Do Not Sell or Share My Personal Information
Your Privacy Rights
Consumers covered by the CCPA and CPRA enjoy several enforceable rights, and this page focuses on the one that lets you say no to the sale and sharing of your data. That right can be exercised whether or not you have an account with us, and it applies to information collected both online and offline. The Ordinary will confirm receipt of your request and process it within the timeframes required by law.
Information We Collect
The data we handle falls into a handful of familiar buckets. Contact and order details come straight from you when you check out; device and browsing signals are captured automatically as you navigate the site; and analytics or advertising partners may supply aggregated insights about how visitors interact with our pages. We do not intentionally collect sensitive categories of data such as government IDs or health records.
We Do Not Sell Your Information
We do not sell or rent your personal data to anyone, full stop. The only circumstances in which your information leaves our systems involve trusted service providers who process it strictly on our behalf — such as our payment processor and shipping carriers — and advertising partners whose data sharing you can switch off through the opt-out below.
How to Opt Out
Because opt-out preferences are commonly stored as cookies, they are specific to the browser and device on which you make the selection. To opt out everywhere, repeat the process on each device you use, or contact The Ordinary to apply an opt-out to your customer profile directly. We also automatically respect Global Privacy Control signals as an alternative to the manual link.
How to Submit a Request
Beyond the opt-out itself, you may submit broader privacy requests — such as asking to know, delete, or correct your data — by emailing The Ordinary at support@shipvex.shop. Please include your full name, the email address linked to your orders, and a clear description of the request so we can route it correctly.
Verifying Your Identity
If you use an authorized agent to submit a request on your behalf, The Ordinary may require both proof of the agent's authorization and direct verification of your own identity. This dual check protects you from agents acting without genuine permission. For requests you make yourself, a simple match of your name and order details against our records is generally sufficient.
Response Timeframes
The Ordinary follows the response deadlines set out in California privacy law. That means confirming receipt of your request in short order and delivering a substantive response within forty-five days. If we need longer because your request is complicated or you have made several requests, we will notify you and complete our work within ninety days at most.
Contact Us
For any concern regarding your personal information or the choices described above, please get in touch. We staff our support line Monday-Friday from 9:00 AM to 5:00 PM.