* By subscribing, you agree to let us pop into your inbox occasionally with updates, cool tips, and exclusive deals. We hate spam as much as you do, so your details are safe with us. You can opt out anytime with just one click.
PRIVACY POLICY
[Last Updated: September 15, 2026]
This Privacy Policy forms part of our website’s Terms & Conditions and explains how Natasha Denona Makeup LLC collects, uses, shares and protects Personal Data under applicable laws, including the GDPR and CCPA.
California residents: please review our CCPA Notice. Residents of certain US States may have additional rights under Section 13.
1. POLICY AMENDMENTS
We may amend this Privacy Policy from time to time. The latest version and update date will be posted on the Website. We will provide notice of material changes and obtain consent where required by law.
2. CONTACT INFORMATION AND DATA CONTROLLER INFORMATION
Natasha Denona Makeup LLC, incorporated under New York law and part of the Natasha Denona Group, is the Data Controller or Business for the Personal Data covered by this Privacy Policy.
Contact our privacy team at wecare@natashadenona.com, or by mail at Natasha Denona Makeup LLC, 39 East 30th Street, New York, NY 10016, United States.
EU and UK representative: Natasha Denona Trading Ltd., Trident Park, Notabile Gardens, No. 2 – Level 3, Mdina Road, Zone 2, Central Business District, Bkara, CBD 2010 Malta, VAT#MT 2383-5112. Email: wecare@natashadenona.com.
3. THE TYPES OF DATA WE PROCESS, THE PURPOSES OF PROCESSING AND LAWFUL BASIS
We process Non-Personal Data, such as aggregated usage and technical information, and Personal Data that identifies or may reasonably identify an individual. We do not knowingly process Sensitive Data, including racial or ethnic origin, political opinions, religious beliefs, health data, genetic or biometric data, or information about sex life or sexual orientation.
| Type of Data | Purposes of Processing | Lawful Basis |
|---|---|---|
| Online Identifiers and Usage Data | Website operation, analytics, marketing, advertising, security, fraud prevention and service improvement. | Legitimate interest for operation and security; consent for analytics and advertising. |
| Location | Language preference and contextual advertising. | Legitimate interest or consent for marketing. |
| Contact Data | Responding to inquiries, support, service improvement, compliance and claims handling. | Legitimate interest. |
| Email & SMS Subscriptions | Newsletters, updates, marketing materials and opt-out management. | Consent and legitimate interest for suppression records. |
| Account Data | Account creation, authentication, access and direct marketing. | Contractual necessity and legitimate interest. |
| Order Placement and Orders Usage Data | Order processing, delivery, notices, bookkeeping, tax compliance, order-flow improvement and reminders. | Contract, legal requirements, legitimate interest and consent where applicable. |
| Customer Support | Handling inquiries, improving service, compliance and defending claims. | Contractual necessity and legitimate interests. |
| Pro Artist Program | Reviewing applications, communicating decisions, program services and permitted marketing. | Legitimate interest, contract if accepted and legitimate interest for marketing. |
| AI Chat Interaction Data | Operating the AI-powered chat assistant, answering questions about our brand, collections, products and website content, retaining browsing-session context, and improving the chat and website. | Consent for EU/UK users where required, and legitimate interest and consumer consent under applicable law. |
Processing may include collection, storage, use, disclosure by transmission, erasure and destruction. We may also process Personal Data to prevent fraud, misuse and illegal activity, protect our systems and enforce our terms.
4. HOW DO WE COLLECT YOUR PERSONAL DATA
- Automatically through cookies and similar technologies.
- When provided by you voluntarily through forms and communications.
- From third parties where permitted by law and with consent.
- Via the AI Chat Assistant. The assistant retains browsing-session context for relevant responses. Related interaction, usage and device data may be analyzed for analytics and website improvement. Please do not submit sensitive information, such as financial account numbers, government identification numbers or health information, through the assistant.
5. COOKIES AND TRACKING TECHNOLOGIES
We use cookies for navigation, statistical, analytic and advertising purposes. More information is available at www.allaboutcookies.org. Cookie categories include essential and security cookies, analytic and performance cookies, and preference, targeting and advertising cookies. Our Website recognizes GPC signals and will honor an enabled signal as applicable. More information is available at https://globalprivacycontrol.org/.
You may review the cookies we use, their third parties and purposes, and accept, reject or customize preferences by category through the cookie setting tool in the footer and the first-visit banner.
6. SHARING PERSONAL DATA WITH THIRD PARTIES
| Category | Data Shared | Purpose |
|---|---|---|
| The Natasha Denona Group | All types of Personal Data | Affiliate operations and legal or regulatory obligations. |
| Service providers | All types of Personal Data | Communications, payments, analytics, marketing, advertising, customer support, delivery and shipments. |
| Business acquirers | All types of Personal Data | Corporate transactions. |
| Security and enforcement recipients | All types of Personal Data | Enforcing agreements and addressing fraud, security and technical issues. |
| Legal and law enforcement | As requested by lawful authority | Verified legal or law-enforcement requests. |
| AI chat assistant service providers | AI Chat Interaction Data | Operating the chat assistant and analyzing its use for service improvement. |
Recipients may access only information necessary for their agreed functions and must secure it and comply with applicable data-protection regulations.
7. YOUR RIGHTS RELATED TO YOUR PERSONAL DATA
Depending on your jurisdiction, rights may include access, correction, deletion, restriction or objection, portability, contacting a supervisory authority and withdrawing consent. Use the Data Subject Request Form and send it to wecare@natashadenona.com. Customers can manage Account Data through account settings and unsubscribe from marketing emails.
8. DATA RETENTION
We retain Personal Data as long as necessary for the stated purposes and as required for legal, regulatory, tax, accounting, records or litigation needs.
9. DATA SECURITY
We use physical, technical and administrative security measures, including SSL encryption and access restrictions. Contact wecare@natashadenona.com about a privacy or security concern.
10. CROSS BORDER DATA TRANSFER
Personal Data may be processed in Israel, the UK, EU, US and other countries. We take appropriate measures to protect it, including standard contractual clauses where applicable.
11. THIRD PARTY WEBSITES
This Privacy Policy does not apply to third-party websites or services linked from our Website. We are not responsible for those sites or your use of them.
12. PROTECTING CHILDREN
Our Services and Products are not intended for individuals under 18, and we do not knowingly collect information about anyone under 18. Contact wecare@natashadenona.com if you believe a child has shared information with us.
13. REGIONAL US PRIVACY NOTICE
General Applicability and Jurisdictions
This section applies to residents of Connecticut, Utah, Virginia, Colorado, Texas and Oregon under applicable state privacy laws. California residents should review our CCPA Notice. Nevada residents should review the disclosure below.
The Personal Information We Process
Depending on your interaction, Personal Data may include online identifiers, geolocation, contact information, newsletter registration information, Account Data, Order Placement Data, Order Usage Data, Customer Support data, affiliate-program data and AI Chat Interaction Data. We do not collect, process or use Sensitive Data from website users and visitors.
Sharing and Privacy Rights
We do not sell personal information for profit, although targeted advertising may be considered a sale or share under some US Privacy Laws. Depending on your state, you may have rights to access, correct, delete and port Personal Data, opt out of sale or targeted advertising, and avoid discrimination. Submit requests through the DSR form. We do not profile you.
For interest-based advertising opt-out options, visit the Digital Advertising Alliance (US), Digital Advertising Alliance (Canada), Digital Advertising Alliance (EU) or the Network Advertising Initiative.
Appeal Rights
Depending on your state, you may appeal a privacy-rights decision by contacting wecare@natashadenona.com. We will respond within 60 days. You may also contact the relevant State Attorney General.
Additional Information for Nevada Residents
Nevada residents may submit a verified request to opt out of sales using the DSR and sending it to wecare@natashadenona.com. We currently do not sell personal information as defined by Nevada law.
Notice Amendments
We will update this Privacy Policy at least every 12 months subject to applicable US State Laws.