Privacy Policy

Effective September 2, 2025

This privacy policy (“Privacy Policy”) describes how Particle Aesthetic Science Ltd. (“Particle”, “we”, “our”, or “us”) collects uses, shares, and protects personal information when you interact with us, including through our website and emails (the “Services”).

Please note that this Privacy Policy does not apply to non-Particle websites or services that state that they are offered under a different privacy policy. Please review the privacy policies on those websites and applications directly to understand their privacy practices.

For questions about our privacy practices, please email us at [email protected].

For more information about how we collect and use consumer health data, please see our Consumer Health Data Policy.

1. THE INFORMATION WE COLLECT

Depending on the nature of your interaction with Particle, we may collect personal information as follows:

Directly from you, when you provide information to us or interact with us:
- Account information, including your name, email address, selected password, and other information included in your account.
- Contact information, including your name, telephone number, email address, mailing address, and any other information you choose to include when you communicate with us via email, mail, phone, or other channels, including social media.
- Survey information in response to questions we may send you, surveys filled out on our website, including for feedback and research purposes.
- Transactional information, including payment information and payment history if you make a purchase.
- Health and allergy information, including information you voluntarily provide to us about allergies and other health-related conditions.
- Any additional information you choose to provide through any means, including questions, suggestions, feedback, photos, videos, and reviews.
Automatically from you, device information and online user activity when you utilize our Services, as described in the next section.
From third parties, information about the marketing and advertisements you have seen or clicked on, from online advertising companies.

Some of this information may be collected by external parties on our behalf. For example, we use various payment processors and payment systems when you engage in a transaction on our website; Particle does not itself collect or store payment card information. We also use cloud service providers (such as Google Drive), and other trusted vendors to store and process information on our behalf.

COOKIES AND INFORMATION COLLECTED BY AUTOMATED MEANS

When you interact with our Services, certain information about you is automatically collected via cookies. We use cookies to improve user experience, advertise our Services, and ensure the security of our Services. For example, we use cookies to monitor your actions on our website, including when you add items to our cart. This allows us to understand your preferences, improve your shopping experience, and send you reminders about items in your cart. As you use our Services, the following information is automatically collected from you via cookies:

Usage details about your interaction with our Services, such as which pages you access, frequency of access, what you click on, search terms, date and length of visits, and referring website addresses.
Device information, including the IP address and other details of a device that you use to connect with our Services, such as device type and unique device identifier, hardware model, operating system, browser, mobile network information, mobile carrier, and the device’s telephone number.
Location information where you choose to provide us with access to information about your device’s location.
Site usage and session information, including the details of your visits to our Services and information generated in the course of using our Services, such as mouse movements, clicks, page visits, text entered, how long you spent on a page, and other details of your actions on our Services.

These cookies may be operated by our partners who assist us in collecting information about usage of the Services, serving ads, or providing other services.

For example, we use Google Analytics to conduct analytics and collect usage details. You can learn more about Google Analytics here and prevent your data from being collected and used by Google Analytics through the Google Analytics Opt-out Browser Add-on. We also use Google Ads and Facebook Pixel to customize our advertising and to serve you ads based on your browsing behavior. These partners use cookies to serve you ads based on your prior visits to our Services and other websites on the internet. These cookies allow your behavior to be tracked after you have been redirected to our Services by clicking on an ad. You can learn more about Google Ads here and Facebook Pixel here. You can opt-out of personalized advertising by visiting Google Ad Settings and Facebook Ad Settings.

Please note we may also use cookies set by other third-party services. You may use your browser settings to turn off certain cookies. Please note that doing so may inhibit the normal functionality of certain features of our website or our Services.

HOW WE USE YOUR INFORMATION

We use the personal information we collect from you to:

Provide our Services to you, including to create and manage your account and fulfill and manage orders, deliveries, and returns.
Respond to your requests and questions, communicate with you, provide troubleshooting and other customer support, provide important notices, and send you information on products and services that may be of interest to you.
Manage, maintain, and operate the Services, diagnose or fix technology problems, monitor the performance of the Services, and understand how you access and use the Services.
Improve the Services and grow our business, better understand our customer base, administer surveys for market research and customer satisfaction purposes, and develop new products and services.
Design and administer marketing and promotional campaigns and evaluate the effectiveness of these campaigns.
Comply with legal and regulatory requirements (including reporting certain information to regulatory authorities such as the U.S. Food and Drug Administration (FDA) or other public health organizations, when required), defend against legal claims or other demands, respond to subpoenas, court orders, or other legal processes or requests, engage in risk management and compliance activities, protect the rights of Particle, you, or others, and detect, investigate, and prevent activities that may violate our policies or be fraudulent or illegal.

We may use and share information in an aggregated or de-identified manner at our discretion, including for research, analysis, modeling, marketing, and improvement of our Services.

HOW WE SHARE YOUR INFORMATION

We may share the information we collect in the following instances:

With service providers that we believe need the information to perform a technology, business, or other professional function for us such as IT services, fraud detection and prevention, payment processors, shipping services, accounting, auditing, tax services, and other professional services.
With advertising partners who assist us in serving advertising regarding the Services to others who may be interested in the Services. These third parties may use tracking technologies to collect or receive information from the Services and elsewhere on the internet and use that information to provide measurement services and target ads. These advertising partners may allow other companies to access information about you so that they may market other products you may be interested in. You may be able to prevent third parties from using your information for interest-based advertisements across the internet by visiting http://www.networkadvertising.org or http://www.aboutads.info. Please note this does not opt you out of being served ads, nor will it prevent the receipt of interest-based advertising from other companies that do not participate in these programs.
With entities in our corporate family, for purposes consistent with this Privacy Policy, to carry out our business activities, and to the extent permitted by law.
With social media platforms, information about you and your interaction with us. If you interact with social media objects on our Services, both the platform and your connections on the platform may be able to view that activity. To control this sharing of information, please review the privacy policy of the relevant social media platform.
When a corporate event occurs, we reserve the right to transfer to another entity or its affiliates or service providers some or all information about you in connection with, or during negotiations of, any merger, acquisition, sale of assets or any line of business, change in ownership control, or financing transaction. We cannot promise that an acquiring party or the merged entity will have the same privacy practices or treat your information the same as described in this Privacy Policy.
For legal purposes, where necessary to comply with the law, in response to court orders, law enforcement or legal process, including for national security purposes, to establish, protect, or exercise our legal rights, as required to enforce our terms of use or other contracts, to defend against legal claims or demands, or to detect, investigate, prevent, or take action against illegal activities, fraud, or situations involving potential threats to the rights, property, or personal safety of any person.

HOW WE PROTECT AND STORE YOUR INFORMATION

We use a combination of physical, technical, and administrative safeguards to protect the information we collect through the Services. While we use these precautions to safeguard your information, we cannot guarantee the security of the networks, systems, servers, devices, and databases we operate or that are operated on our behalf. You understand that we may collect, process, and store your personal information in the United States and other countries.

RETENTION OF YOUR PERSONAL INFORMATION

We will retain your personal information for as long as necessary to complete the purposes for which it was collected, or may be required by law.

We utilize the following criteria to determine the length of time for which we retain information:

The business purposes for which the information is used, and the length of time for which the information is required to achieve those purposes;
Whether we are required to retain the information type in order to comply with legal obligations or contractual commitments, to defend against potential legal claims, or as otherwise necessary to investigate theft or other activities potentially in violation of our policies and procedures applicable to you or against the law, to ensure a secure online environment, or to protect health and safety;
The privacy impact of ongoing retention on you; and
The manner in which information is maintained and flows through our systems, and how best to manage the lifecycle of information in light of the volume and complexity of the systems in our infrastructure.

YOUR INFORMATION CHOICES

You may have certain choices when it comes to how we collect and use your personal information:

Account information: Please visit your Particle account to view and update certain personal information associated with your account, such as your contact information.
Email marketing: If at any time you no longer wish to receive email marketing communications from us, you can click the unsubscribe link at the bottom of any email.
SMS marketing: If at any time you no longer wish to receive SMS marketing communications from us, you can reply “STOP” to the SMS or follow other opt-out instructions provided to you.

CHILDREN’S INFORMATION

We do not knowingly or intentionally gather personal information about children. If we have inadvertently collected the personal information of a child under the 16, or equivalent minimum age depending on jurisdiction, a parent or guardian of that child may contact us at [email protected] to request that we delete the information from our records or otherwise cease the use of that information.

UPDATES TO THIS PRIVACY POLICY

We may make changes to this Privacy Policy from time to time. The date at the top of this Privacy Policy indicates when this Privacy Policy was last revised. We may also notify you in other ways from time to time about the collection, use, and disclosure of your personal information described in this Privacy Policy.

INDIVIDUALS IN THE EEA, SWITZERLAND, OR THE UK

The EU General Data Protection Regulation (“GDPR”) and the UK GDPR provide individuals in the European Economic Area (“EEA”), United Kingdom, and Switzerland the rights to receive notice regarding the purposes for which your data are processed and the legal basis for our processing, the categories of recipients of your personal information, whether the personal information will be transferred outside these jurisdictions, and the criteria we use to determine how long to retain your data. You also have the rights to receive notice about your rights. These rights apply to all individuals in these locations, regardless of whether you are a customer, business contact, or member of the workforce.

The GDPR and UK GDPR defines “Persona Data” to mean “any information that is linked or reasonably linkable to an identified or identifiable natural person.” When we use the term “personal information” in our Privacy Policy, it includes Personal Data covered by this definition.

Right to be Informed

The general section of this Privacy Policy describes the types of personal information we collect, how we collect it, and how we use it in categories that are easy to understand. For information on our retention practices, please see the RETENTION OF YOUR PERSONAL INFORMATION section above.

We rely on a variety of legal bases to process your personal information. We mainly process your personal information because it is necessary to perform our agreement to provide the Services to you or because the processing is necessary for our legitimate interests where those interests do not override your fundamental rights and freedoms related to data privacy. Where we rely on legitimate interest as this lawful basis, our legitimate basis is promoting our business, improving the Services we offer to you and your experience when you interact with us, and ensuring effective operational management and internal administration of our business and the exercise of our rights. In limited circumstances, we may rely on other legal bases for processing your personal information, including when necessary to comply with a legal obligation or where you provide your consent for processing.

Certain personal information may be transferred or processed in the United States and other countries where we have facilities or in which we engage service providers. The laws in the U.S. regarding personal information may be different from the laws of your state or country. Any such transfers will comply with safeguards as required by relevant law. By using the Services, you consent to the collection, international transfer, storage, and processing of your data.

Right of access, right to data portability, right to request correction, and right to request deletion of information

You have the right to request that we:

Give you access to, and a copy of your personal information we hold in our systems;
Correct or update inaccurate or incomplete personal information we have about you; and
Delete all or some of the personal information we have about you (e.g., if it is no longer needed to provide Services to you).

You may submit a request to exercise our rights to know/access or delete your information by filling out a Privacy Request Form available at [URL] or by emailing us at [email protected]. We may have reason under the law why we do not have to comply with your request, or why we may comply with in a more limited way than you anticipated. If we do, we will explain that to you in our response. Please not that, in order to verify your identity, we may require you to provide us with information prior to accessing any records containing information about you.

Right to object, withdraw consent, and restrict processing

You have the right to request that we:

Stop using, and ensure that all third parties stop using, some or all of your personal information (e.g., if we no longer have a legal basis to process it);
Stop contacting you with promotional messages.

You may exercise these rights by emailing us at [email protected].

Right to opt out of automated processing

You have the right to opt-out of automated processing where such processing would produce legal or other similarly significant effects. However, we do not use personal information of residents of the EEA, Switzerland, and United Kingdom to make automated decisions about you that would have these effects.

Lodging a Complaint

You have the right to lodge a complaint about our data collection and processing actions with the supervisory authority concerned. Contact details for data protection authorities are available at: https://ec.europa.eu/newsroom/article29/items/612080.

ADDITIONAL NOTICE: CALIFORNIA RESIDENTS

As a California resident, you have the right to receive certain disclosures regarding our collection, use, and disclosure of your personal information, as well as certain rights to your personal information. California residents will not receive discriminatory treatment for exercising these privacy rights.

Collection, Use, and Retention

The following chart describes our practices with regard to the collection, use, and retention of your information. The categories we use to describe the information are those listed in California law. Some of the categories include very different types of information within the same category and certain personal information may fall into multiple categories. How we use and how long we keep the information within each category will vary, and not all types of information within the same category will be used for all the purposes listed.

California law also requires us to provide information regarding the criteria we use to determine the length of time for which we retain personal information. We utilize the following criteria to determine the length of time for which we retain personal information:

The business purposes for which the information is used, and the length of time for which the information is required to achieve those purposes;
Whether we are required to retain the information type in order to comply with legal obligations or contractual commitments, to defend against potential legal claims, or as otherwise necessary to investigate theft or other activities potentially in violation of our policies and procedures applicable to you or against the law, to ensure a secure online environment, or to protect health and safety;
The privacy impact of ongoing retention on you; and
The manner in which information is maintained and flows through our systems, and how best to manage the lifecycle of information in light of the volume and complexity of the systems in our infrastructure.

Individual pieces of personal information may exist in different systems that are used for different business or legal purposes. A different maximum retention period may apply to each use case of the information. Certain individual pieces of information may also be stored in combination with other individual pieces of information, and the maximum retention period may be determined by the purpose for which that information set is used.

Category	Required Information
Personal identifiers	Examples of what we collect: Name, email address, billing and shipping addresses, telephone numbers, unique identifiers (such as those assigned in cookies). Sources: Directly from you; from third parties. Purpose of collection and use: All purposes are listed in HOW WE USE YOUR INFORMATION. Retention Considerations: Certain information is maintained throughout our relationship with you in order to provide the Services. When we no longer provide Services to you, we may still need this information for a period of time for business and legal requirements.
Personal information categories listed in the California Customer Records statute	Examples of what we collect: Telephone number, credit card number. Sources: Directly from you; from third parties. Purpose of collection and use: All purposes are listed in HOW WE USE YOUR INFORMATION. Retention Considerations: Certain information is maintained throughout our relationship with you in order to provide the Services. When we no longer provide Services to you, we may still need this information for a period of time for business and legal requirements.
Internet or other similar network activity	Examples of what we collect: Device ID, browsing history, search history, IP address, interaction with a website. Sources: Automatically from you; third parties. Purpose of collection and use: All purposes are listed in HOW WE USE YOUR INFORMATION. Retention Considerations: Internet or other similar network activity is typically deleted at regular intervals when the information is no longer necessary for the purpose for which it was collected.
Commercial information	Examples of what we collect: Transaction information, products purchased. Sources: Directly from you; third parties Purpose of collection and use: All purposes are listed in HOW WE USE YOUR INFORMATION. Retention considerations: The law requires us to maintain purchase records for a period of time, which varies by state.
Inferences	Examples of what we collect: Interests, preferences, consuming tendencies. Sources: Created about you based on information you provide; third parties. Purpose of collection and use: All purposes are listed in HOW WE USE YOUR INFORMATION. Retention considerations: Certain information is maintained throughout the life of our relationship with you in order to provide the Services.

Sale, Sharing, and Other Disclosure of Personal Information and Right to Opt-Out

Any category of personal information listed in the chart above may be disclosed for a business purpose to service providers and contractors, which are companies or individuals that we engage to conduct activities on our behalf.

California law also requires us to provide you with information regarding the parties to whom we sell (disclosing personal information for monetary or other benefit) or share (disclosing personal information for purposes of cross-context behavioral advertising) your information.

Like many companies, we use cookies and other tracking technologies to improve our Services, optimize and analyze your experience, and serve ads relevant to your interests. Some of these uses may be considered a “sale” or “sharing” of your personal information. Below are the types of information we sell or share via cookies:

Identifiers: Analytics and advertising partners
Internet or other similar network activity: Analytics and advertising partners

Additional Rights

As a California resident, you have the right to request that we provide access to information we collect, as well as the right to request that we delete certain personal information we have collected from you. If we hold personal information that is inaccurate, you have the right to request that we correct this information. You or your authorized agent may submit a request to exercise your rights by emailing us at [email protected].

For your security and to ensure unauthorized third parties do not access your personal information, we will require you to verify your identity before we can act on your request. We do this by asking you to provide personal identifiers we can match against information we may have collected from you previously and confirm your request using the email account stated in the request.

There may be information we will not return in response to your access request, such as information that would interfere with legal requirements. Similarly, there may be reasons why we cannot comply with your deletion request, such as the need to keep your personal information to provide you service or to fulfill a legal obligation.

While you also have the right to limit use of your sensitive personal information, we only process your sensitive personal information for purposes allowed by law and therefore do not offer an option to limit further processing.

ADDITIONAL U.S. STATE NOTICES

YOUR RIGHTS UNDER THE LAWS OF CERTAIN U.S. STATES

The laws of certain U.S. states provide their residents with certain rights to access, delete, and correct certain personal information we collect about you, as well as to restrict the use of personal information for personalized advertising, restrict the “sale” of personal information, and control our use of personal information considered sensitive. We will not discriminate against you for exercising these options.

Residents of the State of Nevada have the right to opt out of the sale of certain pieces o of their information to third parties who will sell or license their information to others. If you are a Nevada resident and would like to make such a request, please contact us at [email protected].

If you are a resident of one of the following states, you may have certain rights under the laws of your state:

Colorado
Connecticut
Delaware
Iowa
Minnesota
Montana
Nebraska
New Hampshire
New Jersey
Oregon
Texas
Tennessee
Utah
Virginia

Right to Know and Request Access to, Correction of and Deletion of Personal Information

You have the right to request access to personal information collected about you in a portable format and to receive information regarding the source of that information, the purposes for which we collect it, and the third parties and service providers with whom we share it. You also have the right to request we correct inaccurate personal information and to request, in certain circumstances, that we delete any personal information that we have collected directly from you.

You may submit a request to exercise your rights to know/access, correct, or delete your personal information by contacting us at [email protected]. You may authorize another individual or business, called an authorized agent, to make requests on your behalf through these means.

In order to process your request, we must verify your identity. We do this by asking you to provide personal information we can match against information we may have collected from you previously and confirm your request using the email account stated in the request.

We may have a reason under the law why we do not have to comply with your request, or why we may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response.

Right to Opt-Out of Personalized Advertising and Sale to Third Parties

You have the right to opt out of the use and disclosure of your personal information for the purposes of selecting or delivering based on your activity over time and across different online platforms. U.S. residents also have the right to opt out of certain disclosures that are considered “sales” under applicable state laws. Please note, we do not “sell” your personal information as defined under relevant law.

Right to Opt-Out of Automated Decision-making

Residents of certain states have the right to opt-out of automated profiling in certain instances where such processing would produce legal or other similarly significant effects. At this time, we do not use personal information to make automated decisions about you in any situations where you may have a legal right to opt-out.

Right to Request Further Review

If we deny your request you have the right to appeal our decision. You can request further review by emailing us at [email protected].