Open menu Close menu

Privacy policy

Privacy Policy

Ponce Aurora, Inc. (parent company of YUUTH Skincare)


Effective Date: August 26, 2026 Last Updated: August 26, 2026


 

 

1. Introduction

Ponce Aurora, Inc. ("Ponce Aurora," "we," "us," or "our") is the parent company of YUUTH Skincare and operates the YUUTH Skincare brand, websites, mobile experiences, and related services (collectively, the "Services").


We respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy explains what information we collect, how we use and store it, who we share it with, and the rights and choices available to you — including rights under the EU/UK General Data Protection Regulation (GDPR) and applicable U.S. privacy laws.


Please read this policy carefully. By using our Services, you acknowledge that you have read and understood it.


 

 

2. Who We Are (Data Controller)

For the purposes of the GDPR, the data controller responsible for your personal data is:


Ponce Aurora, Inc. 51-36 35th St Long Island City, NY 11101United States

 


General Email: care@yuuth.com


Data Protection Officer / EU & UK Representative: Jill Tierney care@yuuth.com


 

 

3. Scope of This Policy

This policy applies to personal data we collect:


  • Through our websites and online stores;

  • When you create an account, place an order, or contact customer support;

  • When you sign up for marketing communications, promotions, loyalty programs, or our skin-profile quiz;

  • Through cookies and similar technologies; and

  • From third parties such as payment processors, shipping partners, and advertising platforms.


This policy does not apply to third-party websites, products, or services that we do not own or control, even if they link to or from our Services.


 

 

4. Information We Collect

4.1 Information You Provide to Us

  • Identity and contact data: name, billing and shipping address, email address, phone number.

  • Account data: username, password, purchase history, saved preferences, wish lists.

  • Order and transaction data: products purchased, order value, and payment confirmation. (Full payment card numbers are processed by our payment providers and are not stored by us — see Section 8.)

  • Skin-profile and product-preference data: responses to skincare quizzes, product interests, skin type, and concerns you voluntarily share so we can recommend products.

  • Communications: messages you send us via email, chat, contact forms, reviews, or social media.

  • Marketing and consent data: your preferences for receiving marketing and your consent records.

4.2 Information We Collect Automatically

  • Device and technical data: IP address, browser type, operating system, device identifiers, and language settings.

  • Usage data: pages viewed, links clicked, time spent, referring URLs, and other interactions with our Services.

  • Cookie and tracking data: as described in Section 7.

4.3 Information From Third Parties

  • Payment processors (e.g., transaction confirmations).

  • Shipping and logistics providers (e.g., delivery status).

  • Analytics and advertising partners (e.g., aggregated audience data).

  • Social media platforms, if you interact with us or log in through them.


Note on special category data: Certain skin-condition information could, depending on context, be considered health-related. Where any special category data (GDPR Art. 9) is processed, we do so only with your explicit consent or another valid legal basis, and only to the extent necessary to provide the service you request. [Confirm with legal counsel whether your quiz collects special category data.]


 

 

5. How We Use Your Information

We use personal data to:


  • Process and fulfill orders, payments, returns, and refunds;

  • Create and manage your account;

  • Provide personalized product recommendations (including via the skin-profile quiz);

  • Communicate with you about orders, service updates, and customer support;

  • Send marketing communications where permitted (see Section 9);

  • Operate, improve, and secure our Services;

  • Conduct analytics and measure the effectiveness of our marketing;

  • Prevent fraud and ensure the safety and integrity of our Services; and

  • Comply with legal, tax, and regulatory obligations.


 

 

6. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases under Article 6 of the GDPR:


Purpose

Legal Basis

Fulfilling your orders and providing the Services

Contract (Art. 6(1)(b))

Sending marketing emails and personalized recommendations

Consent (Art. 6(1)(a))

Analytics, service improvement, fraud prevention, and security

Legitimate interests (Art. 6(1)(f))

Meeting legal, tax, and regulatory requirements

Legal obligation (Art. 6(1)(c))

Processing any special category (e.g., skin/health) data

Explicit consent (Art. 9(2)(a))


Where we rely on consent, you may withdraw it at any time (see Section 11). Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms, and you may object at any time.


 

 

7. Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to operate our Services, remember your preferences, analyze traffic, and deliver relevant advertising.


  • Strictly necessary cookies are required for the Services to function.

  • Analytics and performance cookies help us understand how the Services are used.

  • Advertising and targeting cookies support personalized marketing.


Where required by law, we obtain your consent before setting non-essential cookies, and you can manage your preferences through our cookie banner or your browser settings. For more detail, see our [Cookie Policy / link], if applicable.


 

 

8. How and Where We Store Your Data

8.1 Storage Locations

Your personal data is stored on secure servers operated by us and/or our trusted service providers (for example, cloud hosting, e-commerce, and payment platforms). These providers may store data in [INSERT PRIMARY STORAGE REGION(S), e.g., the United States and/or the European Union].

8.2 Payment Data

We do not store full payment card details. Payments are processed by PCI-DSS-compliant third-party providers such as [INSERT PAYMENT PROCESSOR, e.g., Stripe / Shopify Payments / PayPal]. We receive only limited transaction confirmation data.

8.3 Security Measures

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration, including:


  • Encryption of data in transit (TLS/SSL) and, where appropriate, at rest;

  • Access controls limiting data access to authorized personnel on a need-to-know basis;

  • Secure, access-controlled hosting environments;

  • Regular security reviews and monitoring; and

  • Contractual data protection commitments from our service providers.


No method of transmission or storage is 100% secure, so we cannot guarantee absolute security, but we work continuously to protect your information.

8.4 Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, including to satisfy legal, accounting, tax, or reporting requirements. Illustrative retention periods:


Data Category

Retention Period

Order and transaction records

10 Years

Account data

For the life of your account, then 24 months after closure

Marketing consent and preferences

Until you unsubscribe or withdraw consent, plus a short record-keeping period

Skin-profile / quiz data

10 Years

Website analytics data

10 Years


When personal data is no longer needed, we securely delete or anonymize it. 

 

 

9. Marketing Communications

Where you have consented (or where otherwise permitted by law), we may send you marketing emails about products, offers, and updates. You can opt out at any time by:


  • Clicking the "unsubscribe" link in any marketing email; or

  • Contacting us at care@yuuth.com 


Opting out of marketing does not affect service-related messages (such as order confirmations).


 

 

10. How We Share Your Information

We do not sell your personal data for money. We may share personal data with:


  • Service providers who process data on our behalf (hosting, payments, shipping, analytics, customer support, marketing) under contracts that require them to protect your data;

  • Advertising and analytics partners, subject to your cookie choices and applicable law;

  • Professional advisors (lawyers, accountants, auditors);

  • Authorities and regulators where required by law or to protect our rights; and

  • A successor entity in the event of a merger, acquisition, financing, or sale of assets.


U.S. state privacy laws: Certain sharing for cross-context behavioral advertising may be considered a "sale" or "sharing" under laws such as the California Consumer Privacy Act (CCPA/CPRA). See Section 13 for U.S. rights and how to opt out.


 

 

11. International Data Transfers

Because we operate internationally, your personal data may be transferred to and processed in countries outside your own, including the United States, which may have different data protection laws.


When we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards, such as:


  • The European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum;

  • Transfers to countries with an adequacy decision; and/or

  • Other lawful transfer mechanisms.


You may request a copy of the relevant safeguards by contacting us at [INSERT EMAIL].


 

 

12. Your Rights Under the GDPR

If you are in the EEA or the UK, you have the following rights regarding your personal data:


  • Right of access — obtain confirmation that we process your data and a copy of it.

  • Right to rectification — correct inaccurate or incomplete data.

  • Right to erasure ("right to be forgotten") — request deletion in certain circumstances.

  • Right to restriction — limit how we process your data in certain circumstances.

  • Right to data portability — receive your data in a structured, commonly used, machine-readable format.

  • Right to object — object to processing based on legitimate interests or to direct marketing.

  • Right to withdraw consent — where we rely on consent, withdraw it at any time without affecting prior lawful processing.

  • Right to lodge a complaint — with your local data protection supervisory authority.


To exercise any of these rights, contact us at [INSERT EMAIL]. We will respond within the timeframe required by law (generally one month under the GDPR). We may need to verify your identity before fulfilling your request. Exercising your rights is free of charge in most cases.


If you are in the EEA, you can find your supervisory authority via the European Data Protection Board. If you are in the UK, you may contact the Information Commissioner's Office (ICO) at ico.org.uk.


 

 

13. U.S. State Privacy Rights

Depending on your state of residence (e.g., California, Virginia, Colorado, Connecticut, and others), you may have rights to:


  • Know and access the personal information we collect about you;

  • Correct inaccurate personal information;

  • Delete your personal information;

  • Opt out of the "sale" or "sharing" of personal information and of targeted advertising; and

  • Not be discriminated against for exercising these rights.


To exercise these rights, contact us at [INSERT EMAIL] or use [INSERT "Do Not Sell or Share My Personal Information" link/mechanism, if applicable]. We will not discriminate against you for exercising your rights.


 

 

14. Children's Privacy

Our Services are not directed to children, and we do not knowingly collect personal data from children under [16 / the applicable age of consent in your jurisdiction]. If you believe a child has provided us with personal data, please contact us so we can delete it.


 

 

15. Third-Party Links

Our Services may contain links to third-party websites, plug-ins, or applications. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.


 

 

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date above and, where required, notify you by email or through a notice on our Services. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.


 

 

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:


Ponce Aurora, Inc. 51-36 35th St Long Island City, NY 11101United States

Email: care@yuuth.com