Privacy Policy

Last updated: August 28, 2026

ELLYRA respects your privacy and is committed to protecting your personal information.

This Privacy Policy describes how DERMAWAVE LLC, doing business as ELLYRA (“ELLYRA,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you visit our website, make a purchase, communicate with us, or otherwise interact with our services.

Our online store is powered by Shopify.

By using our website or services, you acknowledge the practices described in this Privacy Policy.

1. Personal Information We Collect

Depending on how you interact with ELLYRA, we may collect the following categories of personal information.

Contact Information

This may include:

• Name
• Email address
• Telephone number
• Billing address
• Shipping address

Order and Transaction Information

This may include:

• Products purchased
• Order history
• Order number
• Shipping information
• Returns and refund information
• Transaction details

Payment Information

Payments are processed through Shopify and/or third-party payment providers.

Depending on the payment method you select, payment providers may process information such as:

• Credit or debit card information
• Billing information
• Payment authorization details
• Digital wallet information

ELLYRA does not necessarily receive or store complete payment card numbers.

Account Information

If you create an account, we may collect information associated with your customer profile, such as:

• Name
• Email address
• Order history
• Saved addresses
• Account preferences

Customer Support Information

When you contact us through email, WhatsApp, contact forms, social media, or other support channels, we may collect the information you provide to us, including messages, photographs, videos, order details, and other information needed to respond to your request.

Device and Usage Information

When you visit our website, certain information may be collected automatically, including:

• IP address
• Browser type
• Device type
• Operating system
• Pages viewed
• Referring URLs
• Interaction with our website
• Approximate location
• Shopping and browsing activity

This information may be collected through cookies, pixels, tags, analytics tools, and similar technologies.

2. How We Collect Personal Information

We may collect personal information:

• Directly from you
• Automatically when you use our website
• Through Shopify
• From payment processors
• From shipping and fulfillment providers
• From analytics and advertising partners
• From customer support platforms
• From marketing platforms
• From other service providers that support our business operations

3. How We Use Personal Information

We may use personal information to:

Process and Fulfill Orders

Including to:

• Process purchases
• Confirm orders
• Process payments
• Arrange shipping
• Provide tracking information
• Manage returns, exchanges, and refunds

Provide Customer Support

Including responding to questions about:

• Products
• Orders
• Shipping
• Returns
• Warranties
• Payments
• Account issues

Operate and Improve ELLYRA

We may use information to:

• Operate our website
• Improve website performance
• Understand how customers use our store
• Develop and improve products and services
• Improve the customer experience
• Analyze business performance

Personalize Your Experience

Where permitted, we may use information to personalize:

• Product recommendations
• Website content
• Offers
• Advertising
• Marketing communications

Marketing and Advertising

Where permitted by applicable law and based on your preferences, we may use your information to send or display:

• Email marketing
• Promotional offers
• Product launches
• ELLYRA news
• Abandoned cart reminders
• Personalized advertising

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in our emails.

Security and Fraud Prevention

We may use personal information to:

• Detect fraudulent transactions
• Prevent misuse of our services
• Protect our customers
• Protect our business
• Maintain website and payment security

Legal and Compliance Purposes

We may process personal information where necessary to:

• Comply with applicable laws
• Respond to lawful requests
• Enforce our agreements
• Protect our legal rights
• Resolve disputes
• Meet tax, accounting, and regulatory obligations

4. Shopify

Our store is hosted by Shopify, which provides the e-commerce platform that allows us to offer our products and services to you.

Shopify processes certain personal information in connection with your use of our store.

Depending on the features enabled on our store, Shopify may process information to provide services such as checkout, fraud prevention, analytics, personalization, advertising, and other commerce functionality.

You can learn more about Shopify's privacy practices through Shopify's Consumer Privacy Policy.

Shopify also provides merchants with privacy tools including cookie consent controls and data-sharing opt-out functionality.

5. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags, local storage, and similar technologies.

These technologies may be used to:

• Keep the website functioning properly
• Remember your preferences
• Maintain your shopping cart
• Understand website traffic
• Measure website performance
• Analyze customer behavior
• Measure advertising effectiveness
• Personalize content
• Deliver relevant advertising
• Prevent fraud

Some cookies are essential to the operation of the website, while others may be used for analytics, personalization, or advertising.

Where required by applicable law, we will request your consent before using certain non-essential cookies or similar technologies.

You may also be able to manage your cookie preferences through the privacy controls available on our website.

6. Advertising and Analytics

We may work with advertising, analytics, and marketing providers to understand how visitors interact with ELLYRA and to measure and improve our marketing.

Depending on the technologies enabled on our store, these providers may receive information about your interaction with our website.

Such technologies may include services from companies such as:

• Shopify
• Google
• Meta
• TikTok
• Email or SMS marketing providers
• Analytics providers

[VERIFY: retain only the platforms actually used by ELLYRA.]

Under certain privacy laws, some forms of targeted advertising or disclosure of information to advertising partners may be considered a “sale,” “sharing,” or targeted advertising even when no money is exchanged.

Where required, we provide customers with applicable privacy choices and opt-out mechanisms.

7. How We Share Personal Information

We may disclose personal information to third parties where reasonably necessary to operate ELLYRA.

These parties may include:

Shopify

For hosting, checkout, commerce functionality, analytics, security, and related services.

Payment Providers

To authorize and process payments.

Shipping and Fulfillment Providers

To prepare, ship, deliver, and track customer orders.

Customer Support Providers

To assist with customer service and communications.

Marketing and Analytics Providers

To measure website performance, understand customer activity, and conduct marketing where permitted.

Professional Advisers

Including accountants, attorneys, insurers, auditors, and other professional advisers where necessary.

Government and Legal Authorities

Where disclosure is required by law or reasonably necessary to protect our rights, customers, or business.

Business Transactions

Personal information may be transferred as part of a merger, acquisition, financing, restructuring, sale of assets, or similar corporate transaction.

We do not authorize third-party service providers to use customer information for unrelated purposes except as permitted or required by applicable law and their respective agreements.

8. International Data Transfers

ELLYRA serves customers internationally, including customers in the United States, Canada, Australia, and New Zealand.

As a result, your personal information may be processed, transferred, or stored outside your country of residence, including in countries where our service providers operate.

Privacy and data protection laws in those countries may differ from those in your jurisdiction.

Where required by applicable law, we take appropriate steps in connection with international transfers of personal information.

This disclosure is particularly important for Australian customers because Australian privacy guidance requires covered organizations to address likely overseas disclosure in their privacy policies where applicable.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Complete transactions
• Maintain customer records
• Provide support
• Meet warranty obligations
• Prevent fraud
• Resolve disputes
• Comply with tax, accounting, legal, and regulatory requirements

Retention periods may vary depending on the type of information and applicable legal requirements.

When information is no longer required, we may delete, anonymize, or otherwise securely dispose of it as appropriate.

10. Security

We take reasonable administrative, organizational, and technical measures designed to protect personal information against unauthorized access, misuse, loss, alteration, or disclosure.

However, no internet transmission, electronic storage system, or security method can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of any account credentials associated with your ELLYRA account.

11. Your Privacy Rights

Depending on where you live and applicable law, you may have certain rights regarding your personal information.

These may include the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate information
• Request deletion of certain personal information
• Withdraw consent where processing is based on consent
• Object to or restrict certain processing
• Opt out of certain targeted advertising
• Opt out of certain sales or sharing of personal information
• Request information about how your data is processed
• Obtain a copy of certain personal information
• Lodge a privacy complaint
• Appeal certain privacy-related decisions where applicable

We will not unlawfully discriminate against you for exercising applicable privacy rights.

To submit a privacy request, contact:

contact@ellyralabs.com

We may need to verify your identity before processing certain requests.

12. United States Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws.

For example, where applicable, California consumers may have rights concerning access, deletion, correction, and certain sales or sharing of personal information.

California privacy regulations also contemplate disclosure of categories of personal information collected, sources, purposes, and categories of information sold, shared, or disclosed where applicable.

If applicable to our business practices, customers may use the privacy controls available on our website to opt out of certain data sharing or targeted advertising.

[VERIFY: activate Shopify's Data Sharing Opt-Out Page if required for the store.]

13. Canadian Privacy Rights

Canadian customers may have privacy rights under applicable federal or provincial privacy legislation.

Where applicable, you may request access to or correction of personal information and withdraw certain consent, subject to legal exceptions.

Canada's Office of the Privacy Commissioner emphasizes accountability, meaningful consent, appropriate collection and safeguards as key responsibilities for businesses subject to PIPEDA.

14. Australian Privacy Rights

Where the Australian Privacy Act 1988 and Australian Privacy Principles apply, customers may have rights relating to access, correction, transparency, and the handling of personal information.

The Australian Privacy Principles address the collection, use, disclosure, security, access, and correction of personal information.

If you have a concern about how we have handled your personal information, please contact us using the information provided below so we can investigate your request.

15. New Zealand Privacy Rights

Customers in New Zealand may have rights regarding access to and correction of personal information under applicable New Zealand privacy law.

Where applicable, we will respond to privacy requests in accordance with applicable legal requirements.

16. Marketing Communications

If you subscribe to ELLYRA marketing communications, we may send you information about:

• New products
• Product launches
• Beauty technology
• Special offers
• Promotions
• ELLYRA news and updates

You may unsubscribe from marketing emails at any time by clicking the Unsubscribe link in the email.

Unsubscribing from marketing communications will not prevent us from sending transactional communications necessary to manage your purchases, such as:

• Order confirmations
• Shipping notifications
• Tracking updates
• Refund information
• Customer service communications

17. Children's Privacy

ELLYRA's products and services are not directed to children.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe a child has provided personal information to us without appropriate authorization, please contact us so we can review and, where appropriate, delete the information.

18. Third-Party Websites

Our website may contain links to third-party websites, platforms, or services.

ELLYRA is not responsible for the privacy, security, or content practices of third-party websites.

We encourage you to review the privacy policies of third-party services before providing personal information to them.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to our business
• Changes to our services
• Changes to technology
• Changes to our privacy practices
• Legal or regulatory requirements

When we update this policy, we will revise the Last updated date at the top of this page.

Where required by law, we may provide additional notice regarding material changes.

20. Privacy Complaints

If you have questions or concerns about how ELLYRA handles your personal information, please contact us first.

We will review privacy complaints and respond as appropriate based on the circumstances and applicable law.

Nothing in this Privacy Policy limits any rights you may have to contact or lodge a complaint with an applicable privacy or data protection authority.

21. Contact Us

For questions about this Privacy Policy, privacy requests, or concerns about your personal information, contact:

ELLYRA
Operated by DERMAWAVE LLC

Email: contact@ellyralabs.com
Phone / WhatsApp: +1 (332) 231-7392

Business Address:
500 4th St NW, Ste 102
Albuquerque, NM 87102
United States