Privacy Policy

Effective date: set on store launch day · Last updated: 14 June 2026

This policy explains how NUCLEORA SKINCARE INC. handles personal information. It is written to comply with Canada's PIPEDA and Quebec's Law 25.

1. Who we are

NUCLEORA SKINCARE INC. ("NUCLEORA", "we", "us") is a British Columbia corporation at 2155 Emerson St, Abbotsford, BC V2T 3H8, Canada. We are the party responsible for the personal information you provide to us. Our Privacy Officer (Quebec Law 25, s. 3.1) can be reached at privacy@nucleoraskin.com.

Pre-launch (waitlist) note: until our online store opens, the only personal information we collect is the email address you give the waitlist form, plus standard site-usage and analytics data. The order, payment, and shipping information described below applies once the store opens.

2. What information we collect

• Identity & contact: email address; and, once the store opens, name, shipping/billing address, and phone (if provided).
• Marketing preferences: your email opt-in status and the consent record (timestamp, IP, source).
• Site usage: IP address, browser/device, pages viewed, referral source, and cookies (see section 5).
• Order data (at store open): products ordered and order history. We do not store full payment-card numbers — Shopify Payments / Stripe handle those.
• Communications: emails, support messages, and adverse-event reports sent to safety@nucleoraskin.com.

We do not knowingly collect information from individuals under 16.

3. Why we collect it

• To send you the pre-launch and launch emails you signed up for (with your consent).
• To understand where our visitors come from and improve the site.
• To process and fulfil orders, and provide support (at store open).
• To respond to adverse-event reports and meet Health Canada record-keeping obligations.
• To detect and prevent fraud, and to meet legal record-keeping obligations.

4. Your consent

We collect your email only with your express opt-in (an unchecked box you tick). Analytics and advertising cookies are off by default and load only if you accept them on our cookie banner; declining changes nothing about how the page works. You can withdraw email consent at any time using the one-click unsubscribe link in every email.

5. Cookies and tracking

• Essential (session/security) — no consent required.
• Analytics (Google Analytics 4) — consent required; off until you accept.
• Advertising (Meta Pixel, TikTok Pixel) — consent required; off until you accept.

Per Quebec Law 25, tracking and profiling technologies are deactivated by default until you actively consent.

6. Who we share it with (processors)

We use trusted service providers, each bound by a data-processing agreement, who may store data in the United States: Shopify (website hosting now; e-commerce + payments at store open), Klaviyo (email marketing + waitlist sign-ups), Google (GA4 analytics, consent-gated), Meta / TikTok (advertising pixels, consent-gated), Stripe (payment processing, at store open), and shipping carriers (at store open). We do not sell or rent your personal information.

7. Transfers outside Quebec / Canada

Some processors above store or process data in the United States. The information involved at the waitlist stage is low-sensitivity contact and analytics data; each provider is bound by contractual safeguards. This is disclosed here in accordance with Law 25, s. 17.

8. How long we keep it

• Marketing subscriber data: until you withdraw consent.
• Site analytics: up to 26 months (or shorter).
• Order, tax, and adverse-event records (at store open): 6 years, as Canadian law requires.

9. Your rights

Under PIPEDA and Quebec Law 25 you may: access your personal information; correct it; request its deletion or portability; and withdraw consent. To exercise these rights, email privacy@nucleoraskin.com; we respond within 30 days. You may also complain to the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec.

10. Security

We use industry-standard safeguards: encrypted transmission (TLS), encryption at our providers, two-factor authentication on our accounts, and least-privilege access. We do not store customer personal information on personal devices.

11. Children

This site is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe we have, contact privacy@nucleoraskin.com.

12. Changes

We may update this policy and will revise the "Last updated" date. Material changes are communicated to active subscribers by email.

13. Contact

Privacy Officer · privacy@nucleoraskin.com
Adverse events / product safety: safety@nucleoraskin.com
NUCLEORA SKINCARE INC., 2155 Emerson St, Abbotsford, BC V2T 3H8, Canada

A French-language version of this policy is published before the store is reachable by Quebec residents.