Privacy Policy

Information We Collect

CeraVe collects information that you provide directly when you browse our store, place an order, request support, subscribe to updates, or otherwise communicate with us. This may include your name, billing and shipping address, email address, telephone number, payment confirmation details, order history, support messages, product preferences, and any other information you choose to provide.

We also collect information automatically from your device and browser, including IP address, device identifiers, browser type, pages viewed, referring URLs, approximate location, cart activity, checkout activity, and information collected through cookies, pixels, tags, server logs, and similar technologies. If you make a purchase, payment card data is processed by Shopify and payment providers; we receive confirmation and transaction information needed to fulfill the order.

How We Use Your Information

We use personal information to operate the store, process orders, deliver products, provide customer service, send transactional messages, prevent fraud, maintain security, improve products and services, personalize content, measure marketing performance, comply with law, enforce our policies, and manage business records.

We may use your email address to respond to support requests and to send order, shipping, refund, and account-related communications. Marketing messages, where offered, are sent only as permitted by law and may be opted out of through the unsubscribe mechanism or by contacting support@ceearva.shop.

Cookies & Tracking Technologies

Strictly Necessary cookies are required for core store functions such as cart, checkout, security, fraud prevention, accessibility, and session management. These cannot be disabled through our site because the store may not work without them, but you can configure your browser to block cookies, which may prevent checkout or other features from functioning.

Analytics cookies help us understand traffic, product interest, page performance, and errors. You can limit analytics cookies through browser controls, consent tools where available, and industry opt-out tools. We recognize Global Privacy Control (GPC) signals where required by applicable law.

Advertising cookies and pixels help us measure campaigns, build audiences, and show more relevant ads. You can adjust Google advertising preferences at https://adssettings.google.com and use the Network Advertising Initiative opt-out page at https://optout.networkadvertising.org. You may also send a GPC signal from a supported browser or extension to indicate an opt-out preference where legally required.

Google Advertising & Conversion Tracking

CeraVe may use Google Ads, Google Analytics 4 (GA4), conversion tags, enhanced conversions, and related measurement tools to understand how visitors interact with our store and ads. These tools may collect device, browser, interaction, purchase, and conversion data, and they may use cookies or similar technologies.

We may share conversion and event data with Google for advertising measurement, attribution, fraud prevention, campaign optimization, and reporting, subject to Google's data processing and data sharing terms. You can manage Google ad personalization through https://adssettings.google.com and can use browser or platform privacy settings to limit tracking.

Sharing Your Information

We share information with service providers that help us run the store, including Shopify, payment processors, shipping providers, analytics providers, advertising partners, fraud prevention vendors, customer support tools, hosting providers, and professional advisers. These parties may process information only as needed to provide services to us or as otherwise permitted by law.

We may disclose information if required by law, subpoena, court order, government request, or to protect rights, safety, property, customers, our business, or others. We may also transfer information as part of a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.

Your CCPA Rights

California residents and residents of certain other states may have privacy rights, including the right to Know, Delete, Correct, Opt-Out of Sale or Sharing, and Non-Discrimination for exercising privacy rights. To submit a request, contact support@ceearva.shop with the subject line "Do Not Sell" or the specific right you want to exercise.

We do not sell personal information for money. Like many online stores, we may share personal information with advertising and analytics partners in ways that may be considered a sale, sharing, or targeted advertising under some privacy laws. We recognize Global Privacy Control (GPC) signals where legally required and will treat such signals as an opt-out request for the browser or device sending the signal.

We may need to verify your identity before completing a request. Authorized agents may submit requests where permitted by law, and we may request proof of authorization.

Other Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, opt out of targeted advertising, withdraw consent, or appeal a privacy decision. You may exercise these rights by contacting support@ceearva.shop. We will respond within the period required by applicable law.

Legal Basis for Processing

Where a legal basis is required, we process personal information to perform a contract with you, comply with legal obligations, pursue legitimate interests such as security, customer service, analytics, and business operations, and with consent where required for marketing, cookies, or similar technologies.

Data Retention

We retain personal information for as long as needed to provide services, complete transactions, maintain records, resolve disputes, prevent fraud, comply with legal obligations, and enforce agreements. Retention periods vary by data type, order history, tax requirements, support needs, and legal requirements.

Children's Privacy

CeraVe is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13 as described by COPPA. If you believe a child under 13 has provided personal information, contact support@ceearva.shop and we will take appropriate steps to delete it.

International Transfers

We operate for customers in the United States, but service providers may process information in the United States and other countries. These countries may have privacy laws different from those in your location. Where required, we use appropriate safeguards for international transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised Last Updated date. Continued use of the store after an update means the revised policy applies to future interactions.

Contact

For privacy questions or requests, contact L'Oréal USA S/D, Inc., 10 Hudson Yards, 501 West 30 Street, New York, NY 10001, at support@ceearva.shop. Please include enough information for us to review and respond to your request.

Last Updated: June 16, 2026