary
Email: Support@theordineryp.top
Telephone: (563) 700-7447
Physical address: 24 Microwave Hill Rd, Clancy MT 59634, United States
Customer service: Monday to Friday, 9:00 AM–5:00 PM (America/Chicago time).

Please identify the product and order when writing to us.